$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9de4b45f-637e-3366-a619-7bf6276dd3d8.roa File: 9de4b45f-637e-3366-a619-7bf6276dd3d8.roa (raw, json) Hash identifier: omKJ/UN3pgM3ZXUocCPyiHpUXgYybDCV2QmAzAdb5JQ= Subject key identifier: 2F:71:EA:24:4F:96:CF:D7:33:82:3F:8F:9F:1A:C9:A4:74:AA:C1:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6D2CB05CCD575339270AE8C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9de4b45f-637e-3366-a619-7bf6276dd3d8.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 396610 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b0:5c:cd:57:53:39:27:0a:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=513dfa90-1810-4b32-9a5a-228c84caa19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b5:16:d8:88:fa:3e:d8:51:72:26:aa:8d:8b: 27:b5:52:72:91:df:9d:f0:5e:c6:57:88:5b:83:7f: 4f:4e:40:7e:7a:c2:b8:74:c4:18:eb:5b:ae:63:af: e5:2e:c5:3d:60:77:8d:84:9d:45:d4:9f:b0:09:9f: 79:63:fa:ad:28:cc:38:00:50:f9:a7:68:c9:61:88: 54:2d:df:2d:9c:ec:35:09:93:61:05:2f:6f:a9:4e: 3e:67:52:43:3e:50:79:11:0f:68:e2:0e:0f:34:00: 74:a4:fd:ee:b5:94:ce:6e:22:98:1c:82:ee:01:42: 31:ea:57:ec:c5:ec:b3:3e:5d:d0:40:9c:ac:a2:4f: 1b:3a:51:0f:cb:d6:10:d0:67:f0:ad:be:ec:1f:3b: b8:f4:7c:41:d4:4c:4d:fc:f1:f1:d8:2b:c9:13:31: 5d:89:6b:93:41:e4:2e:90:8c:16:97:72:b3:e6:c1: 48:39:ad:18:58:87:2e:20:ec:6c:ff:71:94:ce:ef: 3b:40:68:49:14:15:7f:14:46:eb:ff:7b:0b:07:06: 25:d8:00:fe:10:43:eb:9b:77:20:50:d8:4d:5d:fe: 8e:3e:9f:14:65:b0:c5:a0:f2:f7:22:00:f5:52:2d: 10:83:a5:61:0e:a2:40:af:1d:e5:2f:43:ec:14:0b: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:71:EA:24:4F:96:CF:D7:33:82:3F:8F:9F:1A:C9:A4:74:AA:C1:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9de4b45f-637e-3366-a619-7bf6276dd3d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d4:d8:cd:37:33:1c:f1:75:2a:08:c5:fb:f3:63:5d:52:fc: ff:3a:bd:bf:36:30:8c:e5:47:8d:ba:96:98:ea:cf:db:25:e1: b8:8c:4d:a7:c4:f8:ec:08:0a:f9:de:26:60:fb:3b:98:cd:f5: 4a:83:f9:67:f4:39:a1:ec:e0:1b:bb:07:62:03:bc:be:24:26: 6f:fc:b5:28:77:b2:54:89:3f:ef:c8:0e:20:e2:17:d3:aa:67: 04:9a:af:04:15:9a:4e:13:62:b0:f0:f7:78:de:af:0f:e8:78: 03:cf:b0:db:54:14:0d:d1:00:2e:52:02:34:db:2b:07:82:81: 3b:84:6b:2e:10:7b:2d:b1:5b:f6:db:ed:f6:ec:3d:40:6f:d5: 7d:73:91:0a:65:1f:92:7b:b8:10:8a:ee:56:07:1e:b0:6c:d0: bf:33:f7:b5:bf:46:ae:ff:b1:8a:b1:34:7c:65:57:29:2e:df: d6:ee:ea:9e:8c:49:ae:fc:0d:1e:30:b1:5b:b1:70:89:15:7f: 1c:f9:d3:62:43:a7:aa:c9:2b:22:ee:1e:2d:2d:2c:a5:e5:79: 21:96:e0:57:35:63:44:5b:a1:72:12:f0:d0:c1:b9:f1:1f:65: 75:bf:ab:93:b8:c9:25:3c:e8:42:38:87:b8:6b:13:2a:36:15: 1d:c0:ee:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEttLLBczVdTOScK6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NTEzZGZhOTAtMTgxMC00YjMyLTlhNWEtMjI4Yzg0Y2FhMTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbUW2Ij6PthRciaqjYsntVJykd+d8F7GV4hb g39PTkB+esK4dMQY61uuY6/lLsU9YHeNhJ1F1J+wCZ95Y/qtKMw4AFD5p2jJYYhU Ld8tnOw1CZNhBS9vqU4+Z1JDPlB5EQ9o4g4PNAB0pP3utZTObiKYHILuAUIx6lfs xeyzPl3QQJysok8bOlEPy9YQ0Gfwrb7sHzu49HxB1ExN/PHx2CvJEzFdiWuTQeQu kIwWl3Kz5sFIOa0YWIcuIOxs/3GUzu87QGhJFBV/FEbr/3sLBwYl2AD+EEPrm3cg UNhNXf6OPp8UZbDFoPL3IgD1Ui0Qg6VhDqJArx3lL0PsFAtW2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC9x6iRPls/XM4I/j58ayaR0qsFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWRlNGI0NWYtNjM3ZS0z MzY2LWE2MTktN2JmNjI3NmRkM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBz1NjNNzMc8XUqCMX782NdUvz/Or2/NjCM5UeNupaY6s/bJeG4jE2n xPjsCAr53iZg+zuYzfVKg/ln9Dmh7OAbuwdiA7y+JCZv/LUod7JUiT/vyA4g4hfT qmcEmq8EFZpOE2Kw8Pd43q8P6HgDz7DbVBQN0QAuUgI02ysHgoE7hGsuEHstsVv2 2+327D1Ab9V9c5EKZR+Se7gQiu5WBx6wbNC/M/e1v0au/7GKsTR8ZVcpLt/W7uqe jEmu/A0eMLFbsXCJFX8c+dNiQ6eqySsi7h4tLSyl5XkhluBXNWNEW6FyEvDQwbnx H2V1v6uTuMklPOhCOIe4axMqNhUdwO6s -----END CERTIFICATE-----Generated at Wed Oct 29 11:52:19 2025 by rpki-client