$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/114717f1-b1d5-350f-b60e-fa9628846fbd.roa File: 114717f1-b1d5-350f-b60e-fa9628846fbd.roa (raw, json) Hash identifier: D3ySm3uNQyaBvMdk8MjdiViK6s0wqm/hSyRa2PtHzWI= Subject key identifier: 7F:8E:52:3B:E4:17:2E:5A:A0:C3:6F:DE:50:42:7E:88:FF:9E:6F:BE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CAF0864D83E6EBBCB9900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/114717f1-b1d5-350f-b60e-fa9628846fbd.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396544 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:af:08:64:d8:3e:6e:bb:cb:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=dcc520b9-0985-42f3-b677-2f17493f4860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:fc:ad:40:3a:59:86:26:64:1c:04:0a:76: 87:73:2b:7f:90:bc:55:71:e7:31:59:a0:4e:16:81: 47:14:03:c9:94:06:fa:95:f1:c0:3d:9e:26:51:4f: 7b:21:3e:f5:36:92:9d:9d:28:ca:08:e0:ab:05:4d: df:ee:a8:0c:4d:c3:7d:d4:85:66:8f:b9:e0:c7:57: ab:d1:f4:c5:5c:9d:68:7d:51:74:8c:9a:a8:71:de: b2:37:88:ef:c2:1c:37:80:80:ec:21:d7:e4:e5:7c: d7:85:db:06:e1:19:cd:5e:29:bc:3d:e6:b8:0d:77: 33:31:e0:6c:39:11:33:44:ff:bb:bf:67:7c:57:07: d5:a0:88:64:85:5e:20:9d:bd:96:ab:90:44:82:7f: 30:55:40:44:2e:8e:ab:70:08:4c:d2:3e:81:87:96: 38:f0:fa:e4:45:ed:ab:87:b9:2f:9a:bd:82:e8:e4: d8:44:ba:45:46:7b:5f:37:a1:5c:da:49:01:ad:6b: 70:b4:d6:d2:ff:3b:28:12:bd:ac:53:a7:8a:57:4a: b1:91:58:ba:51:83:2c:ff:9b:ee:af:eb:5a:0e:e0: f6:23:15:97:f2:e5:49:5c:97:b0:0c:b0:21:b0:d6: c9:d1:7e:75:47:48:2e:fd:b4:59:2f:bc:fd:26:fc: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8E:52:3B:E4:17:2E:5A:A0:C3:6F:DE:50:42:7E:88:FF:9E:6F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/114717f1-b1d5-350f-b60e-fa9628846fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b2:0b:6e:18:cf:24:e7:5d:87:0e:2a:84:cf:41:ea:c9:e7: 3e:7c:70:38:98:69:9b:4d:58:30:4e:1d:d0:6c:ac:de:69:71: 3b:0f:87:c2:22:bc:b5:7d:48:0f:57:be:1a:ad:f3:24:a0:7a: ae:c6:5d:fa:48:72:db:6f:33:c9:ac:53:33:c1:4b:91:af:f7: 34:74:da:68:67:a5:7e:11:b8:a9:62:b4:92:f5:34:09:e7:1c: 2b:fa:ca:a6:76:41:fa:15:59:43:c2:4e:77:6a:3c:4d:49:42: 80:d2:e4:9e:fe:72:8e:c5:49:0b:6b:98:0b:19:75:3a:db:95: c1:46:2d:d8:17:48:d6:2b:68:22:4f:56:d7:b3:71:9c:e4:26: a3:1c:ac:02:bb:42:c3:bc:44:72:db:09:29:9e:13:3b:3b:1d: 93:4d:6e:a5:59:96:3c:6c:59:3c:b6:ad:80:ad:17:6d:bb:6b: 73:6b:4e:b7:d5:39:67:d2:6f:95:2a:e1:88:69:ee:68:aa:36: c7:c2:3b:5c:d3:bf:2d:d1:da:eb:77:40:df:30:a5:81:2a:f9: 23:7a:ab:2e:51:a5:77:85:db:7b:e1:be:6b:71:5c:30:78:67: 80:b0:22:f7:b4:de:42:3f:ef:50:51:58:61:ba:94:c1:7b:25: 95:49:80:37 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLK8IZNg+brvLmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZGNjNTIwYjktMDk4NS00MmYzLWI2NzctMmYxNzQ5M2Y0ODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEP8rUA6WYYmZBwECnaHcyt/kLxVcecxWaBO FoFHFAPJlAb6lfHAPZ4mUU97IT71NpKdnSjKCOCrBU3f7qgMTcN91IVmj7ngx1er 0fTFXJ1ofVF0jJqocd6yN4jvwhw3gIDsIdfk5XzXhdsG4RnNXim8Pea4DXczMeBs OREzRP+7v2d8VwfVoIhkhV4gnb2Wq5BEgn8wVUBELo6rcAhM0j6Bh5Y48PrkRe2r h7kvmr2C6OTYRLpFRntfN6Fc2kkBrWtwtNbS/zsoEr2sU6eKV0qxkVi6UYMs/5vu r+taDuD2IxWX8uVJXJewDLAhsNbJ0X51R0gu/bRZL7z9JvwXOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH+OUjvkFy5aoMNv3lBCfoj/nm++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTE0NzE3ZjEtYjFkNS0z NTBmLWI2MGUtZmE5NjI4ODQ2ZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4sgtuGM8k512HDiqEz0Hqyec+fHA4mGmbTVgwTh3QbKzeaXE7D4fC Iry1fUgPV74arfMkoHquxl36SHLbbzPJrFMzwUuRr/c0dNpoZ6V+EbipYrSS9TQJ 5xwr+sqmdkH6FVlDwk53ajxNSUKA0uSe/nKOxUkLa5gLGXU625XBRi3YF0jWK2gi T1bXs3Gc5CajHKwCu0LDvERy2wkpnhM7Ox2TTW6lWZY8bFk8tq2ArRdtu2tza063 1Tln0m+VKuGIae5oqjbHwjtc078t0drrd0DfMKWBKvkjeqsuUaV3hdt74b5rcVww eGeAsCL3tN5CP+9QUVhhupTBeyWVSYA3 -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:39 2025 by rpki-client