$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d00cb8d4-38c2-3e71-9240-6b2e348f09c5.roa File: d00cb8d4-38c2-3e71-9240-6b2e348f09c5.roa (raw, json) Hash identifier: rXRl4o7cuu3eMiv+au2PvBeJ2R6WqJvCX99XT9OTGPU= Subject key identifier: 4F:4E:D6:F3:7E:12:4B:C7:DA:E5:59:27:97:29:ED:52:DF:6A:B3:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77C0FDE364D2474233980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d00cb8d4-38c2-3e71-9240-6b2e348f09c5.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396547 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7c:0f:de:36:4d:24:74:23:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=722c1066-da12-4942-8808-3f0223c0491a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:b1:48:bd:20:10:3d:80:56:2c:80:47:f3: 8c:e7:a9:d5:c6:50:6e:ae:99:e6:f1:9b:d6:1a:15: 45:e2:68:05:7b:8d:57:d0:0b:aa:8b:16:5e:8f:50: 19:53:d1:4c:b7:eb:bb:56:f9:d0:0b:c4:f5:45:17: dd:cc:82:44:f1:e6:dd:e5:3e:80:04:33:4d:ab:9e: 7f:95:f5:2b:c7:4f:cc:d5:11:3b:77:db:dc:6c:19: 41:c8:d0:ca:67:52:57:73:54:8e:c8:5d:fd:5d:de: 98:7f:23:f8:5a:93:f3:0d:a7:81:57:4b:1c:e0:d4: c2:fd:9b:8c:34:47:b4:98:2d:87:1e:56:5b:ea:2a: e8:a8:aa:60:d6:d9:3a:fc:0f:5e:b9:4f:25:67:78: 72:b8:20:c5:51:31:a0:af:83:7d:fe:63:15:a1:56: 01:80:c0:b0:74:f9:27:9a:1b:07:60:c0:35:d8:90: 9f:f2:e6:51:07:48:29:49:cd:93:6a:f9:f2:2b:30: 35:d1:c2:ed:4c:d1:dc:f3:80:59:98:2a:1a:34:9a: 76:48:47:bf:2d:e7:33:7a:3e:2d:89:60:48:da:97: 7f:5f:eb:c6:bf:b9:9d:44:ad:6b:16:28:5b:3a:f4: 69:e1:f0:aa:cf:23:6f:40:f6:4b:d9:cf:92:33:cd: bc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4E:D6:F3:7E:12:4B:C7:DA:E5:59:27:97:29:ED:52:DF:6A:B3:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d00cb8d4-38c2-3e71-9240-6b2e348f09c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ec:41:dc:c6:eb:c3:ba:1b:fd:b7:43:a1:74:9e:9f:e9:7c: e1:eb:ae:75:fd:28:a3:d0:b9:15:45:79:db:51:16:99:e9:51: 6a:e2:d2:b4:39:20:54:9c:de:b1:a9:b2:cf:e8:a3:7c:39:d3: f6:a1:75:2d:f6:51:63:11:5b:89:ba:c7:73:39:bc:d0:8c:22: ef:2a:c7:4d:78:a4:4c:f7:bd:c6:f6:f6:0c:a4:f9:14:39:5c: 7a:1b:b7:15:b9:be:62:eb:e9:0e:63:b9:f8:0e:72:6e:82:96: 6d:db:22:ec:ee:94:7c:48:4e:ff:b6:f3:33:e6:d6:dd:8c:1b: de:23:46:cf:be:e4:cb:ee:1c:c3:7e:bc:bf:dd:4f:59:72:10: 04:d8:93:68:56:ba:85:02:28:c1:78:54:be:4a:1a:65:9c:6d: b8:ee:f4:1c:3e:e3:c2:1d:58:35:29:34:54:9e:49:2e:7f:3f: 0c:69:9e:be:9b:45:e3:be:8c:5b:84:b2:e2:c5:be:74:a3:18: fc:31:5a:3b:28:cb:53:69:36:7e:08:d6:d3:86:7a:14:5f:c1: b1:7e:3f:7f:eb:64:15:3d:68:be:f3:a4:fb:8b:59:ed:0c:94: be:57:05:b5:68:d2:d7:7f:83:92:94:fe:68:8d:58:25:70:81: 2c:fa:26:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3wP3jZNJHQjOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NzIyYzEwNjYtZGExMi00OTQyLTg4MDgtM2YwMjIzYzA0OTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNmxSL0gED2AViyAR/OM56nVxlBurpnm8ZvW GhVF4mgFe41X0AuqixZej1AZU9FMt+u7VvnQC8T1RRfdzIJE8ebd5T6ABDNNq55/ lfUrx0/M1RE7d9vcbBlByNDKZ1JXc1SOyF39Xd6YfyP4WpPzDaeBV0sc4NTC/ZuM NEe0mC2HHlZb6iroqKpg1tk6/A9euU8lZ3hyuCDFUTGgr4N9/mMVoVYBgMCwdPkn mhsHYMA12JCf8uZRB0gpSc2TavnyKzA10cLtTNHc84BZmCoaNJp2SEe/Leczej4t iWBI2pd/X+vGv7mdRK1rFihbOvRp4fCqzyNvQPZL2c+SM828UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9O1vN+EkvH2uVZJ5cp7VLfarNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDAwY2I4ZDQtMzhjMi0z ZTcxLTkyNDAtNmIyZTM0OGYwOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3sQdzG68O6G/23Q6F0np/pfOHrrnX9KKPQuRVFedtRFpnpUWri0rQ5 IFSc3rGpss/oo3w50/ahdS32UWMRW4m6x3M5vNCMIu8qx014pEz3vcb29gyk+RQ5 XHobtxW5vmLr6Q5jufgOcm6Clm3bIuzulHxITv+28zPm1t2MG94jRs++5MvuHMN+ vL/dT1lyEATYk2hWuoUCKMF4VL5KGmWcbbju9Bw+48IdWDUpNFSeSS5/Pwxpnr6b ReO+jFuEsuLFvnSjGPwxWjsoy1NpNn4I1tOGehRfwbF+P3/rZBU9aL7zpPuLWe0M lL5XBbVo0td/g5KU/miNWCVwgSz6Jnw= -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:15 2025 by rpki-client