$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a470a0a7-32d7-3bb8-be68-42d66277d66d.roa File: a470a0a7-32d7-3bb8-be68-42d66277d66d.roa (raw, json) Hash identifier: +2t5aHtjn1ZdxC1j0GHx7LuTgIOgwN3fFVgVvP4gvNc= Subject key identifier: B5:43:24:08:55:EF:4A:A5:EF:21:E8:07:6E:58:95:E7:CC:77:0D:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77C46A6CA7D9C67210680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a470a0a7-32d7-3bb8-be68-42d66277d66d.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396611 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7c:46:a6:ca:7d:9c:67:21:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=df81a731-2c21-438d-8375-e7910bd3fa0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:24:4d:8d:fc:5a:86:ef:99:e8:8e:14:53:94: bd:3e:63:0c:32:bb:36:d7:71:20:e9:2c:46:79:5a: f4:9a:2f:8b:89:7a:54:dd:58:77:02:3f:c4:ff:c3: c0:68:06:7c:c8:4f:d3:a4:32:39:82:e2:31:7d:51: 5c:d3:4a:9a:a7:1e:67:fe:f1:d7:a9:5d:07:9a:ee: 11:c4:6e:17:09:5d:d0:0c:5c:73:1d:ad:27:59:04: a0:5d:53:cb:af:05:a2:3c:25:35:1c:bb:91:8f:a2: 22:7c:00:9c:38:09:1a:5a:35:ae:97:bf:6b:35:31: 39:b8:2c:1d:99:82:05:e9:99:92:e2:63:47:03:c7: af:a5:07:08:80:8c:51:58:e3:bf:82:8c:61:34:f0: 72:3a:47:64:04:b1:55:d2:58:33:62:57:51:30:9a: 14:8d:98:ca:0a:da:d0:38:43:67:15:e7:56:fe:e7: de:bd:72:4a:ad:49:af:a2:48:9d:a1:fb:22:4a:e5: 12:a3:d1:7d:ad:54:de:f6:b7:4a:84:3f:5a:c7:c9: 22:90:30:8c:92:df:47:4f:31:c6:89:20:11:42:5e: 22:24:d5:75:8a:19:4b:a8:72:9b:4d:e9:df:e6:59: b0:56:e8:07:b8:04:94:bb:e2:83:3a:46:10:c3:be: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:43:24:08:55:EF:4A:A5:EF:21:E8:07:6E:58:95:E7:CC:77:0D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a470a0a7-32d7-3bb8-be68-42d66277d66d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:27:78:b0:03:b9:76:b0:53:94:1c:70:97:8c:65:8b:f1:35: e6:1c:03:76:5f:2f:d3:e8:bc:36:7e:a2:71:de:b6:ba:5d:9b: ab:63:a6:e3:85:75:4a:c8:24:94:5e:a1:32:f9:c4:88:8f:65: 31:54:43:24:a9:f3:32:82:c2:00:82:27:ab:b1:19:3c:33:7d: 1d:65:cc:59:7b:4a:39:49:11:ef:f8:f6:b3:b3:81:a7:06:90: c0:38:a5:73:f9:f9:60:25:59:c2:3b:81:ee:6a:3c:9e:14:d9: 94:3b:64:97:32:fc:ec:bc:a7:7d:e4:61:5f:1f:1f:12:e3:1c: 66:d0:6e:3d:fa:ad:3c:65:eb:cc:b1:ed:9c:df:94:e2:ae:ce: 28:d0:60:14:b6:da:4c:01:9e:74:b1:82:31:94:46:a8:c0:c6: 25:1c:86:dc:05:3f:7b:80:43:c4:ab:a8:6c:c6:e2:86:de:b7: 63:5e:ba:56:7a:d4:94:e0:79:f3:9b:9b:d1:6a:de:de:f0:15: 93:91:fe:1a:e0:7b:37:35:22:46:3e:87:0c:8d:e5:7b:54:d6: 84:cc:6a:d1:3e:31:49:42:64:1f:96:41:70:08:42:46:6d:9b: 6d:f2:9d:46:cc:a9:3c:d4:55:2c:cc:04:5e:ec:c3:23:7b:4c: c4:0e:d9:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3xGpsp9nGchBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZGY4MWE3MzEtMmMyMS00MzhkLTgzNzUtZTc5MTBiZDNmYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiRNjfxahu+Z6I4UU5S9PmMMMrs213Eg6SxG eVr0mi+LiXpU3Vh3Aj/E/8PAaAZ8yE/TpDI5guIxfVFc00qapx5n/vHXqV0Hmu4R xG4XCV3QDFxzHa0nWQSgXVPLrwWiPCU1HLuRj6IifACcOAkaWjWul79rNTE5uCwd mYIF6ZmS4mNHA8evpQcIgIxRWOO/goxhNPByOkdkBLFV0lgzYldRMJoUjZjKCtrQ OENnFedW/ufevXJKrUmvokidofsiSuUSo9F9rVTe9rdKhD9ax8kikDCMkt9HTzHG iSARQl4iJNV1ihlLqHKbTenf5lmwVugHuASUu+KDOkYQw74CBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVDJAhV70ql7yHoB25YlefMdw1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQ3MGEwYTctMzJkNy0z YmI4LWJlNjgtNDJkNjYyNzdkNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkneLADuXawU5QccJeMZYvxNeYcA3ZfL9PovDZ+onHetrpdm6tjpuOF dUrIJJReoTL5xIiPZTFUQySp8zKCwgCCJ6uxGTwzfR1lzFl7SjlJEe/49rOzgacG kMA4pXP5+WAlWcI7ge5qPJ4U2ZQ7ZJcy/Oy8p33kYV8fHxLjHGbQbj36rTxl68yx 7ZzflOKuzijQYBS22kwBnnSxgjGURqjAxiUchtwFP3uAQ8SrqGzG4obet2NeulZ6 1JTgefObm9Fq3t7wFZOR/hrgezc1IkY+hwyN5XtU1oTMatE+MUlCZB+WQXAIQkZt m23ynUbMqTzUVSzMBF7swyN7TMQO2cc= -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:38 2025 by rpki-client