$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85837513-ea2c-3e1a-8794-e573969f9808.roa File: 85837513-ea2c-3e1a-8794-e573969f9808.roa (raw, json) Hash identifier: XATPwSsJZOJCvZLKJLTGj19u0FAkIyhzR1Tz9UaZ8RE= Subject key identifier: ED:6E:BB:60:BD:08:B8:78:F4:55:58:AF:58:B4:E1:29:2E:86:C6:15 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB4424D782ABE02442600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85837513-ea2c-3e1a-8794-e573969f9808.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 40717 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b4:42:4d:78:2a:be:02:44:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=98306fa4-f065-4f02-ab6b-5374cfeeac2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fa:4a:8b:95:59:2e:cc:58:e5:9d:eb:33:1d: 3f:50:87:9a:c1:31:df:50:4f:57:75:e7:93:67:39: 7b:ac:fd:4f:23:5f:d6:b5:76:2b:f1:ae:fe:f3:4c: a7:7f:a9:bf:77:69:ac:bb:bc:7a:13:0e:06:64:0c: ef:c6:2a:7d:84:51:a7:3d:bc:c6:4d:8b:33:83:84: 5a:90:96:94:c9:85:a1:79:08:12:64:c2:38:d2:9a: 71:85:df:2e:ce:bf:f4:ff:cd:40:91:7f:13:fc:6f: a9:0c:0d:94:de:42:2e:c9:1b:9b:06:71:65:26:fe: 95:04:e5:07:e1:65:a4:ca:67:eb:a8:3f:87:32:84: 7e:df:bf:6b:1e:14:e6:81:01:66:92:fe:ba:cb:e3: 6f:28:3d:ac:80:aa:98:4f:7d:31:16:95:e5:61:29: 9a:80:98:5f:c6:c9:24:75:3c:e1:c0:38:d0:c9:9b: ef:f3:e8:00:2b:2d:b4:b7:c6:07:5a:71:8a:fd:ef: e1:41:09:65:5c:52:4c:e3:4f:a4:69:ea:d3:64:c8: 53:a1:ca:35:86:0a:6f:46:c9:1e:74:95:21:a7:71: 4a:92:da:4c:50:f7:e1:fb:08:9e:5c:50:34:6d:c7: 1a:bf:72:d1:fb:44:c5:8f:f6:9c:0e:70:f8:3f:05: a5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6E:BB:60:BD:08:B8:78:F4:55:58:AF:58:B4:E1:29:2E:86:C6:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85837513-ea2c-3e1a-8794-e573969f9808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f5:55:e0:53:52:24:4e:f5:fe:6a:16:43:37:a0:16:5c:aa: 12:14:2a:6c:cc:4d:5b:40:ab:eb:66:84:a4:ad:c0:1d:4d:12: d0:15:47:ee:65:cb:d6:79:ab:07:a4:4c:19:59:23:65:23:01: f3:e2:80:56:3f:da:52:89:08:99:b8:bd:96:91:14:fc:b0:e4: 8d:22:7a:d0:9c:8d:6f:a2:10:d9:4b:20:87:66:ad:c7:91:e9: c4:09:b3:b1:7f:79:39:6b:ee:5c:80:3a:46:43:da:44:a2:6a: 84:6d:11:f7:c3:2a:74:f8:db:27:a4:50:66:9d:48:8a:97:2b: b4:26:e9:24:2b:76:75:9d:42:cf:79:3a:66:2c:ae:56:1d:f8: fe:d0:63:d9:a3:06:fa:4c:c2:f6:ff:93:a4:e3:0a:08:aa:01: 80:04:67:9c:49:fd:16:f3:be:3b:fe:54:78:70:e8:a1:d3:24: 48:fe:03:51:cf:34:22:e3:1c:11:64:75:98:82:ce:f1:36:e6: de:c3:ff:62:25:34:fa:b4:c8:fa:38:3b:11:8f:99:07:4a:5b: 04:ee:9d:07:e6:75:d5:6f:47:26:1d:e5:4a:0b:8f:24:ea:94: fd:89:3a:f4:1c:2e:64:8d:70:db:83:19:28:70:c8:89:d9:21: 98:ab:c8:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLRCTXgqvgJEJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTgzMDZmYTQtZjA2NS00ZjAyLWFiNmItNTM3NGNmZWVhYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fpKi5VZLsxY5Z3rMx0/UIeawTHfUE9XdeeT Zzl7rP1PI1/WtXYr8a7+80ynf6m/d2msu7x6Ew4GZAzvxip9hFGnPbzGTYszg4Ra kJaUyYWheQgSZMI40ppxhd8uzr/0/81AkX8T/G+pDA2U3kIuyRubBnFlJv6VBOUH 4WWkymfrqD+HMoR+379rHhTmgQFmkv66y+NvKD2sgKqYT30xFpXlYSmagJhfxskk dTzhwDjQyZvv8+gAKy20t8YHWnGK/e/hQQllXFJM40+kaerTZMhToco1hgpvRske dJUhp3FKktpMUPfh+wieXFA0bccav3LR+0TFj/acDnD4PwWlHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO1uu2C9CLh49FVYr1i04SkuhsYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU4Mzc1MTMtZWEyYy0z ZTFhLTg3OTQtZTU3Mzk2OWY5ODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAY9VXgU1IkTvX+ahZDN6AWXKoSFCpszE1bQKvrZoSkrcAdTRLQFUfu ZcvWeasHpEwZWSNlIwHz4oBWP9pSiQiZuL2WkRT8sOSNInrQnI1vohDZSyCHZq3H kenECbOxf3k5a+5cgDpGQ9pEomqEbRH3wyp0+NsnpFBmnUiKlyu0JukkK3Z1nULP eTpmLK5WHfj+0GPZowb6TML2/5Ok4woIqgGABGecSf0W8747/lR4cOih0yRI/gNR zzQi4xwRZHWYgs7xNubew/9iJTT6tMj6ODsRj5kHSlsE7p0H5nXVb0cmHeVKC48k 6pT9iTr0HC5kjXDbgxkocMiJ2SGYq8jr -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:24 2025 by rpki-client