$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab2304b2-cbba-35f3-be6a-e8b3747cdeec.roa File: ab2304b2-cbba-35f3-be6a-e8b3747cdeec.roa (raw, json) Hash identifier: /B2776s2LNEKtk5QkQAZICr+I2GjfZ8gJWREioA+/xs= Subject key identifier: 3C:5E:F1:5C:59:96:A7:DC:46:AC:80:12:10:00:D4:CD:05:83:04:C6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB22995D23BD9C85E2400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab2304b2-cbba-35f3-be6a-e8b3747cdeec.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396540 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b2:29:95:d2:3b:d9:c8:5e:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=df178561-5f74-4fff-aa17-8600998d0f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8c:35:d7:92:11:13:08:fb:41:90:23:91:d8: a5:04:01:e0:0e:9a:fc:52:86:23:cd:6b:d3:8b:3e: 82:75:e2:e9:38:0a:33:c6:61:6d:39:fe:35:cb:b4: 7b:52:1c:74:51:8b:6d:b8:bd:b2:de:85:14:0d:34: a6:54:6d:61:56:10:5e:cd:10:3a:54:9c:80:2f:3a: 3c:e6:a5:f0:3e:18:af:2f:fc:70:b4:21:94:4d:42: 13:53:4c:a2:42:19:0a:04:5d:cb:46:1b:dc:0a:b6: 1f:a1:63:14:0a:1d:53:be:60:38:66:78:30:4e:50: f7:a0:12:98:4d:f9:d7:61:04:c9:cd:59:b5:33:1b: 58:63:65:57:de:3c:10:e5:e6:ae:a0:79:cd:a4:fb: 9e:63:63:3b:62:b9:b0:83:40:e0:6f:39:a2:4d:c1: a2:83:dc:56:52:e9:70:7d:25:c0:6d:ed:52:3a:d6: 40:13:e7:a1:7c:b3:6f:6d:b8:bc:13:5f:b7:c3:ef: af:39:44:e9:eb:70:47:7d:d0:f0:8a:4f:ef:9b:bd: 23:fc:96:42:f8:a7:2d:1a:97:3e:16:18:c2:c1:88: 83:a9:ae:b8:98:4c:c7:3e:4e:99:ef:76:f3:05:0a: 1f:37:07:68:4a:29:dc:3b:9c:c7:4a:6f:b7:45:3f: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5E:F1:5C:59:96:A7:DC:46:AC:80:12:10:00:D4:CD:05:83:04:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab2304b2-cbba-35f3-be6a-e8b3747cdeec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9e:52:a1:48:a3:b5:ab:f4:2d:86:a4:7f:5e:db:ec:07:12: fa:68:0a:9b:7c:d0:9a:c9:6e:90:bc:e9:e6:19:67:b3:10:bc: f2:2d:78:dc:9f:59:b1:1a:98:0c:4b:6a:db:60:30:78:b2:8e: 4e:bd:6b:af:02:12:36:6f:e7:bb:5d:10:14:f0:09:02:e0:15: 0a:7c:5d:06:3e:38:74:60:66:16:8a:03:52:a7:5e:dc:71:b0: 4e:5a:43:61:ff:00:08:af:2d:25:81:d7:38:06:6f:b1:58:15: 98:b2:d4:40:86:45:98:e4:38:9a:9c:40:1d:5a:b2:89:c0:64: 92:5a:56:b8:ef:7d:30:58:07:43:f5:27:f3:61:45:2d:6f:3e: e2:e6:a7:44:94:ac:11:a4:05:43:3d:9b:7b:2b:50:ea:d5:23: c1:1f:a4:10:01:44:91:1f:f9:c6:db:ca:d3:ab:9b:a6:48:9a: 11:f4:db:c3:c5:63:b6:c0:ce:44:08:05:fe:86:bb:6a:1a:9e: 19:91:52:fc:b8:e8:ae:0f:a8:2f:a6:13:21:33:7d:ff:27:50: 0b:46:ff:07:22:b9:2c:5c:c8:e5:5c:6c:c7:b9:1e:eb:c9:4f: 94:2d:97:6b:cc:65:fd:30:6b:6e:72:ee:5b:2b:00:93:09:9c: 9f:c4:d0:28 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLIpldI72cheJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZGYxNzg1NjEtNWY3NC00ZmZmLWFhMTctODYwMDk5OGQwZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4w115IREwj7QZAjkdilBAHgDpr8UoYjzWvT iz6CdeLpOAozxmFtOf41y7R7Uhx0UYttuL2y3oUUDTSmVG1hVhBezRA6VJyALzo8 5qXwPhivL/xwtCGUTUITU0yiQhkKBF3LRhvcCrYfoWMUCh1TvmA4ZngwTlD3oBKY TfnXYQTJzVm1MxtYY2VX3jwQ5eauoHnNpPueY2M7Yrmwg0DgbzmiTcGig9xWUulw fSXAbe1SOtZAE+ehfLNvbbi8E1+3w++vOUTp63BHfdDwik/vm70j/JZC+KctGpc+ FhjCwYiDqa64mEzHPk6Z73bzBQofNwdoSincO5zHSm+3RT8wswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDxe8VxZlqfcRqyAEhAA1M0FgwTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWIyMzA0YjItY2JiYS0z NWYzLWJlNmEtZThiMzc0N2NkZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8nlKhSKO1q/QthqR/XtvsBxL6aAqbfNCayW6QvOnmGWezELzyLXjc n1mxGpgMS2rbYDB4so5OvWuvAhI2b+e7XRAU8AkC4BUKfF0GPjh0YGYWigNSp17c cbBOWkNh/wAIry0lgdc4Bm+xWBWYstRAhkWY5DianEAdWrKJwGSSWla4730wWAdD 9SfzYUUtbz7i5qdElKwRpAVDPZt7K1Dq1SPBH6QQAUSRH/nG28rTq5umSJoR9NvD xWO2wM5ECAX+hrtqGp4ZkVL8uOiuD6gvphMhM33/J1ALRv8HIrksXMjlXGzHuR7r yU+ULZdrzGX9MGtucu5bKwCTCZyfxNAo -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:46 2025 by rpki-client