$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/8217683d-bd86-3435-8f8a-9fa8dd80f8b6.roa File: 8217683d-bd86-3435-8f8a-9fa8dd80f8b6.roa (raw, json) Hash identifier: OxGtlz4JpRR1DNWXuaAb9s46kfYEpYFTAP8X7uRY3hs= Subject key identifier: 4F:D4:0A:ED:25:EA:26:C0:4B:91:1C:8D:5F:AF:34:89:B6:FC:FD:41 Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Certificate serial: 010D0C9F4328584A18954C5581EB8ED60D971A00 Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/8217683d-bd86-3435-8f8a-9fa8dd80f8b6.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 30722 IP address blocks: 47.53.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:4c:55:81:eb:8e:d6:0d:97:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=fbb4723f-99a2-4bcf-a47c-e1ca9b0d81bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d0:f8:1e:db:b0:ab:64:05:56:b6:32:f7:c9: 00:c1:2c:22:1c:ea:ad:32:57:0a:d6:67:c6:fa:e0: ed:48:94:f0:62:69:d3:83:e3:87:b5:10:d4:c0:11: 22:51:ee:d7:89:32:8e:e6:0d:3c:d8:2d:8c:33:86: 4c:8c:cd:e6:cb:81:3b:9d:36:56:5a:5d:52:c1:fe: 18:d6:27:f5:c3:ba:da:f2:1b:6c:6c:bc:04:a9:6d: 5a:f5:75:f9:75:ee:8f:08:77:32:21:43:cb:ee:c0: e4:1a:ed:ae:61:9e:b5:76:12:f2:15:35:f8:b0:fa: d9:20:09:49:2e:16:20:85:d0:9b:72:2c:3e:3c:b0: 2b:48:c8:30:38:99:84:a9:b7:f9:80:f1:0a:f4:d3: ea:6a:b8:a4:01:fc:62:19:c0:50:03:94:45:ef:69: b2:c2:f1:42:d5:8c:40:03:d2:c6:25:2d:b3:f7:c2: 9f:65:18:3d:bf:f3:ab:8a:ed:e1:4d:35:da:34:9f: 45:bd:a7:d2:e2:af:7e:bd:fb:9d:ef:cd:16:95:88: 70:6f:9a:ca:73:49:cd:0a:65:c7:7b:d0:ba:09:85: b1:d3:4a:b1:d0:90:c4:f6:ff:6a:47:83:6e:a7:30: 0c:5f:86:00:20:33:95:5a:79:71:87:8d:0c:bc:29: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D4:0A:ED:25:EA:26:C0:4B:91:1C:8D:5F:AF:34:89:B6:FC:FD:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/8217683d-bd86-3435-8f8a-9fa8dd80f8b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl X509v3 Authority Key Identifier: keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer sbgp-ipAddrBlock: critical IPv4: 47.53.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:22:16:07:ba:29:c3:7d:86:5e:36:e2:24:52:4e:98:00:84: 40:4b:4f:f0:eb:9b:ef:b5:a6:7a:8a:d8:54:02:00:db:4a:f5: 8b:a3:1a:76:05:ba:e2:25:b7:ec:cf:5d:1a:44:24:4f:95:6e: 9f:71:b6:00:c9:72:7d:ef:57:2e:29:9f:79:c8:83:ac:9c:0d: 42:89:aa:1a:f5:f5:1e:90:ce:22:08:d2:89:d8:cf:c0:76:db: de:9c:de:3a:ff:e8:a3:ab:e0:39:f1:bb:ac:ba:a4:41:49:77: 37:e3:82:64:23:36:89:a9:ce:2d:c4:95:56:f8:8a:da:7a:bd: 3d:d8:60:78:d9:94:57:6a:74:55:43:32:17:1f:06:9e:44:29: 1a:49:7b:42:01:0f:4e:bb:40:74:6b:17:fd:df:1d:e4:ee:8a: 27:74:b4:a2:b6:eb:8d:d3:b2:44:07:6a:74:00:8d:28:61:a2: f0:cc:8b:11:fc:9b:9b:72:01:e8:6e:fb:b4:cd:48:30:b1:70: 60:30:fc:9e:72:3f:13:5a:56:59:0d:56:ad:ae:cc:db:60:29: 26:9e:14:8e:d0:e7:df:ee:4e:97:4f:09:3b:68:91:8f:ab:a4: 77:68:af:06:01:14:ab:05:e4:1b:c5:fa:52:d3:46:51:87:81: 05:1f:a6:7c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoYlUxVgeuO1g2XGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0 NWMxMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk ZmJiNDcyM2YtOTlhMi00YmNmLWE0N2MtZTFjYTliMGQ4MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9D4Htuwq2QFVrYy98kAwSwiHOqtMlcK1mfG +uDtSJTwYmnTg+OHtRDUwBEiUe7XiTKO5g082C2MM4ZMjM3my4E7nTZWWl1Swf4Y 1if1w7ra8htsbLwEqW1a9XX5de6PCHcyIUPL7sDkGu2uYZ61dhLyFTX4sPrZIAlJ LhYghdCbciw+PLArSMgwOJmEqbf5gPEK9NPqarikAfxiGcBQA5RF72mywvFC1YxA A9LGJS2z98KfZRg9v/Oriu3hTTXaNJ9FvafS4q9+vfud780WlYhwb5rKc0nNCmXH e9C6CYWx00qx0JDE9v9qR4NupzAMX4YAIDOVWnlxh40MvCn1twIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFE/UCu0l6ibAS5EcjV+vNIm2/P1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5 ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvODIxNzY4M2QtYmQ4Ni0z NDM1LThmOGEtOWZhOGRkODBmOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1 NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky YjdhNTQ1YzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMALzUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAoiIWB7opw32GXjbiJFJOmACEQEtP8Oub77WmeorYVAIA20r1i6MadgW6 4iW37M9dGkQkT5Vun3G2AMlyfe9XLimfeciDrJwNQomqGvX1HpDOIgjSidjPwHbb 3pzeOv/oo6vgOfG7rLqkQUl3N+OCZCM2ianOLcSVVviK2nq9PdhgeNmUV2p0VUMy Fx8GnkQpGkl7QgEPTrtAdGsX/d8d5O6KJ3S0orbrjdOyRAdqdACNKGGi8MyLEfyb m3IB6G77tM1IMLFwYDD8nnI/E1pWWQ1Wra7M22ApJp4UjtDn3+5Ol08JO2iRj6uk d2ivBgEUqwXkG8X6UtNGUYeBBR+mfA== -----END CERTIFICATE-----Generated at Tue Jul 1 05:46:22 2025 by rpki-client