$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea7c016d-3c6c-38d5-8323-b44ba800c05c.roa File: ea7c016d-3c6c-38d5-8323-b44ba800c05c.roa (raw, json) Hash identifier: +wK5zQL54bnYn8Eg9+j8zQmdvLQNhxNglAvg3ToaHlA= Subject key identifier: 81:D6:FB:25:04:4B:98:D4:20:46:A8:53:8A:C8:A2:2B:24:13:60:8A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77B604144AB08C758AB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea7c016d-3c6c-38d5-8323-b44ba800c05c.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396826 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7b:60:41:44:ab:08:c7:58:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=4fc5a4f0-a4e8-423c-bc67-016a7cedff55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:29:a8:2b:0d:4e:bf:88:1a:c1:21:95:c5:f2: 1e:a1:b2:26:12:ea:77:b2:1e:09:58:d7:b0:b5:f3: 62:8e:2f:6b:b9:ab:e1:f4:88:be:76:68:fc:73:d2: 3b:99:9e:51:f9:b4:d1:a8:74:c0:2a:cc:69:b8:2c: 17:1c:cd:cc:79:40:b6:f5:0f:a9:e2:57:1d:e6:c6: 53:ee:e4:34:b7:85:af:91:2f:90:18:a8:07:ce:be: f2:49:5f:af:d1:78:e7:45:b4:98:48:ca:b4:f9:d8: db:a7:72:3d:c5:05:e5:f4:8d:b1:e7:77:2f:84:b9: 70:32:af:67:46:6e:9d:f9:db:e5:77:c9:9e:ea:97: f9:f4:24:67:af:21:86:65:24:61:53:2a:65:50:f3: 57:f2:17:36:08:47:fc:e9:39:78:30:2f:26:94:cc: fb:55:2e:70:8c:53:72:6a:67:eb:8d:7a:d7:09:b8: 49:6f:11:c1:5f:49:e5:a9:ba:59:8a:83:45:3a:7b: a1:17:1f:39:d7:78:b7:88:9b:45:18:c8:b6:a5:5a: 63:23:4e:bd:60:bb:fb:1e:86:b4:19:d3:36:31:d7: 42:77:bf:7d:ea:9f:f3:6d:f7:51:a3:ff:48:e0:a1: a6:6c:5b:8e:46:1c:26:2a:0d:93:c0:b0:2f:ac:7a: e6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D6:FB:25:04:4B:98:D4:20:46:A8:53:8A:C8:A2:2B:24:13:60:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea7c016d-3c6c-38d5-8323-b44ba800c05c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:0e:da:21:49:4b:28:04:5c:0a:26:64:6b:1b:26:e6:9d:bf: 87:15:38:2e:bf:52:4b:31:3f:6a:c2:db:e3:85:44:2d:55:ed: af:d1:e7:7f:14:eb:35:7b:86:fc:35:9b:4f:e4:1c:41:a8:bc: a4:8c:dd:d5:33:1b:db:85:31:29:9a:11:22:0a:fb:23:9c:b4: 23:30:df:c9:b3:22:01:0b:ac:9c:71:c6:65:e1:42:bf:d5:18: 4f:91:a8:d2:66:0d:be:e8:61:cc:6d:40:9c:4a:e7:d6:f6:b1: 3c:d2:67:cf:32:4b:53:77:d4:0e:41:07:d0:cf:94:46:85:68: 4a:02:0f:e3:ed:23:da:fa:bf:57:6a:31:45:d1:fa:5b:0b:dc: 18:2d:ae:e7:cb:eb:c2:7c:f7:57:f7:33:e8:25:e9:52:01:8c: 97:07:d5:c9:2f:05:4f:c9:a2:8e:b3:e7:35:79:c8:63:14:23: af:38:de:12:14:4b:3c:1c:71:74:8b:51:a3:48:3f:6c:06:41: f9:3b:71:c5:b0:5a:66:d3:73:cc:1a:e0:d4:61:64:58:88:4a: fa:f5:e8:71:d5:16:3c:2a:f5:3a:9c:c0:60:c0:f3:14:a7:59: b2:c0:28:82:6f:d5:07:1f:f3:b2:07:8e:26:0c:8e:3d:7a:ca: 46:38:84:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3tgQUSrCMdYqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NGZjNWE0ZjAtYTRlOC00MjNjLWJjNjctMDE2YTdjZWRmZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSmoKw1Ov4gawSGVxfIeobImEup3sh4JWNew tfNiji9ruavh9Ii+dmj8c9I7mZ5R+bTRqHTAKsxpuCwXHM3MeUC29Q+p4lcd5sZT 7uQ0t4WvkS+QGKgHzr7ySV+v0XjnRbSYSMq0+djbp3I9xQXl9I2x53cvhLlwMq9n Rm6d+dvld8me6pf59CRnryGGZSRhUyplUPNX8hc2CEf86Tl4MC8mlMz7VS5wjFNy amfrjXrXCbhJbxHBX0nlqbpZioNFOnuhFx8513i3iJtFGMi2pVpjI069YLv7Hoa0 GdM2MddCd7996p/zbfdRo/9I4KGmbFuORhwmKg2TwLAvrHrm3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHW+yUES5jUIEaoU4rIoiskE2CKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWE3YzAxNmQtM2M2Yy0z OGQ1LTgzMjMtYjQ0YmE4MDBjMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0O2iFJSygEXAomZGsbJuadv4cVOC6/UksxP2rC2+OFRC1V7a/R538U 6zV7hvw1m0/kHEGovKSM3dUzG9uFMSmaESIK+yOctCMw38mzIgELrJxxxmXhQr/V GE+RqNJmDb7oYcxtQJxK59b2sTzSZ88yS1N31A5BB9DPlEaFaEoCD+PtI9r6v1dq MUXR+lsL3BgtrufL68J891f3M+gl6VIBjJcH1ckvBU/Joo6z5zV5yGMUI6843hIU SzwccXSLUaNIP2wGQfk7ccWwWmbTc8wa4NRhZFiISvr16HHVFjwq9TqcwGDA8xSn WbLAKIJv1Qcf87IHjiYMjj16ykY4hOY= -----END CERTIFICATE-----Generated at Wed Oct 29 11:51:06 2025 by rpki-client