$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac135fba-77a0-3cb6-80ee-8ea2ca218a4a.roa File: ac135fba-77a0-3cb6-80ee-8ea2ca218a4a.roa (raw, json) Hash identifier: hdNVl++yASoKYhxPnfeONqcJcqzlJbu7uQWbYs49RMk= Subject key identifier: A7:6C:1F:8A:E9:90:99:DA:D0:19:8F:5B:94:64:76:DE:8F:B9:D7:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB0800917D625CF967D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac135fba-77a0-3cb6-80ee-8ea2ca218a4a.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396551 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b0:80:09:17:d6:25:cf:96:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=32cefea2-a4ab-42a3-8cd4-601328d46ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4f:9c:cd:65:29:c9:8a:95:4a:d4:4d:19:db: 82:2b:0e:39:0d:da:10:06:aa:bb:16:fb:24:66:a1: 65:9f:c7:59:21:39:fe:32:aa:ff:b0:3c:d4:99:b6: 03:1b:05:cc:f7:3e:33:1e:38:d5:fe:2a:72:f5:ed: e4:c5:50:96:b2:b2:34:79:21:65:2c:89:ff:d0:e1: 9d:3b:ee:26:21:15:48:47:b2:aa:a3:55:01:11:07: c7:7b:fb:9b:05:b4:37:65:89:70:7a:13:1a:f2:33: 1f:ae:1c:99:fc:65:b5:20:e2:82:74:1d:00:47:f0: 75:c3:ff:a1:4d:3a:9b:f3:85:d8:0e:1d:44:49:0e: 5a:e8:f5:23:a4:4a:4a:76:44:54:d3:83:25:24:15: f9:31:dc:26:5f:11:fa:a3:d9:28:9c:dc:39:39:1b: a2:53:08:43:83:0a:73:07:16:85:6f:ce:6a:4c:5c: f9:af:73:e4:41:33:52:fa:e7:fd:68:cf:c3:83:ea: 4a:3e:45:10:dc:b8:5b:2b:1d:29:44:3f:74:18:9f: 16:92:68:3c:ec:85:4d:09:a6:b7:38:56:48:02:78: 3e:c9:32:6a:30:71:67:0a:e4:8a:08:c9:55:93:a1: 00:a5:32:54:dc:cc:61:09:9b:57:71:b1:22:3b:11: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6C:1F:8A:E9:90:99:DA:D0:19:8F:5B:94:64:76:DE:8F:B9:D7:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac135fba-77a0-3cb6-80ee-8ea2ca218a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c4:28:70:c9:07:e3:98:7f:3f:e6:6d:99:ff:81:08:48:f7: c0:bb:77:24:45:63:2a:35:1b:99:ff:1e:38:be:a4:f7:63:4a: d6:8e:1b:88:16:1d:78:53:b5:ee:16:3d:d1:fa:a1:c6:a6:6c: 3f:9c:97:54:e1:dc:b4:a8:85:01:24:33:73:4d:21:e2:83:89: 15:fa:60:a2:04:2a:11:34:89:3a:8e:d0:2e:bc:5f:7c:3d:94: f3:b6:17:62:a1:3e:54:3e:b9:31:0e:87:98:e8:78:06:40:28: 52:13:a9:9a:dd:3d:04:59:17:8f:0f:6b:2d:ff:a0:e0:86:76: 15:f2:0a:4a:d1:1d:8f:c3:75:13:8e:b8:61:28:ad:b5:89:d4: 0d:e6:4f:8d:17:1a:7d:0c:e6:40:e3:7d:3a:65:ac:58:37:87: 58:38:07:d0:39:b3:b6:19:17:62:01:d4:8f:4b:5f:65:1a:a1: b9:fe:77:f6:d8:18:29:09:c3:56:92:23:c2:04:38:40:d8:c7: bd:f4:57:1d:a9:e5:e6:18:e0:4e:d1:1a:e6:55:a4:3c:8c:12: 1a:c1:a4:a8:82:37:00:69:dc:90:63:0e:52:15:a4:bf:76:9d: b0:93:4a:b4:3a:50:19:c8:be:6d:83:5e:3d:d6:8d:a6:2c:75: 62:20:ce:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLCACRfWJc+WfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MzJjZWZlYTItYTRhYi00MmEzLThjZDQtNjAxMzI4ZDQ2ZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE+czWUpyYqVStRNGduCKw45DdoQBqq7Fvsk ZqFln8dZITn+Mqr/sDzUmbYDGwXM9z4zHjjV/ipy9e3kxVCWsrI0eSFlLIn/0OGd O+4mIRVIR7Kqo1UBEQfHe/ubBbQ3ZYlwehMa8jMfrhyZ/GW1IOKCdB0AR/B1w/+h TTqb84XYDh1ESQ5a6PUjpEpKdkRU04MlJBX5MdwmXxH6o9konNw5ORuiUwhDgwpz BxaFb85qTFz5r3PkQTNS+uf9aM/Dg+pKPkUQ3LhbKx0pRD90GJ8Wkmg87IVNCaa3 OFZIAng+yTJqMHFnCuSKCMlVk6EApTJU3MxhCZtXcbEiOxHOPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKdsH4rpkJna0BmPW5Rkdt6PudeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWMxMzVmYmEtNzdhMC0z Y2I2LTgwZWUtOGVhMmNhMjE4YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoxChwyQfjmH8/5m2Z/4EISPfAu3ckRWMqNRuZ/x44vqT3Y0rWjhuI Fh14U7XuFj3R+qHGpmw/nJdU4dy0qIUBJDNzTSHig4kV+mCiBCoRNIk6jtAuvF98 PZTzthdioT5UPrkxDoeY6HgGQChSE6ma3T0EWRePD2st/6DghnYV8gpK0R2Pw3UT jrhhKK21idQN5k+NFxp9DOZA4306ZaxYN4dYOAfQObO2GRdiAdSPS19lGqG5/nf2 2BgpCcNWkiPCBDhA2Me99FcdqeXmGOBO0RrmVaQ8jBIawaSogjcAadyQYw5SFaS/ dp2wk0q0OlAZyL5tg1491o2mLHViIM4T -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:57 2025 by rpki-client