$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa File: ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa (raw, json) Hash identifier: IZ9oLTu3DJM2CkN0yurI5ntIaOI3nsRxr9IMao81F8M= Subject key identifier: 69:47:BD:FE:8D:52:56:6E:27:F2:92:B7:54:50:12:9C:B4:DB:B7:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB4C4F26E60BF57FF2E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 20362 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b4:c4:f2:6e:60:bf:57:ff:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=15c1c7b8-52f3-4d6a-b372-74117daba07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6f:7b:b5:be:cb:f3:eb:65:f8:7f:2c:ce:18: e6:75:3b:07:52:87:14:5d:77:a6:1c:70:c9:39:18: 2c:a3:0a:56:cf:b9:b9:25:b6:2e:e7:de:22:18:8e: 2b:37:e2:ee:ec:c8:53:b9:d2:4c:1e:54:12:45:2b: 5f:41:98:63:8c:88:d1:e3:03:5e:1e:7f:43:59:e9: 8e:cd:e8:1f:a7:4b:fe:a1:a1:4f:4b:f6:85:e2:71: 35:fd:a3:29:06:5b:31:d0:c9:c8:5d:6f:d3:1a:f5: dd:23:22:ea:b1:1a:09:c0:33:86:73:7e:3a:7e:3c: cd:ec:88:d0:64:2a:a1:13:ac:65:d1:15:3c:ae:e3: 3f:c2:74:5e:32:e0:31:e1:ca:3a:80:5f:1a:f0:ab: 09:0f:77:bd:b5:fc:02:69:44:17:ae:1e:b1:e0:d9: b7:fd:d8:2e:45:dc:d0:bb:db:43:b8:36:0b:26:2d: db:61:c3:b9:33:66:f7:a4:9c:42:ae:c4:06:a9:11: fe:6a:e0:c8:3d:01:65:1a:99:01:11:75:a2:54:7b: 69:0d:57:29:30:55:99:a1:f3:46:0b:c9:9d:fc:03: bf:f7:7f:97:3f:98:70:f9:ff:13:f1:58:2a:f7:11: c6:e0:5d:cd:d9:76:68:8d:41:30:e8:4c:e5:61:c6: 96:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:47:BD:FE:8D:52:56:6E:27:F2:92:B7:54:50:12:9C:B4:DB:B7:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f3:fb:d1:f8:ac:c7:5c:91:24:35:6a:ad:12:ea:5f:b9:ef: 20:4e:44:3b:bb:69:50:b6:ce:1a:9f:0a:0a:2f:93:3a:fa:ae: 3f:3e:f9:e4:46:4f:89:23:fe:21:7e:94:13:4e:f1:7b:95:91: 01:8b:de:95:63:9c:35:b4:fc:b7:e5:29:48:35:e7:9a:f4:d3: 04:7d:33:6a:06:f5:33:16:59:f3:58:df:1c:35:65:49:16:5e: d6:ad:ec:0c:a1:72:28:07:1b:6b:42:bd:66:a4:e2:14:1e:dc: 53:08:40:f9:b7:94:b0:a1:8d:98:14:d7:28:bc:74:13:d6:a6: ee:6b:8a:fd:8c:fd:23:50:0c:a3:66:84:76:82:57:64:73:92: 8f:b9:7c:10:12:81:cf:3c:0c:23:53:df:26:fc:b1:6d:04:92: 8a:4d:9d:4c:06:14:0b:5d:12:e1:0c:2a:df:13:85:6f:76:f0: f0:1a:3b:47:c8:94:b9:8b:e2:87:6d:28:d5:76:4b:b5:97:93: 12:0a:bd:f0:f1:6d:be:b8:74:16:16:35:b4:66:0d:9b:80:90: 45:b3:0f:17:15:75:90:d1:8e:f8:bd:05:53:e9:67:ad:45:7b: 58:cb:62:55:6e:23:51:56:17:20:5b:34:cb:20:26:c3:7c:72: 9d:d1:07:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLTE8m5gv1f/LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTVjMWM3YjgtNTJmMy00ZDZhLWIzNzItNzQxMTdkYWJhMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn297tb7L8+tl+H8szhjmdTsHUocUXXemHHDJ ORgsowpWz7m5JbYu594iGI4rN+Lu7MhTudJMHlQSRStfQZhjjIjR4wNeHn9DWemO zegfp0v+oaFPS/aF4nE1/aMpBlsx0MnIXW/TGvXdIyLqsRoJwDOGc346fjzN7IjQ ZCqhE6xl0RU8ruM/wnReMuAx4co6gF8a8KsJD3e9tfwCaUQXrh6x4Nm3/dguRdzQ u9tDuDYLJi3bYcO5M2b3pJxCrsQGqRH+auDIPQFlGpkBEXWiVHtpDVcpMFWZofNG C8md/AO/93+XP5hw+f8T8Vgq9xHG4F3N2XZojUEw6EzlYcaWmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGlHvf6NUlZuJ/KSt1RQEpy027e7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWU5ZDkzYmQtNTdmMC0z NzEzLTlkYjEtZjcxNThkOGNjYTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAY8/vR+KzHXJEkNWqtEupfue8gTkQ7u2lQts4anwoKL5M6+q4/Pvnk Rk+JI/4hfpQTTvF7lZEBi96VY5w1tPy35SlINeea9NMEfTNqBvUzFlnzWN8cNWVJ Fl7WrewMoXIoBxtrQr1mpOIUHtxTCED5t5SwoY2YFNcovHQT1qbua4r9jP0jUAyj ZoR2gldkc5KPuXwQEoHPPAwjU98m/LFtBJKKTZ1MBhQLXRLhDCrfE4VvdvDwGjtH yJS5i+KHbSjVdku1l5MSCr3w8W2+uHQWFjW0Zg2bgJBFsw8XFXWQ0Y74vQVT6Wet RXtYy2JVbiNRVhcgWzTLICbDfHKd0QdY -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:48 2025 by rpki-client