$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa File: a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa (raw, json) Hash identifier: CxZbnSqRYKOx3AUtMEYeFvCE9yVf5sz+IFhnj+vw7T8= Subject key identifier: 79:75:3D:80:88:38:1D:23:C3:93:0E:4C:4C:01:1E:97:A4:20:ED:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB5222C833C9E26D115C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 36624 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b5:22:2c:83:3c:9e:26:d1:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=11b39d0e-899e-490d-970c-28b878e92ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:d0:44:56:44:5d:61:98:af:1b:f0:19:14: fb:71:e2:7d:25:47:3c:94:0b:da:eb:f6:49:73:98: d2:e8:88:48:d1:6f:2e:68:9b:c0:33:09:00:5e:42: d9:53:e4:ce:1e:5b:0d:b5:04:88:96:b8:cc:4e:cb: c2:6e:7a:5b:8a:ee:8a:85:1e:e1:f9:c4:98:ff:ef: d7:04:3f:3c:27:75:03:b2:0b:d7:ad:5e:b1:26:b5: eb:db:c1:e1:bc:11:b1:5d:9b:d3:a1:31:80:81:b0: d4:87:04:a0:2f:95:54:2e:d8:96:ae:cc:9d:28:d4: 26:fe:a1:e1:2f:fd:fe:85:0d:0c:56:72:d6:27:eb: 71:bf:2a:b0:27:e7:d7:72:a0:39:4a:2b:e2:7a:cd: 0c:43:db:56:99:68:ec:2a:ac:28:1b:a6:ce:70:bf: ea:61:f6:03:4b:4a:db:73:56:f6:ac:75:c7:96:81: 8c:b6:06:33:30:f8:fd:7d:c5:82:40:bf:1f:bc:eb: 94:de:78:79:42:ae:bc:49:09:22:5c:ea:79:a2:cf: 3a:6e:47:fa:0d:2d:d5:4e:89:c1:22:a9:65:c3:d0: 3b:ae:b8:c7:f0:d3:83:1d:8f:90:26:e3:6c:df:97: 16:57:db:08:ce:4f:e0:1f:81:74:d6:61:59:d4:34: 9a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:75:3D:80:88:38:1D:23:C3:93:0E:4C:4C:01:1E:97:A4:20:ED:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b5:31:7a:8b:af:15:75:8e:0c:03:db:98:7f:25:64:76:48: 73:80:84:e6:ad:df:91:93:d4:5d:1b:69:27:21:18:28:fc:1e: 53:22:a1:50:7f:16:60:1d:64:ff:4d:8e:ad:f1:cb:ac:c4:3a: 06:31:87:b9:09:0c:49:2e:65:a2:ba:13:96:10:b7:26:15:dc: 39:58:f5:fc:49:4a:01:55:55:22:7a:90:ee:8a:31:1d:dd:ee: 49:74:bc:c7:ea:e2:b2:25:0d:f8:51:fa:4d:ad:01:dc:f5:27: 19:b5:96:69:e1:98:8c:73:47:06:05:38:75:48:f7:b7:fe:b2: 56:53:5b:46:e5:0c:c8:07:fb:fd:b4:0d:b7:df:6e:fb:9a:88: 1f:8c:10:08:28:46:27:89:40:dd:05:b6:e1:6b:37:23:aa:7f: 6e:fd:94:46:d1:ff:6e:1a:de:71:76:46:1a:3a:8b:20:56:c6: 0c:cc:3d:97:f0:4e:63:80:1b:b1:80:81:9a:b1:cf:6c:ff:be: db:f4:8c:79:26:79:b6:bf:66:12:4c:ff:5d:4e:51:a2:ee:ff: 42:35:c8:4a:9a:84:e0:f1:ac:09:75:9f:e5:e2:69:95:77:c3: 83:b8:3f:1d:86:c6:f3:b2:3a:e5:01:08:29:fd:e8:31:30:38: 8b:83:9e:cf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLUiLIM8nibRFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTFiMzlkMGUtODk5ZS00OTBkLTk3MGMtMjhiODc4ZTkyZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO3QRFZEXWGYrxvwGRT7ceJ9JUc8lAva6/ZJ c5jS6IhI0W8uaJvAMwkAXkLZU+TOHlsNtQSIlrjMTsvCbnpbiu6KhR7h+cSY/+/X BD88J3UDsgvXrV6xJrXr28HhvBGxXZvToTGAgbDUhwSgL5VULtiWrsydKNQm/qHh L/3+hQ0MVnLWJ+txvyqwJ+fXcqA5Sivies0MQ9tWmWjsKqwoG6bOcL/qYfYDS0rb c1b2rHXHloGMtgYzMPj9fcWCQL8fvOuU3nh5Qq68SQkiXOp5os86bkf6DS3VTonB Iqllw9A7rrjH8NODHY+QJuNs35cWV9sIzk/gH4F01mFZ1DSaZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHl1PYCIOB0jw5MOTEwBHpekIO03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU3ZWYzZjYtNjZhMy0z YzdkLTljOTctMWZlNWQ2YTQzOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBOtTF6i68VdY4MA9uYfyVkdkhzgITmrd+Rk9RdG2knIRgo/B5TIqFQ fxZgHWT/TY6t8cusxDoGMYe5CQxJLmWiuhOWELcmFdw5WPX8SUoBVVUiepDuijEd 3e5JdLzH6uKyJQ34UfpNrQHc9ScZtZZp4ZiMc0cGBTh1SPe3/rJWU1tG5QzIB/v9 tA233277mogfjBAIKEYniUDdBbbhazcjqn9u/ZRG0f9uGt5xdkYaOosgVsYMzD2X 8E5jgBuxgIGasc9s/77b9Ix5Jnm2v2YSTP9dTlGi7v9CNchKmoTg8awJdZ/l4mmV d8ODuD8dhsbzsjrlAQgp/egxMDiLg57P -----END CERTIFICATE-----Generated at Wed Oct 29 20:03:10 2025 by rpki-client