$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa File: 564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa (raw, json) Hash identifier: TzDKT4d3dUhoWLNH9SbLco+vj0YW9rFRCv8vro0sYho= Subject key identifier: 21:CE:5B:32:1E:DD:A5:E6:3B:B8:5F:02:E9:AA:09:B0:1C:3F:4B:47 Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Certificate serial: 010D0C9F4328584AF951489395FA9B09CA4F3600 Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 30722 IP address blocks: 47.53.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:48:93:95:fa:9b:09:ca:4f:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=363a76ca-d300-409e-8b14-5eecc311a0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:82:76:22:c3:ac:45:f5:8f:57:49:f8:16: 17:41:0f:2b:58:91:e8:1a:e9:3f:ad:d3:34:c1:42: d8:5d:59:29:60:13:66:79:b7:6c:4a:f3:19:25:39: 72:04:13:bd:44:ec:24:7e:54:d0:aa:75:ee:6d:02: 79:69:56:33:03:c5:81:ac:78:f8:06:2f:9b:ec:b7: 80:11:45:28:2e:0a:75:11:33:46:43:df:44:72:38: 90:ad:74:12:14:e6:b0:7f:f0:2d:3f:9f:11:cb:b7: 2e:69:20:90:2f:4a:fa:70:f4:11:63:63:3e:16:75: 8f:c5:30:09:85:a3:85:52:2c:ed:f8:14:1c:d7:24: 35:ec:95:e3:fe:7e:f6:74:96:81:bc:a7:55:57:e5: 37:b2:bf:1e:f0:e8:c2:d1:9f:91:f4:8b:2b:3a:6d: 84:80:d5:91:c1:f7:9c:a6:c9:a7:8b:76:72:5f:ee: 06:a8:df:9a:17:59:d8:e0:46:78:04:ff:fb:54:93: 31:b2:8f:93:54:0a:b5:0e:00:cb:85:3b:af:a2:9d: ba:a8:6f:12:d5:c2:00:79:66:ba:75:83:65:cc:4e: 8c:5d:6c:af:6e:59:73:76:eb:bd:ab:af:71:62:80: 15:bc:b7:f9:b7:74:88:62:1a:f3:68:cc:fa:53:42: e5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CE:5B:32:1E:DD:A5:E6:3B:B8:5F:02:E9:AA:09:B0:1C:3F:4B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl X509v3 Authority Key Identifier: keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer sbgp-ipAddrBlock: critical IPv4: 47.53.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2d:7c:a2:05:fe:52:df:6f:b1:79:ba:b1:02:08:9d:18:78: 38:4f:28:05:7e:b7:bb:47:d2:1f:aa:bd:11:91:49:2b:6b:a1: 98:d3:0b:63:0c:54:73:60:24:bf:ea:cf:ca:10:9c:18:f9:87: ec:df:09:19:f8:3d:37:ad:b8:ab:c0:90:42:a3:ff:e4:96:03: f7:af:b5:c4:4e:4d:ac:c3:9d:e2:37:c5:40:4e:4f:c5:07:95: e1:3a:eb:e7:95:61:77:0c:3a:24:22:8c:8c:5b:38:24:64:4f: 3e:70:8d:cd:df:ae:90:45:bc:91:10:74:37:0f:04:b5:ce:dc: 46:cc:75:18:94:77:cd:90:c7:69:cb:20:8d:87:7f:33:c7:ec: 38:03:7f:21:11:9d:fb:0b:9c:fc:18:18:af:89:a6:4e:2c:ee: 89:0f:e3:c7:b2:63:08:40:33:62:02:79:48:45:5b:96:c0:b2: 57:78:8c:d4:37:8a:be:3e:bc:c7:e4:51:ba:db:8d:4b:2f:f1: 5f:0c:64:f7:dd:51:f5:a2:5a:60:9d:a2:a7:d7:ed:d5:a4:f2: b7:32:04:fb:18:44:7f:ca:07:04:cc:d7:2a:1d:94:4e:48:ac: cb:2b:8c:00:7b:f0:3a:64:ef:57:96:43:34:b0:70:29:9b:42: 7f:5a:81:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUiTlfqbCcpPNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0 NWMxMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MzYzYTc2Y2EtZDMwMC00MDllLThiMTQtNWVlY2MzMTFhMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jGCdiLDrEX1j1dJ+BYXQQ8rWJHoGuk/rdM0 wULYXVkpYBNmebdsSvMZJTlyBBO9ROwkflTQqnXubQJ5aVYzA8WBrHj4Bi+b7LeA EUUoLgp1ETNGQ99EcjiQrXQSFOawf/AtP58Ry7cuaSCQL0r6cPQRY2M+FnWPxTAJ haOFUizt+BQc1yQ17JXj/n72dJaBvKdVV+U3sr8e8OjC0Z+R9IsrOm2EgNWRwfec psmni3ZyX+4GqN+aF1nY4EZ4BP/7VJMxso+TVAq1DgDLhTuvop26qG8S1cIAeWa6 dYNlzE6MXWyvbllzduu9q69xYoAVvLf5t3SIYhrzaMz6U0LlIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHOWzIe3aXmO7hfAumqCbAcP0tHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5 ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvNTY0ZjE2YzYtZmJlMS0z NGM5LTllMTItMWQxMGQ3NGQ1OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1 NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky YjdhNTQ1YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLzWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMtfKIF/lLfb7F5urECCJ0YeDhPKAV+t7tH0h+qvRGRSStroZjTC2MM VHNgJL/qz8oQnBj5h+zfCRn4PTetuKvAkEKj/+SWA/evtcROTazDneI3xUBOT8UH leE66+eVYXcMOiQijIxbOCRkTz5wjc3frpBFvJEQdDcPBLXO3EbMdRiUd82Qx2nL II2HfzPH7DgDfyERnfsLnPwYGK+Jpk4s7okP48eyYwhAM2ICeUhFW5bAsld4jNQ3 ir4+vMfkUbrbjUsv8V8MZPfdUfWiWmCdoqfX7dWk8rcyBPsYRH/KBwTM1yodlE5I rMsrjAB78Dpk71eWQzSwcCmbQn9agXY= -----END CERTIFICATE-----Generated at Tue Sep 9 19:06:54 2025 by rpki-client