$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/4f237dd8-f898-37e0-8290-0c7181165279.roa File: 4f237dd8-f898-37e0-8290-0c7181165279.roa (raw, json) Hash identifier: tWnMnXZhtaTRyom2pWA6QpuLFKWWeTMrseMsh5pWFIY= Subject key identifier: 7D:AE:E1:5D:19:5F:1B:69:9B:45:5F:F5:E1:BE:61:66:62:7A:39:D6 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584B4E770ED4B8819AB3A9730800 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/4f237dd8-f898-37e0-8290-0c7181165279.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 13492 IP address blocks: 216.37.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0e:d4:b8:81:9a:b3:a9:73:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=942c256d-f91e-4884-aba5-5e753302c0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:04:c3:b8:9c:48:09:3f:35:69:aa:94:a1: a9:6c:0a:b9:59:6c:8e:ec:2f:01:8f:1a:62:9d:f3: 51:61:49:62:d7:1f:33:7b:78:1b:8a:a1:64:94:96: 5c:02:74:b4:3a:82:7e:08:46:d4:56:19:c6:19:7f: 77:20:e2:45:79:36:c8:2d:90:91:12:5d:f6:e2:d8: bb:aa:f0:43:76:53:b7:83:0d:5e:00:bc:8b:bd:23: 5e:93:a9:a6:7d:c0:36:ee:13:e0:8b:1f:8d:c4:08: 3d:a0:09:e5:db:9d:3a:fd:e4:39:58:f0:20:e3:3f: ec:ff:e8:0b:77:97:53:16:e7:c4:31:28:ec:a6:ed: 33:19:31:f3:ce:3b:bc:5b:46:e5:35:84:46:6a:66: 95:1c:94:20:a0:7d:fa:df:27:aa:a8:dd:67:0c:d1: 36:54:df:f1:ea:e2:d0:90:4b:d5:a0:20:dc:35:8d: dc:64:95:3e:29:42:d3:8d:d3:4e:4a:ee:de:d2:3a: b1:e1:62:0c:91:fe:d3:49:93:a3:84:61:89:13:0f: fc:c8:26:ef:2c:1d:6d:2e:02:ed:07:19:ba:12:ef: 79:54:8b:16:be:8c:22:2e:00:8d:f4:8a:5b:3b:a4: 7f:91:03:3c:23:8b:af:56:94:6e:af:10:5f:a7:7c: 11:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AE:E1:5D:19:5F:1B:69:9B:45:5F:F5:E1:BE:61:66:62:7A:39:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/4f237dd8-f898-37e0-8290-0c7181165279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 216.37.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:19:41:d9:b4:68:0a:ca:8d:e9:6c:e1:c5:48:c1:5b:8c:12: 7a:d6:5f:59:16:f5:26:b0:26:25:98:68:16:4f:d4:be:25:e5: 17:0c:06:8d:4a:23:11:7a:6e:69:70:f2:d9:2d:be:ee:50:b6: c0:a3:d2:59:08:f8:52:48:0c:58:9a:40:2f:b9:cb:14:87:b0: 66:94:de:7c:94:66:13:b9:98:97:36:6e:84:f6:f7:b8:e2:61: 8b:5f:11:0a:1b:ed:2a:20:53:98:85:f9:3e:66:47:7b:09:f8: a2:a7:35:24:82:76:84:35:b3:47:35:5c:26:4e:cc:e9:7b:cd: 75:68:b2:df:6f:20:da:40:83:c3:0e:65:a6:74:34:20:9a:e2: 1b:5b:30:45:05:c0:4e:c7:04:43:68:ec:c4:7a:27:93:b3:bd: 5f:69:37:92:86:0f:72:a9:3d:99:ea:e7:63:85:41:49:27:6c: 08:ce:5c:90:54:fb:ab:b5:fe:d9:c1:9f:76:72:78:9c:d7:18: a2:90:f3:d2:db:45:23:b1:fc:9c:6d:2b:77:04:7a:52:83:25: 37:c3:af:ab:e0:91:8b:d1:a7:15:f4:c6:d9:cc:61:33:e0:a3: eb:52:50:6a:33:70:28:d5:69:eb:29:3a:49:d1:c6:2b:cd:b3: 4b:66:5d:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdw7UuIGas6lzCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk OTQyYzI1NmQtZjkxZS00ODg0LWFiYTUtNWU3NTMzMDJjMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbkEw7icSAk/NWmqlKGpbAq5WWyO7C8Bjxpi nfNRYUli1x8ze3gbiqFklJZcAnS0OoJ+CEbUVhnGGX93IOJFeTbILZCREl324ti7 qvBDdlO3gw1eALyLvSNek6mmfcA27hPgix+NxAg9oAnl2506/eQ5WPAg4z/s/+gL d5dTFufEMSjspu0zGTHzzju8W0blNYRGamaVHJQgoH363yeqqN1nDNE2VN/x6uLQ kEvVoCDcNY3cZJU+KULTjdNOSu7e0jqx4WIMkf7TSZOjhGGJEw/8yCbvLB1tLgLt Bxm6Eu95VIsWvowiLgCN9IpbO6R/kQM8I4uvVpRurxBfp3wRAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2u4V0ZXxtpm0Vf9eG+YWZiejnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNGYyMzdkZDgtZjg5OC0z N2UwLTgyOTAtMGM3MTgxMTY1Mjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CU7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYZQdm0aArKjels4cVIwVuMEnrWX1kW9SawJiWYaBZP1L4l5RcMBo1K IxF6bmlw8tktvu5QtsCj0lkI+FJIDFiaQC+5yxSHsGaU3nyUZhO5mJc2boT297ji YYtfEQob7SogU5iF+T5mR3sJ+KKnNSSCdoQ1s0c1XCZOzOl7zXVost9vINpAg8MO ZaZ0NCCa4htbMEUFwE7HBENo7MR6J5OzvV9pN5KGD3KpPZnq52OFQUknbAjOXJBU +6u1/tnBn3ZyeJzXGKKQ89LbRSOx/JxtK3cEelKDJTfDr6vgkYvRpxX0xtnMYTPg o+tSUGozcCjVaespOknRxivNs0tmXRM= -----END CERTIFICATE-----Generated at Fri Oct 24 11:59:22 2025 by rpki-client