$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9117add-ffbb-3991-a613-c683960a13a5.roa File: a9117add-ffbb-3991-a613-c683960a13a5.roa (raw, json) Hash identifier: /y/eLqNfMs0BizFyKDZOnNJCCGhgB+LajrVGvLoBRWQ= Subject key identifier: DF:C3:F9:2F:2B:7E:31:59:F3:14:34:6B:18:27:4D:6E:4D:09:6E:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB13DC828489153FE4E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9117add-ffbb-3991-a613-c683960a13a5.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396617 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b1:3d:c8:28:48:91:53:fe:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=bb9b2aa0-78af-413d-879a-4e236b58eb4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:ed:4b:d3:7a:d3:14:66:a8:10:2c:84:25: 84:17:68:9d:f2:4f:de:39:23:03:27:eb:46:71:d5: 65:e3:7a:7c:1e:95:a3:36:ba:53:78:60:5d:1b:5d: f6:4d:97:bd:63:3a:91:d9:02:17:15:7c:bd:b0:14: 1d:47:48:71:50:40:a6:58:d8:a5:82:b4:07:04:18: 69:32:c7:e1:73:53:4a:f7:0e:d2:dc:8f:ee:42:d1: 84:5f:63:83:26:83:c4:da:bd:61:3b:7d:7d:81:8d: 1c:97:12:0a:a0:81:e7:7a:d5:c0:41:53:a8:8b:2f: 7a:56:ca:d8:13:75:64:e1:11:bb:4a:6d:b1:a3:75: 78:93:4d:49:86:16:2e:6c:eb:22:8a:99:52:e7:fe: 76:8c:b6:eb:8e:9f:4a:33:bf:a4:c7:c4:cc:2d:5a: 68:91:59:b5:e9:74:4f:d3:32:f1:37:2a:d4:e0:15: bb:6d:2c:ac:b4:38:36:dd:fe:9a:63:44:03:f6:de: 97:da:9a:9a:a9:0a:f3:82:06:df:36:fa:3d:af:cb: f1:5a:50:fa:14:62:3c:93:8a:39:2e:39:94:10:08: ae:37:94:b5:26:fa:a6:ab:c6:31:b9:c8:6e:02:48: e7:f5:bd:c8:54:b5:61:f5:0c:eb:39:14:4e:a6:6b: 42:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C3:F9:2F:2B:7E:31:59:F3:14:34:6B:18:27:4D:6E:4D:09:6E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9117add-ffbb-3991-a613-c683960a13a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d2:01:19:2f:07:24:83:fa:2a:73:03:32:4b:6b:ba:9f:05: fb:4d:0b:3a:f6:90:71:a3:28:ba:b1:4b:15:26:82:f5:9d:76: cb:30:7a:ca:54:63:6d:ff:64:6e:bf:2e:c6:bc:91:4a:36:03: 30:c8:e1:20:00:d7:4d:d5:ef:93:13:14:f1:8e:d1:2a:5f:d0: 1d:4e:5a:4b:bb:6a:fc:4f:86:eb:ae:5a:66:bd:32:36:13:f6: 48:76:87:74:d0:8f:f2:d7:5c:38:85:fb:5e:2f:b9:a9:b4:90: 39:b2:98:56:0f:33:3f:d5:46:2b:3d:58:26:4e:bc:00:4c:47: 2c:69:8b:eb:52:71:29:90:78:c3:55:d1:ed:c1:cc:84:38:1d: 45:db:1f:b6:e6:2a:0a:23:44:75:5a:cd:f8:0c:b6:e9:be:dd: 99:4b:d3:5e:f5:d2:f6:41:3f:bb:2c:32:ec:1b:f1:cb:b0:a6: e2:4d:98:d6:e7:b9:22:74:06:23:03:83:50:b3:dd:a5:16:a5: 52:19:8f:c9:e6:08:8a:34:a0:38:b3:6d:0f:23:20:be:22:88: 56:4b:0d:cd:5e:52:0a:e3:e5:bd:eb:42:33:57:c1:48:10:dc: 61:6e:ef:0d:0d:b2:2e:0e:41:11:fc:01:91:46:1b:69:33:2e: ae:f0:09:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLE9yChIkVP+ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YmI5YjJhYTAtNzhhZi00MTNkLTg3OWEtNGUyMzZiNThlYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcjtS9N60xRmqBAshCWEF2id8k/eOSMDJ+tG cdVl43p8HpWjNrpTeGBdG132TZe9YzqR2QIXFXy9sBQdR0hxUECmWNilgrQHBBhp Msfhc1NK9w7S3I/uQtGEX2ODJoPE2r1hO319gY0clxIKoIHnetXAQVOoiy96VsrY E3Vk4RG7Sm2xo3V4k01JhhYubOsiiplS5/52jLbrjp9KM7+kx8TMLVpokVm16XRP 0zLxNyrU4BW7bSystDg23f6aY0QD9t6X2pqaqQrzggbfNvo9r8vxWlD6FGI8k4o5 LjmUEAiuN5S1Jvqmq8YxuchuAkjn9b3IVLVh9QzrORROpmtCAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN/D+S8rfjFZ8xQ0axgnTW5NCW5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTkxMTdhZGQtZmZiYi0z OTkxLWE2MTMtYzY4Mzk2MGExM2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBt0gEZLwckg/oqcwMyS2u6nwX7TQs69pBxoyi6sUsVJoL1nXbLMHrK VGNt/2Ruvy7GvJFKNgMwyOEgANdN1e+TExTxjtEqX9AdTlpLu2r8T4brrlpmvTI2 E/ZIdod00I/y11w4hfteL7mptJA5sphWDzM/1UYrPVgmTrwATEcsaYvrUnEpkHjD VdHtwcyEOB1F2x+25ioKI0R1Ws34DLbpvt2ZS9Ne9dL2QT+7LDLsG/HLsKbiTZjW 57kidAYjA4NQs92lFqVSGY/J5giKNKA4s20PIyC+IohWSw3NXlIK4+W960IzV8FI ENxhbu8NDbIuDkER/AGRRhtpMy6u8AkK -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:38 2025 by rpki-client