$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/698462e2-42b4-35b5-a712-a58067b5e726.roa File: 698462e2-42b4-35b5-a712-a58067b5e726.roa (raw, json) Hash identifier: rV82Vu0+uCrXCWoP+efx9ktlWZQjyTmYlHyA+lLMOnE= Subject key identifier: 64:17:B8:0F:DB:F4:67:17:55:F9:A6:B2:1B:E2:1A:CC:66:08:F4:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB49E6C3A076DCC456AC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/698462e2-42b4-35b5-a712-a58067b5e726.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 36628 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b4:9e:6c:3a:07:6d:cc:45:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=e56096d5-bbb3-4b94-ae16-70a2719d2097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:97:3a:b5:b3:a6:df:89:0b:9f:0d:99:bf:0d: 3a:ce:db:48:11:16:3f:83:9e:c6:12:68:9c:13:05: 57:a1:d0:d0:bb:af:31:bf:ed:ee:f4:57:df:7b:8c: ad:34:8c:ba:39:fa:57:af:91:bf:38:7e:f9:36:41: 53:74:08:ca:9d:2c:60:c2:3d:81:0d:b4:cc:1a:2a: f0:38:a2:bb:a1:60:87:84:fb:91:28:4e:fa:b6:f7: 11:dc:40:fa:12:85:73:c0:d6:a6:84:61:78:b1:3a: ac:73:d4:02:d0:06:68:cf:3d:2c:33:d9:97:ed:d0: 70:f3:e4:6a:c0:24:50:48:86:65:ee:19:50:08:8e: 1b:1d:70:ee:f9:e1:62:b4:eb:cb:b6:b1:16:69:8d: 63:7e:c9:92:5a:49:b6:44:eb:97:51:ff:b5:8a:0c: 39:47:08:c7:d0:1b:a3:30:78:f1:51:a3:57:f1:20: 1a:23:5a:a7:d1:a9:2f:38:69:d2:c3:65:90:07:dc: 0f:9b:1a:22:b9:f8:07:7d:0f:b1:91:77:59:a7:7b: 73:59:2d:80:58:77:ff:21:67:56:d2:4a:ef:02:7b: 76:92:c8:9a:3d:54:5b:64:36:a4:79:5d:40:92:7e: 7c:44:3b:09:85:e6:d9:f2:b1:24:2f:6f:9b:91:69: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:17:B8:0F:DB:F4:67:17:55:F9:A6:B2:1B:E2:1A:CC:66:08:F4:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/698462e2-42b4-35b5-a712-a58067b5e726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6c:a9:f1:f5:7a:e6:a3:eb:76:3b:fd:47:81:b5:fa:0a:6c: aa:9f:0f:a8:2d:43:3b:84:7c:24:04:16:3b:fc:6b:7d:3f:b5: 98:d7:68:0c:6f:c8:87:f0:89:ab:fb:43:1e:fc:58:9f:ae:f2: c1:5d:42:3e:08:19:c6:4c:b1:c8:8a:c4:af:3d:92:e7:dd:10: 3b:7e:bf:a0:bd:48:e8:14:d0:48:f7:7b:fe:95:25:cc:d7:04: c7:61:a3:28:11:0a:09:69:46:a7:65:a7:9a:88:6b:7c:c5:dc: 55:72:ea:29:4e:fc:31:0c:25:ef:42:68:52:7d:e8:be:72:9b: dc:ab:c2:7c:dd:da:61:c4:32:94:39:ce:a0:58:b7:03:c3:f5: d6:14:40:24:fb:8e:a1:e2:15:8a:d7:3f:a1:79:04:72:4d:14: dd:bf:8c:cb:40:59:32:b5:59:fd:4c:3a:50:21:b0:e2:ea:93: d0:28:24:05:1e:b6:5e:e0:18:ea:50:89:fb:9c:4d:d5:af:bf: 31:96:d7:8e:88:1b:25:ff:a1:2c:ca:bf:8b:8f:39:6f:77:0d: 6a:d0:3f:b1:70:3d:0a:55:d2:4c:50:f2:a3:8a:90:11:8c:1a: 23:26:c8:d9:2d:d3:77:fd:98:02:2b:9c:cd:db:f6:70:d1:71: 52:98:7c:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLSebDoHbcxFasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTU2MDk2ZDUtYmJiMy00Yjk0LWFlMTYtNzBhMjcxOWQyMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJc6tbOm34kLnw2Zvw06zttIERY/g57GEmic EwVXodDQu68xv+3u9Fffe4ytNIy6OfpXr5G/OH75NkFTdAjKnSxgwj2BDbTMGirw OKK7oWCHhPuRKE76tvcR3ED6EoVzwNamhGF4sTqsc9QC0AZozz0sM9mX7dBw8+Rq wCRQSIZl7hlQCI4bHXDu+eFitOvLtrEWaY1jfsmSWkm2ROuXUf+1igw5RwjH0Buj MHjxUaNX8SAaI1qn0akvOGnSw2WQB9wPmxoiufgHfQ+xkXdZp3tzWS2AWHf/IWdW 0krvAnt2ksiaPVRbZDakeV1Akn58RDsJhebZ8rEkL2+bkWkuVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGQXuA/b9GcXVfmmshviGsxmCPTJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjk4NDYyZTItNDJiNC0z NWI1LWE3MTItYTU4MDY3YjVlNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPbKnx9Xrmo+t2O/1HgbX6Cmyqnw+oLUM7hHwkBBY7/Gt9P7WY12gM b8iH8Imr+0Me/FifrvLBXUI+CBnGTLHIisSvPZLn3RA7fr+gvUjoFNBI93v+lSXM 1wTHYaMoEQoJaUanZaeaiGt8xdxVcuopTvwxDCXvQmhSfei+cpvcq8J83dphxDKU Oc6gWLcDw/XWFEAk+46h4hWK1z+heQRyTRTdv4zLQFkytVn9TDpQIbDi6pPQKCQF HrZe4BjqUIn7nE3Vr78xlteOiBsl/6Esyr+Ljzlvdw1q0D+xcD0KVdJMUPKjipAR jBojJsjZLdN3/ZgCK5zN2/Zw0XFSmHxp -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:02 2025 by rpki-client