$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08e2bc4-06d0-35bf-9749-f8eff9086892.roa File: d08e2bc4-06d0-35bf-9749-f8eff9086892.roa (raw, json) Hash identifier: xqMqKyOTf4JdVBM5Exuq8lrKKiEQrPEJHpXx4xKlY6E= Subject key identifier: 5B:7D:4A:7A:22:53:90:0B:82:B9:80:AE:06:C6:FB:86:81:4D:A5:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BAEC7C95313B12F7F1D091800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08e2bc4-06d0-35bf-9749-f8eff9086892.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 216.168.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c9:53:13:b1:2f:7f:1d:09:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=1aac237c-3b97-4620-9238-f5be29d7be9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:16:29:1b:e5:d9:a1:4e:3f:ec:0e:84:fd:33: 3f:74:2d:e4:58:92:08:9d:8f:48:ec:8a:7b:7b:0f: 46:ee:46:1c:d1:f2:b7:58:6d:28:a4:cf:98:8e:3c: a6:84:0b:b0:9e:e4:8b:e0:1d:dc:8d:90:7c:ab:31: 0c:ca:db:34:ab:3d:35:61:dc:0a:26:8a:ba:cd:4e: c6:e2:d9:f9:e4:1f:85:7a:b7:58:63:81:bd:db:f0: 89:0c:18:9d:04:f6:88:7c:f4:7c:fe:c6:05:fe:ec: f8:e0:49:ac:b3:77:5a:0b:b6:14:88:4f:bc:92:35: 76:43:1d:97:3b:c0:59:96:35:59:cc:76:b0:04:81: 06:09:47:2f:4f:38:ce:13:c4:de:ee:07:28:af:65: cb:d2:08:35:68:8c:0d:f7:d3:6c:4b:34:79:e2:3a: c3:2b:e9:b9:a3:44:7f:c2:88:f1:34:3e:8b:15:bf: e1:2b:a6:cc:f5:86:dc:4b:d0:82:07:7c:5e:25:60: eb:ea:b1:8e:11:8a:1f:30:8b:2d:6a:30:4c:45:54: c4:ed:9b:58:c4:c4:2f:5a:4d:57:ec:86:fb:a2:2e: 0b:36:be:51:66:79:ee:7e:f0:73:b4:e8:a9:56:bb: bf:1b:1a:cc:9c:c6:7e:35:b0:64:c4:59:2f:28:f1: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7D:4A:7A:22:53:90:0B:82:B9:80:AE:06:C6:FB:86:81:4D:A5:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08e2bc4-06d0-35bf-9749-f8eff9086892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b7:f4:56:d2:5a:db:09:9e:de:fc:4c:08:ea:07:14:77:2e: 40:49:29:9a:e5:72:d4:24:9f:a2:5b:cb:2a:a3:61:cf:56:e3: d8:61:a0:f9:92:ee:ea:53:22:9e:5b:4a:69:fe:54:cb:92:32: 70:7a:82:c5:c9:60:d7:fd:d6:3f:76:09:8b:3b:48:0a:a3:6b: 05:b0:20:57:a5:a1:48:36:fa:73:3b:59:5d:fb:71:4d:5d:1f: 01:b3:cd:0e:d2:39:d6:a6:bc:76:38:dd:05:2f:52:0a:6a:d3: a1:a9:3a:96:b1:8a:bf:74:ff:fd:ab:6c:96:03:b7:91:c4:21: 57:26:32:e0:a6:cc:f2:fe:1b:c0:56:bf:90:07:a7:6c:aa:4b: b6:2d:1e:e5:8b:76:01:4a:f0:5a:47:21:91:98:ad:b2:27:ce: 92:c0:40:11:a3:02:fc:f0:41:3a:ae:6e:04:45:f2:26:46:d4: 6a:51:cc:dd:7c:f8:28:b9:93:cf:a3:8b:e8:16:b6:d2:1d:8c: 1c:eb:2a:72:a6:2c:bc:1a:58:74:1b:22:54:a7:01:35:35:b8: 45:b9:58:71:db:93:dd:83:1e:16:3b:9c:dd:8b:a0:e1:c0:ad: 8b:0b:4e:06:de:94:87:1a:e9:70:f9:38:f8:76:1e:f1:ec:9b: 5d:57:83:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8lTE7Evfx0JGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MWFhYzIzN2MtM2I5Ny00NjIwLTkyMzgtZjViZTI5ZDdiZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRYpG+XZoU4/7A6E/TM/dC3kWJIInY9I7Ip7 ew9G7kYc0fK3WG0opM+YjjymhAuwnuSL4B3cjZB8qzEMyts0qz01YdwKJoq6zU7G 4tn55B+FerdYY4G92/CJDBidBPaIfPR8/sYF/uz44Emss3daC7YUiE+8kjV2Qx2X O8BZljVZzHawBIEGCUcvTzjOE8Te7gcor2XL0gg1aIwN99NsSzR54jrDK+m5o0R/ wojxND6LFb/hK6bM9YbcS9CCB3xeJWDr6rGOEYofMIstajBMRVTE7ZtYxMQvWk1X 7Ib7oi4LNr5RZnnufvBztOipVru/GxrMnMZ+NbBkxFkvKPGKkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt9SnoiU5ALgrmArgbG+4aBTaVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDA4ZTJiYzQtMDZkMC0z NWJmLTk3NDktZjhlZmY5MDg2ODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW39FbSWtsJnt78TAjqBxR3LkBJKZrlctQkn6JbyyqjYc9W49hhoPmS 7upTIp5bSmn+VMuSMnB6gsXJYNf91j92CYs7SAqjawWwIFeloUg2+nM7WV37cU1d HwGzzQ7SOdamvHY43QUvUgpq06GpOpaxir90//2rbJYDt5HEIVcmMuCmzPL+G8BW v5AHp2yqS7YtHuWLdgFK8FpHIZGYrbInzpLAQBGjAvzwQTqubgRF8iZG1GpRzN18 +Ci5k8+ji+gWttIdjBzrKnKmLLwaWHQbIlSnATU1uEW5WHHbk92DHhY7nN2LoOHA rYsLTgbelIca6XD5OPh2HvHsm11Xg+0= -----END CERTIFICATE-----Generated at Wed Oct 29 20:25:13 2025 by rpki-client