$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa File: c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa (raw, json) Hash identifier: ceFhdkBlYsaVjI2yar9wLzK+OOcR2Yamccjmgs9LIHE= Subject key identifier: D5:85:D1:D8:0E:ED:A3:84:98:FB:EA:DB:DA:95:8B:4B:23:BD:88:39 Certificate issuer: /CN=53047e29-2570-4585-9e69-b23797196c26 Certificate serial: 010D0C9F4328584B92DCF0391AB2699E8AC0C680 Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 397183 IP address blocks: 158.116.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f0:39:1a:b2:69:9e:8a:c0:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53047e29-2570-4585-9e69-b23797196c26 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=9b28b087-46dd-4eb5-8cb7-ad4157ec8054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:09:ab:58:dd:dd:69:07:79:67:e8:5b:62:08: 55:a9:f0:66:5f:3f:e0:9b:03:6f:2d:37:97:21:ad: 07:31:fb:dd:25:b3:fb:3a:ac:2e:38:df:2f:43:ea: 2a:5c:65:51:28:d2:30:18:87:c5:e9:e0:80:48:83: f4:a1:54:ff:6a:54:c9:ba:31:bd:26:dc:cc:62:c6: 52:aa:2f:39:71:a9:e2:44:d2:11:72:8c:4d:70:81: bb:42:3f:0a:a7:cf:e0:04:c4:ca:02:49:39:4b:0c: e7:83:80:dc:3f:9e:8e:f0:cf:a6:59:e4:27:72:8a: 2e:8c:81:78:f3:35:f2:7e:c7:74:87:6b:14:c8:cf: c4:89:75:a8:09:64:6c:02:f2:e0:c3:0b:87:93:c0: 87:9c:27:6c:25:27:46:fa:10:9a:d0:09:51:be:2f: db:f4:b1:03:46:4a:e7:7d:6f:6e:b2:96:5d:a7:14: a3:a3:0c:b8:46:f8:be:e1:14:6e:ff:7d:d9:b4:27: 3c:29:37:ec:33:89:3f:78:96:41:31:11:fc:42:be: 94:a0:dc:d8:91:73:76:86:49:99:54:e7:07:5d:47: d9:2d:9c:7f:2e:f2:a1:8d:0e:7b:7d:e2:ad:98:e4: 84:48:55:25:93:ed:37:ad:3c:9e:aa:97:51:b0:af: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:85:D1:D8:0E:ED:A3:84:98:FB:EA:DB:DA:95:8B:4B:23:BD:88:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl X509v3 Authority Key Identifier: keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer sbgp-ipAddrBlock: critical IPv4: 158.116.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a5:36:88:0a:82:90:af:f9:81:75:66:31:f6:07:77:e3:c0: e7:0e:69:55:85:10:4c:91:90:ff:a2:c4:43:12:8a:48:d6:7b: 28:7a:49:93:2b:46:fe:2a:1d:65:8a:34:c4:07:9f:0f:85:ca: 77:ff:6d:c4:0b:4d:67:f0:13:2f:1f:03:37:65:ce:93:1a:5c: df:31:db:50:67:82:f6:3d:a7:78:8d:fd:33:d2:f9:01:31:4f: 2b:4a:0c:19:5c:dc:5d:37:d6:80:7a:f3:70:ce:27:68:13:7d: 0b:65:9a:34:29:8c:1f:79:0b:9b:f9:9c:56:cf:0c:d2:75:ff: 69:8f:27:df:7a:cb:a1:68:5a:4d:10:5d:58:03:72:9e:38:c5: 9b:da:46:6d:99:3d:c2:02:48:e7:35:38:42:5b:ef:2d:26:a4: 0c:dd:ee:8a:a4:06:3b:79:d9:c2:e6:97:b7:a7:57:97:28:30: 87:75:fd:40:a1:4b:0c:6b:ca:0e:1d:d8:3c:24:f1:b7:bd:d0: 41:35:75:e0:5c:df:75:ef:2a:8d:a2:46:fa:8d:9a:b8:68:55: f9:d6:be:a6:03:4f:d7:7d:97:5a:cd:39:de:26:46:4e:6a:c4: 5d:62:0c:2f:a3:7a:16:ce:36:66:e1:f7:1f:28:e0:37:2a:40: 39:4e:4b:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PA5GrJpnorAxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMwNDdlMjktMjU3MC00NTg1LTllNjktYjIzNzk3MTk2 YzI2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk OWIyOGIwODctNDZkZC00ZWI1LThjYjctYWQ0MTU3ZWM4MDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAmrWN3daQd5Z+hbYghVqfBmXz/gmwNvLTeX Ia0HMfvdJbP7OqwuON8vQ+oqXGVRKNIwGIfF6eCASIP0oVT/alTJujG9JtzMYsZS qi85caniRNIRcoxNcIG7Qj8Kp8/gBMTKAkk5Swzng4DcP56O8M+mWeQncooujIF4 8zXyfsd0h2sUyM/EiXWoCWRsAvLgwwuHk8CHnCdsJSdG+hCa0AlRvi/b9LEDRkrn fW9uspZdpxSjowy4Rvi+4RRu/33ZtCc8KTfsM4k/eJZBMRH8Qr6UoNzYkXN2hkmZ VOcHXUfZLZx/LvKhjQ57feKtmOSESFUlk+03rTyeqpdRsK95mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWF0dgO7aOEmPvq29qVi0sjvYg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MzA0 N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3OTcxOTZjMjYvYzQxYzU0MWEtNDIxOS0z MmRkLWFjMDUtYjliYmYxZGRlYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTMwNDdlMjktMjU3MC00NTg1LTll NjktYjIzNzk3MTk2YzI2LzUzMDQ3ZTI5LTI1NzAtNDU4NS05ZTY5LWIyMzc5NzE5 NmMyNi5jcmwwHwYDVR0jBBgwFoAUwbHF/ap4TpJ+5eUnes7voPyzEdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MzA0N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3 OTcxOTZjMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnnQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHClNogKgpCv+YF1ZjH2B3fjwOcOaVWFEEyRkP+ixEMSikjWeyh6SZMr Rv4qHWWKNMQHnw+Fynf/bcQLTWfwEy8fAzdlzpMaXN8x21BngvY9p3iN/TPS+QEx TytKDBlc3F031oB683DOJ2gTfQtlmjQpjB95C5v5nFbPDNJ1/2mPJ996y6FoWk0Q XVgDcp44xZvaRm2ZPcICSOc1OEJb7y0mpAzd7oqkBjt52cLml7enV5coMId1/UCh Swxryg4d2Dwk8be90EE1deBc33XvKo2iRvqNmrhoVfnWvqYDT9d9l1rNOd4mRk5q xF1iDC+jehbONmbh9x8o4DcqQDlOS0c= -----END CERTIFICATE-----Generated at Tue Oct 21 02:32:32 2025 by rpki-client