$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/937a15a8-1753-3ab4-a7e6-aa7086698147.roa File: 937a15a8-1753-3ab4-a7e6-aa7086698147.roa (raw, json) Hash identifier: qQ0mnMLJs7EypaVXOMU2+QT5kP/ERwf6h24EIyl66R0= Subject key identifier: B9:C5:E9:11:7D:AD:2F:AA:9A:0E:2E:CA:F9:99:B4:07:3C:92:A0:8B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77E53F305FC49136CC700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/937a15a8-1753-3ab4-a7e6-aa7086698147.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 10515 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7e:53:f3:05:fc:49:13:6c:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=305a0d93-3503-49e1-8196-aea7a719685d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ab:59:d6:e6:d2:1d:c7:a7:e5:43:dd:28:98: 04:38:84:f5:af:95:b7:f8:99:5f:02:16:40:bf:35: 6d:a5:21:75:59:f6:03:31:79:4f:66:66:da:73:f8: 19:a2:85:a2:99:c0:3b:02:c4:68:8d:95:f5:c4:3c: fb:1c:7f:09:62:4e:c4:48:d2:ee:e5:90:74:09:a9: ee:33:03:3f:91:19:17:d7:19:d6:6d:7c:30:e2:6a: 01:ad:f7:02:98:e8:78:66:cb:5b:60:27:96:97:a2: 2d:bb:7d:41:86:4a:5f:cd:86:1e:03:66:bb:ac:da: 43:a3:f0:57:d9:ba:b7:c1:ea:da:9a:1b:92:60:ce: 3a:e3:74:c7:ab:bf:cd:f2:c1:cc:62:64:04:97:f4: 90:93:9b:20:11:a5:5b:4d:e4:94:25:cd:c7:ea:0d: 34:22:4b:21:77:64:58:63:74:4c:08:23:4c:e5:17: 2d:87:48:52:37:f0:a7:c0:98:32:ee:29:8e:96:84: f2:ff:8a:12:93:18:64:ca:6f:e0:b0:d1:db:12:1f: 93:d2:26:29:7a:99:67:2a:49:5f:66:9c:24:d2:03: f5:e2:44:b0:af:fe:62:3e:75:47:43:da:e7:69:d1: 8c:89:d3:56:6a:ce:bb:ec:c5:0f:a8:6c:56:6d:58: 21:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C5:E9:11:7D:AD:2F:AA:9A:0E:2E:CA:F9:99:B4:07:3C:92:A0:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/937a15a8-1753-3ab4-a7e6-aa7086698147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1c:47:12:58:35:bf:f1:59:18:d0:87:40:b3:b9:da:50:3a: 65:31:59:6b:49:50:80:06:4d:7e:12:e1:bb:a3:36:95:c5:0a: c6:02:84:4c:0b:e7:c9:d2:73:55:c4:32:74:fc:c3:77:49:6a: be:bc:1d:a6:95:98:e8:8b:37:87:60:8f:1c:79:a9:af:80:09: 74:eb:8e:31:32:d2:2e:50:48:3f:be:5e:4c:ab:48:69:6e:e8: dc:cd:aa:cb:88:b8:83:89:ab:24:29:1f:b2:df:40:04:59:c3: 4c:8d:0b:04:e2:86:06:01:4f:ed:56:a6:27:96:99:3c:26:e4: ae:67:43:53:f7:75:93:79:e2:c7:e5:72:f8:3a:f3:f9:c8:bf: 96:1d:a1:f3:30:9f:f2:11:e1:fa:6d:01:6c:78:f2:63:28:ae: 45:7d:87:a4:97:03:b0:6f:4d:40:18:2e:e8:0d:6e:c6:6c:af: 36:84:9d:a4:89:04:11:ea:45:02:3b:05:f4:99:26:3b:cf:89: ad:27:32:90:1e:45:40:e4:19:ef:a7:e7:8f:67:f2:b2:d6:4f: c0:d1:f4:50:a8:8c:6c:f3:90:2e:1b:0c:db:c8:e7:a4:7b:2b: a9:2e:94:3d:70:2d:cc:47:ee:e3:5f:8e:7c:64:c3:69:c5:6e: f2:80:d4:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx35T8wX8SRNsxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MzA1YTBkOTMtMzUwMy00OWUxLTgxOTYtYWVhN2E3MTk2ODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KtZ1ubSHcen5UPdKJgEOIT1r5W3+JlfAhZA vzVtpSF1WfYDMXlPZmbac/gZooWimcA7AsRojZX1xDz7HH8JYk7ESNLu5ZB0Canu MwM/kRkX1xnWbXww4moBrfcCmOh4ZstbYCeWl6Itu31BhkpfzYYeA2a7rNpDo/BX 2bq3weramhuSYM4643THq7/N8sHMYmQEl/SQk5sgEaVbTeSUJc3H6g00Ikshd2RY Y3RMCCNM5Rcth0hSN/CnwJgy7imOloTy/4oSkxhkym/gsNHbEh+T0iYpeplnKklf Zpwk0gP14kSwr/5iPnVHQ9rnadGMidNWas677MUPqGxWbVgh9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnF6RF9rS+qmg4uyvmZtAc8kqCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTM3YTE1YTgtMTc1My0z YWI0LWE3ZTYtYWE3MDg2Njk4MTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADscRxJYNb/xWRjQh0CzudpQOmUxWWtJUIAGTX4S4bujNpXFCsYChEwL 58nSc1XEMnT8w3dJar68HaaVmOiLN4dgjxx5qa+ACXTrjjEy0i5QSD++XkyrSGlu 6NzNqsuIuIOJqyQpH7LfQARZw0yNCwTihgYBT+1WpieWmTwm5K5nQ1P3dZN54sfl cvg68/nIv5YdofMwn/IR4fptAWx48mMorkV9h6SXA7BvTUAYLugNbsZsrzaEnaSJ BBHqRQI7BfSZJjvPia0nMpAeRUDkGe+n549n8rLWT8DR9FCojGzzkC4bDNvI56R7 K6kulD1wLcxH7uNfjnxkw2nFbvKA1NI= -----END CERTIFICATE-----Generated at Wed Oct 29 20:10:32 2025 by rpki-client