$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa File: cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa (raw, json) Hash identifier: 8jLjYZ8HnP3bIS49kb2HR+pY8CWZ25ktfLPMGZm17TU= Subject key identifier: B7:40:0F:42:6D:D6:33:69:D7:7F:8F:B5:1C:E7:D7:B2:9F:E9:AD:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB1AB4A7FB5794C848280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 397204 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b1:ab:4a:7f:b5:79:4c:84:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=f2517c84-3e60-4900-aa73-93b3cc071f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:a9:a2:d4:c5:82:d5:0b:91:3d:14:10:f4: 3a:5a:e7:fd:69:37:5e:50:43:5c:80:c8:96:e3:2d: f2:96:e4:9a:a0:1d:f3:c9:6d:b6:da:2d:ba:af:b8: f9:45:bf:10:41:bc:63:d7:4e:1c:2a:08:a3:35:64: 4b:f8:4c:01:8c:b2:b6:1a:ee:70:df:7a:f0:83:e8: 68:15:a5:4d:f7:13:fd:62:70:5a:b9:3f:1e:6d:00: 5f:8b:d4:36:db:87:df:c1:a9:e9:f4:d0:5b:be:79: 6b:43:fc:f8:58:44:bf:52:ee:03:f8:d5:49:0f:51: 74:0a:69:f4:03:63:d1:a9:c8:4d:ce:8d:53:20:6e: 48:f6:1f:e0:43:b5:03:2d:85:bc:2f:4c:de:be:e0: ec:10:13:5d:54:68:41:72:9e:06:8e:7e:10:4d:8e: f2:e8:81:c3:28:84:21:be:59:e4:b0:e0:3b:07:f4: bc:41:bb:55:a3:da:d3:15:8f:57:27:bf:6b:73:90: 80:17:cd:91:38:7c:f8:9e:8a:04:47:93:bf:65:62: 4a:61:83:4c:73:38:53:ec:44:60:29:58:38:54:16: 32:d8:53:80:79:f9:aa:8c:7f:3b:62:d2:98:d2:9d: c5:bc:4f:ab:2e:34:81:c4:a2:99:40:e7:4d:32:55: 8b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:40:0F:42:6D:D6:33:69:D7:7F:8F:B5:1C:E7:D7:B2:9F:E9:AD:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:3d:75:12:91:a1:31:ac:af:14:7e:a9:cd:d6:b7:69:98:45: 43:9c:c0:22:1c:57:ad:d2:a2:11:be:b8:24:83:1b:77:8b:aa: a0:fc:d6:86:63:31:b2:d0:48:ef:fb:b1:43:d8:17:39:f2:53: a2:c7:49:ed:7e:cb:63:ef:74:e2:6f:42:f7:25:a0:11:5e:26: 9c:45:30:67:0f:a8:4d:5a:5c:1a:44:09:f1:81:f0:cf:1a:b9: ee:b0:0e:f7:ee:36:9a:0b:5d:05:57:5f:9d:4d:47:05:e6:b3: 6a:f0:47:b2:07:e4:39:94:e3:16:a7:c3:a2:1c:2f:35:a5:2a: 5b:95:bd:cf:e5:06:47:53:e8:43:5b:17:8b:e3:7d:41:9d:7d: ea:25:b0:fb:29:90:7d:43:9c:ca:fb:ea:45:17:19:dc:d3:1b: bb:fe:82:c5:12:d0:40:3f:1c:b2:59:9e:a7:3c:bd:d2:f3:13: ef:e2:a3:5b:3d:31:35:4a:00:ae:6c:9d:c4:03:97:48:e6:7c: 07:1e:29:c4:5f:aa:ad:8b:8f:57:a0:70:13:1a:f8:44:53:cd: e3:dd:ac:13:d1:5f:d1:75:35:ae:0c:67:96:19:32:e1:f3:98: 63:1f:a7:c0:34:19:d7:a3:e2:22:5a:99:29:6c:0e:b7:d2:1b: a0:55:7f:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLGrSn+1eUyEgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjI1MTdjODQtM2U2MC00OTAwLWFhNzMtOTNiM2NjMDcxZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjepotTFgtULkT0UEPQ6Wuf9aTdeUENcgMiW 4y3yluSaoB3zyW222i26r7j5Rb8QQbxj104cKgijNWRL+EwBjLK2Gu5w33rwg+ho FaVN9xP9YnBauT8ebQBfi9Q224ffwanp9NBbvnlrQ/z4WES/Uu4D+NVJD1F0Cmn0 A2PRqchNzo1TIG5I9h/gQ7UDLYW8L0zevuDsEBNdVGhBcp4Gjn4QTY7y6IHDKIQh vlnksOA7B/S8QbtVo9rTFY9XJ79rc5CAF82ROHz4nooER5O/ZWJKYYNMczhT7ERg KVg4VBYy2FOAefmqjH87YtKY0p3FvE+rLjSBxKKZQOdNMlWL7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLdAD0Jt1jNp13+PtRzn17Kf6a0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YxYzhhMGEtOTFkOS0z ODVjLTk0YzYtMjk1ODJiNGYzNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQACPXUSkaExrK8UfqnN1rdpmEVDnMAiHFet0qIRvrgkgxt3i6qg/NaG YzGy0Ejv+7FD2Bc58lOix0ntfstj73Tib0L3JaARXiacRTBnD6hNWlwaRAnxgfDP GrnusA737jaaC10FV1+dTUcF5rNq8EeyB+Q5lOMWp8OiHC81pSpblb3P5QZHU+hD WxeL431BnX3qJbD7KZB9Q5zK++pFFxnc0xu7/oLFEtBAPxyyWZ6nPL3S8xPv4qNb PTE1SgCubJ3EA5dI5nwHHinEX6qti49XoHATGvhEU83j3awT0V/RdTWuDGeWGTLh 85hjH6fANBnXo+IiWpkpbA630hugVX8M -----END CERTIFICATE-----Generated at Wed Oct 29 20:05:55 2025 by rpki-client