$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcb66183-4806-3611-83aa-916ffcde6df3.roa File: fcb66183-4806-3611-83aa-916ffcde6df3.roa (raw, json) Hash identifier: rAUgLrHI5HGnezl0vyS6LXiuNiEDnrrRRRC7snACxnE= Subject key identifier: BE:00:26:29:DF:AD:AA:BA:F0:39:0E:27:69:4A:5B:EC:67:29:F3:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC77F027A0348E534AD84C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcb66183-4806-3611-83aa-916ffcde6df3.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396591 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:7f:02:7a:03:48:e5:34:ad:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=66a4d809-dee3-4667-af87-61681cce8868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:e4:b1:c0:14:0b:55:e9:8d:78:b1:f8:61: da:f0:6e:40:b4:b6:02:c7:df:61:d9:8d:2b:1c:f7: de:bc:9a:ff:f3:c7:8e:1f:4d:24:b0:8c:2f:00:80: 16:d1:ad:f5:e9:8e:a6:44:1e:3b:fc:0b:e0:e6:d2: e0:ff:5e:c4:d2:e4:f8:c7:d6:0b:6b:53:d5:b0:c5: a8:ce:aa:e9:71:cc:91:0e:6a:86:cb:30:32:14:65: ab:65:43:10:8a:07:16:b3:8d:14:5a:72:83:dd:7c: 5e:9e:8e:39:01:d2:33:ee:7f:22:96:0f:fe:53:21: 15:30:8d:cc:07:3f:8a:a2:eb:28:49:a2:03:35:8c: 0f:66:c2:ed:7a:3c:0c:91:b0:e9:22:c7:34:26:72: d2:18:3d:80:f2:fd:ed:b3:f0:80:83:35:2c:2a:45: 90:68:e0:42:d6:9b:3f:83:35:b7:30:67:16:63:7a: 4c:ba:31:71:df:52:aa:94:45:e6:b0:09:5a:4d:11: 78:25:9c:63:d3:58:94:0c:44:ea:f9:d6:64:bd:23: e9:ea:66:99:73:15:00:c5:eb:0f:3c:8f:f2:38:fa: 7b:00:cd:f9:4e:93:b9:b1:02:92:66:28:89:02:c4: 3d:12:f3:60:cd:3e:4f:98:be:c8:80:f0:b4:9b:bf: 4c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:00:26:29:DF:AD:AA:BA:F0:39:0E:27:69:4A:5B:EC:67:29:F3:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcb66183-4806-3611-83aa-916ffcde6df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f8:60:2e:c7:35:01:cc:32:52:69:5e:e2:19:2b:69:46:ea: e6:e8:81:d8:f3:03:3a:62:f9:cf:5c:32:55:5b:2f:65:65:73: 7f:74:4b:9c:b2:76:60:66:ea:ec:00:c3:bb:b2:2d:14:04:9a: 78:4e:ca:63:97:ed:2b:87:8f:7e:63:03:11:b2:f6:fd:56:e8: 1e:1a:56:64:c8:86:8d:e8:05:4a:e7:01:a4:f1:a2:68:1e:e1: b8:d7:7e:62:bd:8b:f0:ce:97:dc:89:63:12:d1:96:18:17:98: 70:a8:87:b7:40:b1:b1:5e:d8:16:2e:d0:0c:90:fc:0a:df:f0: 3c:f9:94:ac:86:c1:4b:5d:15:bc:e9:f7:09:24:ba:eb:7f:2f: 09:5a:24:ca:ff:5b:6b:82:eb:70:4d:83:33:00:1f:bb:4d:44: 99:16:39:22:22:cd:4a:a1:b3:48:7f:fa:47:ff:5f:da:25:3b: d8:54:6d:88:3b:ec:49:da:0c:a7:02:4e:27:c7:a6:3f:15:9d: 24:fa:2f:c5:44:30:dc:f9:90:1e:21:13:95:ee:09:db:8a:ac: bb:b4:ea:86:5d:23:0d:5a:41:f1:45:45:ae:b0:a3:12:82:cc: aa:b9:bc:f2:2a:28:e9:0c:93:d5:f0:0c:04:96:48:55:ea:c1: 67:bb:5e:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx38CegNI5TSthMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NjZhNGQ4MDktZGVlMy00NjY3LWFmODctNjE2ODFjY2U4ODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxDkscAUC1XpjXix+GHa8G5AtLYCx99h2Y0r HPfevJr/88eOH00ksIwvAIAW0a316Y6mRB47/Avg5tLg/17E0uT4x9YLa1PVsMWo zqrpccyRDmqGyzAyFGWrZUMQigcWs40UWnKD3Xxeno45AdIz7n8ilg/+UyEVMI3M Bz+KousoSaIDNYwPZsLtejwMkbDpIsc0JnLSGD2A8v3ts/CAgzUsKkWQaOBC1ps/ gzW3MGcWY3pMujFx31KqlEXmsAlaTRF4JZxj01iUDETq+dZkvSPp6maZcxUAxesP PI/yOPp7AM35TpO5sQKSZiiJAsQ9EvNgzT5PmL7IgPC0m79MkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4AJinfraq68DkOJ2lKW+xnKfPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmNiNjYxODMtNDgwNi0z NjExLTgzYWEtOTE2ZmZjZGU2ZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv4YC7HNQHMMlJpXuIZK2lG6ubogdjzAzpi+c9cMlVbL2Vlc390S5yy dmBm6uwAw7uyLRQEmnhOymOX7SuHj35jAxGy9v1W6B4aVmTIho3oBUrnAaTxomge 4bjXfmK9i/DOl9yJYxLRlhgXmHCoh7dAsbFe2BYu0AyQ/Arf8Dz5lKyGwUtdFbzp 9wkkuut/LwlaJMr/W2uC63BNgzMAH7tNRJkWOSIizUqhs0h/+kf/X9olO9hUbYg7 7EnaDKcCTifHpj8VnST6L8VEMNz5kB4hE5XuCduKrLu06oZdIw1aQfFFRa6woxKC zKq5vPIqKOkMk9XwDASWSFXqwWe7Xhc= -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:02 2025 by rpki-client