$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b17d1377-576a-3c58-92fe-73c7f4a9caa2.roa File: b17d1377-576a-3c58-92fe-73c7f4a9caa2.roa (raw, json) Hash identifier: G/nvQ/8sy6WiFpDG/stJhkyUlt7vxyZesuWhgodPGKQ= Subject key identifier: AC:6D:50:CF:13:B1:80:79:CD:D4:E5:65:AC:93:C6:62:D7:8E:F0:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77AC5C1C851D66AC86400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b17d1377-576a-3c58-92fe-73c7f4a9caa2.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396827 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7a:c5:c1:c8:51:d6:6a:c8:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=1105316a-3ce1-4d3d-8544-744c553022f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e6:f3:8f:db:fa:1e:77:c2:f1:b1:e0:69:88: e0:83:64:04:8c:b0:18:52:6b:2e:1b:eb:d3:96:71: ad:9a:86:06:f8:62:36:91:66:5c:05:ae:c1:66:41: 96:27:cc:d9:48:13:8e:ad:0f:c2:d5:48:c5:53:84: ac:dc:bc:0e:bd:6c:a9:fe:8f:0a:bf:8d:18:49:42: 1e:50:56:2d:bb:2f:bf:13:b6:8f:6d:ff:71:89:8d: 13:a7:d5:c4:5a:44:eb:d5:18:8e:34:e0:00:94:9c: 55:99:50:6e:f0:bd:a2:a7:30:96:63:d4:75:c7:58: 3f:65:eb:48:1a:42:48:3a:fd:2d:c6:f1:fe:e8:0c: 07:a4:7f:44:04:21:4a:f7:87:04:0f:53:6b:a7:f6: ec:40:ef:06:71:14:66:27:5c:b7:38:17:5a:b6:d9: c7:43:87:c1:83:61:69:f9:e8:f3:d1:b7:2e:31:24: 60:1a:79:37:fc:7f:7f:c5:1c:cc:cc:df:f0:9a:68: 8f:93:71:b3:08:86:c1:65:a6:ce:22:dc:d6:8b:9a: 0d:22:95:30:8e:74:50:c1:02:83:c9:b9:d7:fe:fb: 7f:7c:0e:37:24:ef:af:96:7a:e1:ee:bb:3c:2c:d9: dc:9f:a1:7e:d3:1b:52:bf:0a:12:04:e8:7d:76:2f: 99:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6D:50:CF:13:B1:80:79:CD:D4:E5:65:AC:93:C6:62:D7:8E:F0:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b17d1377-576a-3c58-92fe-73c7f4a9caa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:3c:d5:99:09:3d:e1:4e:1a:09:64:51:68:47:a5:5e:f0:be: 99:10:4d:b4:f1:f0:b0:16:6d:1a:ee:d5:5e:c4:2f:76:61:66: f4:35:29:1e:94:84:6f:47:47:5e:85:44:cf:8c:36:cd:49:16: 91:e5:e1:00:56:ab:c8:3a:64:a7:04:f9:38:7c:8c:d3:95:ea: e8:93:91:5c:9d:e1:1d:ac:46:d4:12:2d:5f:c2:a3:a7:bb:70: ca:18:63:29:42:2f:8b:3d:bb:c0:f1:ab:79:3b:75:35:f8:d0: 27:6c:bb:2c:4b:ea:f5:9e:aa:00:da:28:98:48:ba:08:82:f1: 79:70:9c:69:e1:93:21:04:57:bf:96:26:a1:38:e3:d9:c7:fd: 3f:b9:f1:d5:66:07:ce:c7:eb:e1:8d:af:17:fa:8a:cb:ee:4a: c7:98:03:ec:8a:eb:e3:d0:5d:ce:15:62:b6:a4:d4:fb:d3:46: dc:db:07:79:27:ef:30:71:20:ac:61:8e:98:93:6b:95:54:b1: 33:4a:fc:84:dc:7a:6c:61:b2:b0:c1:f6:4c:bb:75:82:a4:41: 65:36:40:92:a2:83:24:67:06:58:31:56:99:7a:3e:77:2f:2d: ae:c1:75:bd:a5:be:91:fc:dc:16:10:2b:c4:a4:ef:e9:37:e0: 89:1b:2f:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3rFwchR1mrIZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MTEwNTMxNmEtM2NlMS00ZDNkLTg1NDQtNzQ0YzU1MzAyMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgubzj9v6HnfC8bHgaYjgg2QEjLAYUmsuG+vT lnGtmoYG+GI2kWZcBa7BZkGWJ8zZSBOOrQ/C1UjFU4Ss3LwOvWyp/o8Kv40YSUIe UFYtuy+/E7aPbf9xiY0Tp9XEWkTr1RiONOAAlJxVmVBu8L2ipzCWY9R1x1g/ZetI GkJIOv0txvH+6AwHpH9EBCFK94cED1Nrp/bsQO8GcRRmJ1y3OBdattnHQ4fBg2Fp +ejz0bcuMSRgGnk3/H9/xRzMzN/wmmiPk3GzCIbBZabOItzWi5oNIpUwjnRQwQKD ybnX/vt/fA43JO+vlnrh7rs8LNncn6F+0xtSvwoSBOh9di+ZmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxtUM8TsYB5zdTlZayTxmLXjvDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjE3ZDEzNzctNTc2YS0z YzU4LTkyZmUtNzNjN2Y0YTljYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ81ZkJPeFOGglkUWhHpV7wvpkQTbTx8LAWbRru1V7EL3ZhZvQ1KR6U hG9HR16FRM+MNs1JFpHl4QBWq8g6ZKcE+Th8jNOV6uiTkVyd4R2sRtQSLV/Co6e7 cMoYYylCL4s9u8Dxq3k7dTX40CdsuyxL6vWeqgDaKJhIugiC8XlwnGnhkyEEV7+W JqE449nH/T+58dVmB87H6+GNrxf6isvuSseYA+yK6+PQXc4VYrak1PvTRtzbB3kn 7zBxIKxhjpiTa5VUsTNK/ITcemxhsrDB9ky7dYKkQWU2QJKigyRnBlgxVpl6Pncv La7Bdb2lvpH83BYQK8Sk7+k34IkbL1Q= -----END CERTIFICATE-----Generated at Wed Oct 29 20:23:50 2025 by rpki-client