$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f703826f-dd15-3239-848b-0993f9fc63ef.roa File: f703826f-dd15-3239-848b-0993f9fc63ef.roa (raw, json) Hash identifier: POtQcE8NxEhJ9etcVb3JDTWKTqJTiAYt2xDxM5UrWhY= Subject key identifier: 26:AE:F2:D2:43:C7:6D:10:A7:F1:58:B2:BF:C5:98:BF:2D:D3:71:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AE9F67079215BB138F5F739C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f703826f-dd15-3239-848b-0993f9fc63ef.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 396828 IP address blocks: 216.168.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:70:79:21:5b:b1:38:f5:f7:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=1ac30acd-1600-4e9c-9ec7-021f382643f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:48:0f:ea:4a:a5:3b:ed:fd:2d:bb:4d:f7:20: 53:cb:84:41:23:c0:ef:91:aa:e9:2c:62:21:56:d4: 89:0b:3e:e6:76:34:44:c2:33:5f:cb:49:d0:7d:89: 74:22:c7:42:8a:62:74:03:39:ae:29:79:98:8c:78: bc:3b:1e:e9:ce:9a:96:3a:8c:d2:5c:be:ad:fa:00: 5f:84:3e:20:f5:c1:d4:42:42:2f:fd:17:38:3d:e1: 0d:bc:be:5b:ff:72:ab:4c:96:0d:16:fd:97:7b:40: 1a:85:39:87:d0:b8:d7:bf:ae:a9:97:d2:bb:d3:11: 17:c2:21:fe:5f:95:ff:e0:28:9f:08:9f:2d:61:c1: 1d:f1:86:2e:06:a3:66:0e:06:98:ba:1b:3c:9b:48: d9:f5:3a:1c:21:2b:dd:85:35:5d:cf:81:38:09:e4: a1:5f:de:94:39:dd:9c:04:8a:75:66:d5:b1:df:df: 23:3a:c4:41:7c:65:ac:1f:ee:5a:3e:92:6c:be:83: 36:89:d1:73:a9:77:bb:46:76:86:a9:ac:92:e4:ef: ab:ea:62:ec:ee:f2:76:dc:bb:68:e2:d7:f9:9c:a0: 8b:5f:54:25:d0:88:aa:e1:2b:b1:7b:50:7d:d4:fe: fb:d0:b0:ea:5d:6d:d4:43:82:b5:c5:d2:61:89:7b: 7f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AE:F2:D2:43:C7:6D:10:A7:F1:58:B2:BF:C5:98:BF:2D:D3:71:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f703826f-dd15-3239-848b-0993f9fc63ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:91:24:90:ed:fd:ab:a5:29:94:a9:f7:4e:27:26:c6:1c:e2: 6b:ad:7c:f5:53:40:2c:12:7d:bb:9c:b5:ba:e3:80:78:89:af: d5:09:9d:64:32:db:55:ed:5b:f1:b5:e7:0c:b0:c2:b3:df:c8: 82:5f:1d:e1:98:86:5d:0d:07:6d:bf:87:c4:d7:f1:b6:49:10: f1:5e:4b:0b:f5:a6:82:66:a5:b1:e3:04:12:5c:a0:32:54:54: 17:a0:ef:c8:40:f0:f5:eb:59:d7:70:39:95:46:b9:de:18:98: 54:cd:23:8a:da:01:89:64:1f:f9:9b:18:47:b8:3e:f9:30:0c: 9a:89:0a:c2:33:f0:16:f4:fe:81:2a:3b:db:4c:6f:33:18:42: 01:27:cc:1f:ab:dd:0c:44:3e:e6:57:dd:c2:cc:38:7f:05:09: 65:fa:51:31:19:cf:4f:15:0c:76:9b:03:04:f0:05:66:88:19: f1:32:53:bf:2e:79:38:d5:d8:81:27:51:96:10:85:b1:33:1b: d5:2a:61:40:18:36:7a:a5:33:c3:87:d9:6e:f3:49:b2:fe:10: 46:7e:4d:49:ae:7d:30:d8:dd:63:2a:29:32:65:28:85:08:11: 3f:26:5b:f3:27:9e:9b:0a:03:ab:44:31:82:a9:75:8f:4f:d6: 40:da:5c:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9nB5IVuxOPX3OcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk MWFjMzBhY2QtMTYwMC00ZTljLTllYzctMDIxZjM4MjY0M2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UgP6kqlO+39LbtN9yBTy4RBI8DvkarpLGIh VtSJCz7mdjREwjNfy0nQfYl0IsdCimJ0AzmuKXmYjHi8Ox7pzpqWOozSXL6t+gBf hD4g9cHUQkIv/Rc4PeENvL5b/3KrTJYNFv2Xe0AahTmH0LjXv66pl9K70xEXwiH+ X5X/4CifCJ8tYcEd8YYuBqNmDgaYuhs8m0jZ9TocISvdhTVdz4E4CeShX96UOd2c BIp1ZtWx398jOsRBfGWsH+5aPpJsvoM2idFzqXe7RnaGqayS5O+r6mLs7vJ23Lto 4tf5nKCLX1Ql0Iiq4Suxe1B91P770LDqXW3UQ4K1xdJhiXt/OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCau8tJDx20Qp/FYsr/FmL8t03EWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjcwMzgyNmYtZGQxNS0z MjM5LTg0OGItMDk5M2Y5ZmM2M2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACRJJDt/aulKZSp904nJsYc4mutfPVTQCwSfbuctbrjgHiJr9UJnWQy 21XtW/G15wywwrPfyIJfHeGYhl0NB22/h8TX8bZJEPFeSwv1poJmpbHjBBJcoDJU VBeg78hA8PXrWddwOZVGud4YmFTNI4raAYlkH/mbGEe4PvkwDJqJCsIz8Bb0/oEq O9tMbzMYQgEnzB+r3QxEPuZX3cLMOH8FCWX6UTEZz08VDHabAwTwBWaIGfEyU78u eTjV2IEnUZYQhbEzG9UqYUAYNnqlM8OH2W7zSbL+EEZ+TUmufTDY3WMqKTJlKIUI ET8mW/MnnpsKA6tEMYKpdY9P1kDaXDY= -----END CERTIFICATE-----Generated at Thu Oct 30 03:25:10 2025 by rpki-client