$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/809504bb-6ba9-3fa0-b358-29aa73ae5563.roa File: 809504bb-6ba9-3fa0-b358-29aa73ae5563.roa (raw, json) Hash identifier: xT02rsAeqBYsZD6p8gZCuLzq1cVGvNlDgVB6XBwWgvQ= Subject key identifier: 1F:AF:60:FA:1D:87:09:0F:FD:F2:FE:E0:E0:77:B8:8A:10:B3:0B:D5 Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Certificate serial: 010D0C9F4328584AF95148694BC6D6CDB42D3800 Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/809504bb-6ba9-3fa0-b358-29aa73ae5563.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 30722 IP address blocks: 47.53.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:48:69:4b:c6:d6:cd:b4:2d:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=a4cd9d81-7194-4562-97bf-9eb29f5434fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:8a:4f:e6:21:7f:62:8b:0d:63:71:9f:3d: 29:23:7e:9d:0a:4c:0e:05:bc:95:b0:88:8a:48:e2: 4f:46:b5:fd:a6:db:41:e9:ec:15:84:7a:72:c2:a5: da:2c:5c:3a:68:33:66:b1:3a:37:03:cf:e3:fc:cd: 79:72:be:56:6b:36:6f:cf:32:02:8b:b5:f6:66:6d: f6:ae:18:31:55:38:73:57:38:c4:0f:25:9d:a5:83: 9a:a5:ae:9a:45:78:71:70:ee:cb:ef:5d:b2:63:28: 91:dd:a6:29:9d:d8:75:67:4f:35:f9:cb:92:6b:c1: bd:8b:0f:65:d2:3a:ae:07:3f:6d:bf:f0:57:8a:7b: ee:a4:dd:14:c4:85:1a:f3:3e:37:b3:fd:94:c6:53: 57:20:79:10:41:b9:c0:53:51:4c:77:81:d9:79:0a: 76:87:56:7c:94:bf:af:78:aa:18:43:e0:4f:f8:98: bd:de:05:4a:06:b7:58:f2:5d:e3:2e:ff:5f:68:46: 27:82:42:38:ac:47:ed:c9:89:46:a4:7e:bf:ad:0a: 2c:e0:9b:37:0d:ae:b0:da:5f:03:58:aa:42:23:47: 47:40:ed:fa:c9:f1:29:c4:40:4b:d4:7a:a7:b4:04: 80:94:99:23:f1:75:ef:5b:e1:75:71:35:6a:b0:ad: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AF:60:FA:1D:87:09:0F:FD:F2:FE:E0:E0:77:B8:8A:10:B3:0B:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/809504bb-6ba9-3fa0-b358-29aa73ae5563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl X509v3 Authority Key Identifier: keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer sbgp-ipAddrBlock: critical IPv4: 47.53.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:03:f6:0d:87:0b:25:e2:51:45:43:b4:81:3a:8b:8e:01:67: 2b:b3:2d:e4:32:f1:f1:07:3a:15:f1:c2:db:bf:06:23:eb:7b: 4d:86:cc:b4:7d:99:66:18:0b:0c:19:9b:e3:24:5d:96:a7:1f: 9d:3d:ee:13:3e:75:99:e5:1c:5c:ce:87:b5:ca:7d:3d:46:95: 2e:b9:4c:80:b7:84:83:ae:2d:db:64:a5:64:82:24:5b:ca:cd: fb:cb:e6:ee:04:71:85:98:a4:91:80:ce:fb:9c:d3:40:4b:94: 9c:67:3e:9a:bb:e1:b4:17:62:6e:5f:39:50:ec:56:df:eb:11: a3:35:cc:53:4d:0b:32:36:b9:cd:34:df:62:d2:98:f2:35:47: 03:9a:8c:38:ad:40:9d:1f:6d:4a:e7:db:f0:99:c6:e3:45:d0: 5a:d2:af:62:c1:f1:b4:46:db:e8:f8:a0:d6:cb:42:7a:a2:97: 17:3d:9d:42:b7:ab:0e:cb:98:be:47:40:90:06:3a:67:a5:b7: b4:68:4b:d2:ad:8f:6a:b0:86:8c:e2:71:11:53:94:ef:fd:20: 0b:08:7a:7b:b6:54:5f:c1:ba:97:f2:35:7b:db:48:bf:4b:65: 9e:db:2a:70:16:c9:50:ab:fe:d5:5a:7a:9b:15:7c:15:43:07: 13:8a:26:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUhpS8bWzbQtOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0 NWMxMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YTRjZDlkODEtNzE5NC00NTYyLTk3YmYtOWViMjlmNTQzNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOaKT+Yhf2KLDWNxnz0pI36dCkwOBbyVsIiK SOJPRrX9pttB6ewVhHpywqXaLFw6aDNmsTo3A8/j/M15cr5WazZvzzICi7X2Zm32 rhgxVThzVzjEDyWdpYOapa6aRXhxcO7L712yYyiR3aYpndh1Z081+cuSa8G9iw9l 0jquBz9tv/BXinvupN0UxIUa8z43s/2UxlNXIHkQQbnAU1FMd4HZeQp2h1Z8lL+v eKoYQ+BP+Ji93gVKBrdY8l3jLv9faEYngkI4rEftyYlGpH6/rQos4Js3Da6w2l8D WKpCI0dHQO36yfEpxEBL1HqntASAlJkj8XXvW+F1cTVqsK2LNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+vYPodhwkP/fL+4OB3uIoQswvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5 ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvODA5NTA0YmItNmJhOS0z ZmEwLWIzNTgtMjlhYTczYWU1NTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1 NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky YjdhNTQ1YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLzUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACED9g2HCyXiUUVDtIE6i44BZyuzLeQy8fEHOhXxwtu/BiPre02GzLR9 mWYYCwwZm+MkXZanH5097hM+dZnlHFzOh7XKfT1GlS65TIC3hIOuLdtkpWSCJFvK zfvL5u4EcYWYpJGAzvuc00BLlJxnPpq74bQXYm5fOVDsVt/rEaM1zFNNCzI2uc00 32LSmPI1RwOajDitQJ0fbUrn2/CZxuNF0FrSr2LB8bRG2+j4oNbLQnqilxc9nUK3 qw7LmL5HQJAGOmelt7RoS9Ktj2qwhozicRFTlO/9IAsIenu2VF/BupfyNXvbSL9L ZZ7bKnAWyVCr/tVaepsVfBVDBxOKJlQ= -----END CERTIFICATE-----Generated at Tue Sep 9 19:10:58 2025 by rpki-client