$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba1a1a16-ef0f-310f-8aef-e850123604ed.roa File: ba1a1a16-ef0f-310f-8aef-e850123604ed.roa (raw, json) Hash identifier: yac4FKSUgA5BAkv0WyeYei+mCGa0UHZ79ZNIMJB2POE= Subject key identifier: 33:10:36:C5:25:DB:B6:4C:57:A1:98:3C:E0:64:7A:7D:1C:5D:88:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77E1DB8A86CBF6253CB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba1a1a16-ef0f-310f-8aef-e850123604ed.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396617 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7e:1d:b8:a8:6c:bf:62:53:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=239b5f59-4c80-4746-80e9-5b300820e8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:ff:2a:88:8e:8a:38:de:79:e9:de:18:ee: 14:ad:56:61:08:03:b1:52:2a:de:a3:fb:dc:3a:04: f3:08:8d:dd:db:05:62:2c:40:b7:31:b0:c6:e3:1b: 07:98:05:39:05:0f:a2:b4:1a:26:d7:01:a6:d8:2e: ca:bd:74:2f:8a:d2:75:31:23:44:0a:f4:fc:c5:98: 88:f0:57:03:26:80:7a:44:c6:c9:1e:52:10:62:14: 63:6c:46:bb:46:f2:70:79:95:ba:35:6c:3f:b7:d1: bc:0e:5c:16:ce:e6:6f:c0:e8:54:99:4e:a1:5d:fd: b7:a0:9d:e9:05:62:78:3d:81:1a:33:32:08:16:eb: 9f:80:54:24:66:73:84:e6:94:2b:2c:76:2a:33:a7: f6:a4:8c:a9:95:e1:9c:61:b6:4a:88:24:50:3e:49: dd:10:c0:8a:cb:bf:1b:bf:76:bd:6c:14:f5:80:6d: 9a:c2:79:7b:3f:93:f4:5b:e4:64:cb:b7:60:67:c7: 09:47:6d:2a:07:1e:c1:74:45:17:71:cc:ec:de:96: c7:00:55:53:1d:f9:56:59:b6:0f:22:3c:f9:d1:38: c7:c8:bd:00:b1:6c:03:d9:d8:6f:88:f3:ee:82:88: 59:8e:af:9f:8b:51:1d:53:4a:ce:98:d4:41:16:e4: 13:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:10:36:C5:25:DB:B6:4C:57:A1:98:3C:E0:64:7A:7D:1C:5D:88:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba1a1a16-ef0f-310f-8aef-e850123604ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:bc:9b:79:dd:69:66:31:db:bd:a9:99:e7:42:1b:59:1c:f1: 02:d5:f6:43:aa:bd:2e:41:97:0e:1f:5d:67:b5:ad:cb:2f:2a: 6c:d0:e4:fd:e0:9e:8b:5b:6a:3c:05:e5:2f:b9:10:0e:41:af: a1:af:0a:55:a6:41:d8:07:cf:9d:bc:b2:b8:37:25:51:0b:69: 52:62:b2:43:f6:2d:16:13:98:5f:09:ec:10:c3:eb:4b:06:a7: 24:ef:62:9d:31:8c:eb:eb:b7:bf:4a:1d:a7:04:66:b8:55:30: 96:83:80:f2:0e:43:32:53:11:9e:c2:27:4f:8d:52:e8:76:77: 09:31:6d:f8:2e:50:2e:26:37:7d:87:a4:81:a4:38:c1:a0:ac: d4:03:15:7a:b6:06:4b:49:5a:82:d9:bc:32:25:b6:35:b9:3e: 82:75:1d:42:f6:4b:10:9a:8c:dd:27:92:f9:51:74:a0:21:77: 86:ff:c1:b5:1b:10:59:76:a8:13:f2:bd:df:e0:99:1a:76:c6: 23:b2:9f:86:cd:a0:2b:ac:67:b1:7f:1a:59:8b:44:21:4e:92: e0:50:5d:6a:97:75:77:bb:c3:cd:c0:87:5b:05:dd:68:c0:ab: 42:3a:27:b4:5d:e4:37:8f:e9:02:98:af:9e:ba:5e:50:e2:94: 4b:1e:76:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx34duKhsv2JTy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MjM5YjVmNTktNGM4MC00NzQ2LTgwZTktNWIzMDA4MjBlOGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9X/KoiOijjeeeneGO4UrVZhCAOxUireo/vc OgTzCI3d2wViLEC3MbDG4xsHmAU5BQ+itBom1wGm2C7KvXQvitJ1MSNECvT8xZiI 8FcDJoB6RMbJHlIQYhRjbEa7RvJweZW6NWw/t9G8DlwWzuZvwOhUmU6hXf23oJ3p BWJ4PYEaMzIIFuufgFQkZnOE5pQrLHYqM6f2pIypleGcYbZKiCRQPkndEMCKy78b v3a9bBT1gG2awnl7P5P0W+Rky7dgZ8cJR20qBx7BdEUXcczs3pbHAFVTHflWWbYP Ijz50TjHyL0AsWwD2dhviPPugohZjq+fi1EdU0rOmNRBFuQTHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMQNsUl27ZMV6GYPOBken0cXYh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmExYTFhMTYtZWYwZi0z MTBmLThhZWYtZTg1MDEyMzYwNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy8m3ndaWYx272pmedCG1kc8QLV9kOqvS5Blw4fXWe1rcsvKmzQ5P3g notbajwF5S+5EA5Br6GvClWmQdgHz528srg3JVELaVJiskP2LRYTmF8J7BDD60sG pyTvYp0xjOvrt79KHacEZrhVMJaDgPIOQzJTEZ7CJ0+NUuh2dwkxbfguUC4mN32H pIGkOMGgrNQDFXq2BktJWoLZvDIltjW5PoJ1HUL2SxCajN0nkvlRdKAhd4b/wbUb EFl2qBPyvd/gmRp2xiOyn4bNoCusZ7F/GlmLRCFOkuBQXWqXdXe7w83Ah1sF3WjA q0I6J7Rd5DeP6QKYr566XlDilEsedkg= -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:53 2025 by rpki-client