$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5dc9304-b3d1-3e6b-be2d-e44aa843dd53.roa File: d5dc9304-b3d1-3e6b-be2d-e44aa843dd53.roa (raw, json) Hash identifier: LoFLgNum+E008nRCQZwr7M1x77iyaavGUbyvai3BOMc= Subject key identifier: 32:98:F8:3F:4D:90:24:2B:30:02:DE:CC:59:1D:D7:C5:B9:8F:4B:8B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CAFD6657AC883A88F7600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5dc9304-b3d1-3e6b-be2d-e44aa843dd53.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396541 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:af:d6:65:7a:c8:83:a8:8f:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=5b4d626d-4b5b-4394-93a8-367d24a554e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ca:99:7a:08:bd:8b:bb:5c:58:a8:f6:7d:65: 1c:04:18:ab:af:18:ad:87:5c:c7:31:de:c6:b8:a2: 7a:aa:53:f1:dc:97:1e:8b:4f:89:a7:8a:55:5b:37: 95:fc:b8:b3:05:42:f2:92:aa:79:03:b8:6d:85:96: 5e:4d:a9:f3:b8:56:be:aa:16:e1:17:46:a2:14:9b: e8:db:0a:22:a6:b5:60:41:a7:a7:10:e8:aa:81:b4: b7:0f:25:ed:5a:32:ef:13:89:8b:ec:c9:bf:b3:1b: 62:7f:05:b1:07:e0:6b:cc:33:5b:36:96:77:57:78: eb:48:0c:72:c7:5f:a4:2d:28:55:10:56:93:87:14: e4:85:88:22:04:b2:f0:00:2d:04:4e:52:d3:dc:e4: 02:bf:59:cd:2c:6b:f0:f9:2c:35:30:e6:f1:e0:63: a8:f1:06:72:aa:89:56:a7:a2:b4:38:a0:93:d1:cb: da:35:10:cc:c7:c3:7e:0f:7c:cb:1d:e7:49:04:e1: dd:56:98:a1:f2:46:5b:bd:13:72:e9:fd:7e:19:5b: b7:44:b8:73:54:2e:68:56:8c:08:69:46:c1:20:6d: 66:7a:cf:b3:09:70:4a:2f:1e:28:da:50:9c:81:0a: b8:30:33:6c:0f:b9:01:89:85:18:4d:48:8d:b5:05: 46:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:F8:3F:4D:90:24:2B:30:02:DE:CC:59:1D:D7:C5:B9:8F:4B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5dc9304-b3d1-3e6b-be2d-e44aa843dd53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:9a:f4:0b:59:5b:ed:80:99:ec:0b:e3:0f:2c:28:c3:a2:2f: 2a:7e:c9:f6:af:a2:b1:25:8b:0e:6c:b6:e7:df:40:aa:a0:2a: 2d:51:23:c3:85:13:5c:39:c5:ae:dd:69:e4:c8:6a:69:ee:a6: 16:ff:5a:3e:a4:5b:88:5e:da:78:4f:62:61:91:3f:5f:b3:d4: 58:83:2c:1a:ed:cc:ee:92:93:0a:2e:91:df:fa:0a:7c:d4:40: f5:71:10:b1:a5:96:e5:09:9e:f4:04:8d:bc:4e:fc:c4:f7:88: d4:e7:56:e3:92:75:6c:b6:64:89:37:33:d0:d5:cf:17:c5:d8: 97:09:ae:8b:60:eb:14:41:4e:51:3e:20:bd:7e:96:8f:58:4e: d2:b0:bd:1f:06:de:ea:2d:96:56:a3:2a:13:c9:b1:cc:30:1e: 08:39:67:52:a3:ca:80:3f:bf:ed:2e:61:d1:af:ca:93:d6:0a: 7d:e3:ee:ab:b9:a2:a6:94:fe:a7:75:b2:da:77:e0:cc:e5:02: 34:8d:10:46:06:e2:b4:37:2f:d9:9e:c5:66:2b:29:fe:44:38: 47:55:35:51:12:5f:80:af:20:b2:7a:fc:02:de:e1:e9:6b:15: ea:b0:f1:39:ab:7b:cf:31:b3:ba:8b:44:e8:cd:a1:99:1f:0b: 01:8c:0c:b1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLK/WZXrIg6iPdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NWI0ZDYyNmQtNGI1Yi00Mzk0LTkzYTgtMzY3ZDI0YTU1NGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsqZegi9i7tcWKj2fWUcBBirrxith1zHMd7G uKJ6qlPx3Jcei0+Jp4pVWzeV/LizBULykqp5A7hthZZeTanzuFa+qhbhF0aiFJvo 2woiprVgQaenEOiqgbS3DyXtWjLvE4mL7Mm/sxtifwWxB+BrzDNbNpZ3V3jrSAxy x1+kLShVEFaThxTkhYgiBLLwAC0ETlLT3OQCv1nNLGvw+Sw1MObx4GOo8QZyqolW p6K0OKCT0cvaNRDMx8N+D3zLHedJBOHdVpih8kZbvRNy6f1+GVu3RLhzVC5oVowI aUbBIG1mes+zCXBKLx4o2lCcgQq4MDNsD7kBiYUYTUiNtQVGOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDKY+D9NkCQrMALezFkd18W5j0uLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDVkYzkzMDQtYjNkMS0z ZTZiLWJlMmQtZTQ0YWE4NDNkZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1mvQLWVvtgJnsC+MPLCjDoi8qfsn2r6KxJYsObLbn30CqoCotUSPD hRNcOcWu3WnkyGpp7qYW/1o+pFuIXtp4T2JhkT9fs9RYgywa7czukpMKLpHf+gp8 1ED1cRCxpZblCZ70BI28TvzE94jU51bjknVstmSJNzPQ1c8XxdiXCa6LYOsUQU5R PiC9fpaPWE7SsL0fBt7qLZZWoyoTybHMMB4IOWdSo8qAP7/tLmHRr8qT1gp94+6r uaKmlP6ndbLad+DM5QI0jRBGBuK0Ny/ZnsVmKyn+RDhHVTVREl+AryCyevwC3uHp axXqsPE5q3vPMbO6i0TozaGZHwsBjAyx -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:20 2025 by rpki-client