$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/259fdb53-59ca-3767-aac4-b9acd2c8d23a.roa File: 259fdb53-59ca-3767-aac4-b9acd2c8d23a.roa (raw, json) Hash identifier: 2T2K3LKicJHRWlm1KBBgnuCQH7oGlBN1lXoJ3nmWCLY= Subject key identifier: A9:70:C2:C3:C6:A1:50:7D:6D:97:21:58:78:C4:E3:8F:E5:C6:BD:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB2EFFF92F7E64ECA8F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/259fdb53-59ca-3767-aac4-b9acd2c8d23a.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396565 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b2:ef:ff:92:f7:e6:4e:ca:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=2e1d8597-1a0f-4a5f-89dd-9709889e90a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:4e:86:b9:f6:92:27:2a:53:d2:cb:86:c3: b5:d0:25:e1:2b:25:d1:87:5d:a0:37:c2:36:ef:dc: 3b:0b:71:20:4a:03:2f:cd:b3:cb:aa:91:0b:72:fa: 99:54:d5:18:30:b9:c9:97:fa:7b:be:0e:fa:fe:7b: 47:eb:60:22:0e:83:99:de:df:52:76:b8:c6:c2:11: 82:1f:25:6d:2c:57:75:90:8f:40:eb:33:19:6a:ba: c4:bf:ff:ed:d9:42:9d:e7:5b:28:d9:96:da:33:a6: 50:7f:e6:01:d4:74:ec:d0:80:21:d4:84:87:d3:fc: 60:53:2d:0c:22:88:01:65:f5:5f:ab:18:ea:59:be: 50:f5:91:8d:59:5e:6a:b9:a8:e5:ee:62:20:26:d1: a5:2a:d7:59:57:fe:a0:98:bf:be:7a:98:3c:82:9d: e1:fe:9d:83:85:c3:f0:ac:b3:96:dc:dc:9c:60:0b: e4:a5:9e:9e:5a:3e:8c:cf:67:0c:19:e3:b2:e4:ca: 22:b9:80:15:0d:4b:92:7d:64:77:21:e0:f1:fb:ee: d1:ad:e1:47:50:e9:25:70:bb:34:d8:6a:66:ca:77: e7:3d:85:bd:bd:b0:52:f8:e8:38:66:5c:25:39:d5: 50:fd:ce:b3:26:89:04:8b:b0:03:b0:d5:01:cb:9c: 96:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:70:C2:C3:C6:A1:50:7D:6D:97:21:58:78:C4:E3:8F:E5:C6:BD:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/259fdb53-59ca-3767-aac4-b9acd2c8d23a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:fd:12:d0:60:e1:b2:df:fc:84:5a:f3:b9:57:f1:35:4b:79: 6d:4b:89:77:6a:1d:75:a2:a4:fd:c6:74:26:e9:23:11:c2:9e: 67:e3:10:0c:9e:a6:d5:7f:14:81:ce:1d:fc:56:e3:43:8f:79: 7c:6a:e8:cc:71:bb:aa:c1:7e:ac:37:cb:15:f4:ab:2d:78:7a: 97:da:47:22:ea:e8:5c:d6:51:cd:77:82:fa:a5:b2:7c:e9:6f: 08:78:66:fd:8b:17:a3:0e:f8:d0:b0:70:7d:fd:4c:e0:28:bf: b7:67:e8:68:98:2a:fa:8c:71:31:9b:98:1d:4d:8b:d3:00:0f: 3a:bd:ff:0b:af:38:da:7a:8b:24:34:12:c2:f0:62:d2:c1:d6: 8d:e4:ec:fd:3d:a4:8b:92:96:ee:73:3f:38:64:bc:31:a3:72: 8c:af:e0:10:9e:7b:ce:2f:51:8e:fb:f4:07:b1:ba:0f:66:a7: d5:bd:31:88:d4:a4:a0:7e:df:e2:cc:53:bf:d8:f4:dc:b1:30: 18:f5:23:39:ec:db:4f:a6:da:4c:40:ba:94:42:df:b5:9c:e9: 32:4f:74:9a:4b:9a:cb:83:5a:6c:99:09:48:46:92:a9:4a:fe: 33:5d:59:9a:04:a1:04:11:92:d8:e2:8d:aa:f5:bd:df:18:3f: 09:21:11:2d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLLv/5L35k7KjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MmUxZDg1OTctMWEwZi00YTVmLTg5ZGQtOTcwOTg4OWU5MGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq1Ohrn2kicqU9LLhsO10CXhKyXRh12gN8I2 79w7C3EgSgMvzbPLqpELcvqZVNUYMLnJl/p7vg76/ntH62AiDoOZ3t9SdrjGwhGC HyVtLFd1kI9A6zMZarrEv//t2UKd51so2ZbaM6ZQf+YB1HTs0IAh1ISH0/xgUy0M IogBZfVfqxjqWb5Q9ZGNWV5quajl7mIgJtGlKtdZV/6gmL++epg8gp3h/p2DhcPw rLOW3NycYAvkpZ6eWj6Mz2cMGeOy5MoiuYAVDUuSfWR3IeDx++7RreFHUOklcLs0 2GpmynfnPYW9vbBS+Og4ZlwlOdVQ/c6zJokEi7ADsNUBy5yW4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKlwwsPGoVB9bZchWHjE44/lxr1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjU5ZmRiNTMtNTljYS0z NzY3LWFhYzQtYjlhY2QyYzhkMjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBT/RLQYOGy3/yEWvO5V/E1S3ltS4l3ah11oqT9xnQm6SMRwp5n4xAM nqbVfxSBzh38VuNDj3l8aujMcbuqwX6sN8sV9KsteHqX2kci6uhc1lHNd4L6pbJ8 6W8IeGb9ixejDvjQsHB9/UzgKL+3Z+homCr6jHExm5gdTYvTAA86vf8Lrzjaeosk NBLC8GLSwdaN5Oz9PaSLkpbucz84ZLwxo3KMr+AQnnvOL1GO+/QHsboPZqfVvTGI 1KSgft/izFO/2PTcsTAY9SM57NtPptpMQLqUQt+1nOkyT3SaS5rLg1psmQlIRpKp Sv4zXVmaBKEEEZLY4o2q9b3fGD8JIREt -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:35 2025 by rpki-client