$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/8217683d-bd86-3435-8f8a-9fa8dd80f8b6.roa File: 8217683d-bd86-3435-8f8a-9fa8dd80f8b6.roa (raw, json) Hash identifier: tvjReXFshX/t+mU7kqCdvArS8G0BJ8Ushfpkq0OfA0o= Subject key identifier: 89:E2:52:39:D4:95:02:1C:88:64:64:D5:78:00:B1:F7:EB:E6:A5:9A Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Certificate serial: 010D0C9F4328584AF95148D1EA13A24D61F55440 Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/8217683d-bd86-3435-8f8a-9fa8dd80f8b6.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 30722 IP address blocks: 47.53.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:48:d1:ea:13:a2:4d:61:f5:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=2a08a185-cf72-457a-b15c-d6f94e33a49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:16:ce:52:5f:0d:4f:b0:99:b9:10:17:2a: 9b:a0:19:f2:72:98:7d:16:01:cd:3c:51:83:a1:59: 38:f0:39:78:a4:a7:97:25:58:f7:71:89:f2:03:47: ea:94:f5:22:4b:6b:66:3b:12:70:a2:a7:36:e5:c8: 84:18:ce:f9:84:2a:c6:e6:f4:77:32:3f:c4:33:a0: 38:89:2b:c2:ee:3a:e2:f5:03:71:45:a7:e0:35:2d: 78:0f:01:77:64:27:0c:92:00:0f:07:8a:e4:3a:bc: 3d:65:93:b4:a2:36:af:c6:3b:a6:1f:eb:9f:ec:99: 79:4b:54:1e:40:46:51:8d:5e:93:47:a2:2b:53:ef: 21:23:92:29:5e:5d:b6:67:e3:37:38:91:fa:1f:63: 25:af:ed:dd:43:20:65:8c:14:a1:3e:65:d0:58:7b: 86:ff:ae:a6:41:80:fa:a2:74:46:82:8f:27:f1:11: f8:5d:02:da:6f:e6:ff:12:97:4f:90:fb:39:b8:6f: 21:75:9a:09:8f:d1:40:29:fd:95:e6:9d:6d:72:23: 8b:a1:70:a5:62:1d:1b:49:47:2e:01:ce:1e:55:62: ef:b1:a1:46:d3:23:d2:4b:bd:2d:f4:33:6e:d1:82: 24:88:41:e3:5b:8c:b9:e6:c7:55:41:09:3e:57:1e: 80:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E2:52:39:D4:95:02:1C:88:64:64:D5:78:00:B1:F7:EB:E6:A5:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/8217683d-bd86-3435-8f8a-9fa8dd80f8b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl X509v3 Authority Key Identifier: keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer sbgp-ipAddrBlock: critical IPv4: 47.53.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:20:72:13:bc:06:f6:af:93:68:22:33:7d:4d:7b:e2:d3:c0: aa:5c:43:d6:01:18:de:ed:e2:b3:d6:2a:95:e4:f1:84:1b:a8: 8d:9a:de:11:0e:4c:62:c3:15:e5:6e:bc:a3:08:e2:1c:7a:b6: 25:2f:c5:f5:e7:3b:c0:42:a9:bf:95:87:1b:74:0e:4f:ca:9c: 22:f2:80:1b:c8:33:15:9b:1f:10:b8:a0:d9:15:d3:34:a3:88: f6:63:eb:b7:08:2b:a6:d5:33:81:4d:76:c7:43:c8:31:96:4c: 0f:97:4c:b0:7e:7b:ec:9d:0f:20:94:34:79:56:8b:87:73:7a: 0f:3d:75:fd:5f:4e:42:86:68:f0:f3:c8:d6:11:46:1f:63:09: 43:9f:d2:e2:e2:75:14:96:2e:86:4e:68:c4:b7:e0:79:18:05: c1:ec:52:3d:9e:3d:f7:ed:a6:2a:2f:0b:c3:d8:c5:96:d7:f9: 92:6d:bc:3f:01:51:2f:f3:33:d0:a0:5b:1e:a3:8b:48:68:6b: 0c:a2:9d:42:c9:69:ff:35:ea:a7:4e:ac:e1:4a:48:49:d8:95: 7b:d3:d0:ee:33:5f:43:b7:6c:4d:9e:b9:b6:e5:37:8b:24:e0: 2e:3d:eb:2b:9f:ee:c2:6f:fd:fa:ca:41:60:6c:83:73:f5:92: eb:7b:d9:54 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEr5UUjR6hOiTWH1VEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0 NWMxMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MmEwOGExODUtY2Y3Mi00NTdhLWIxNWMtZDZmOTRlMzNhNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApucWzlJfDU+wmbkQFyqboBnycph9FgHNPFGD oVk48Dl4pKeXJVj3cYnyA0fqlPUiS2tmOxJwoqc25ciEGM75hCrG5vR3Mj/EM6A4 iSvC7jri9QNxRafgNS14DwF3ZCcMkgAPB4rkOrw9ZZO0ojavxjumH+uf7Jl5S1Qe QEZRjV6TR6IrU+8hI5IpXl22Z+M3OJH6H2Mlr+3dQyBljBShPmXQWHuG/66mQYD6 onRGgo8n8RH4XQLab+b/EpdPkPs5uG8hdZoJj9FAKf2V5p1tciOLoXClYh0bSUcu Ac4eVWLvsaFG0yPSS70t9DNu0YIkiEHjW4y55sdVQQk+Vx6AqQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIniUjnUlQIciGRk1XgAsffr5qWaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5 ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvODIxNzY4M2QtYmQ4Ni0z NDM1LThmOGEtOWZhOGRkODBmOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1 NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky YjdhNTQ1YzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMALzUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXyByE7wG9q+TaCIzfU174tPAqlxD1gEY3u3is9YqleTxhBuojZreEQ5M YsMV5W68owjiHHq2JS/F9ec7wEKpv5WHG3QOT8qcIvKAG8gzFZsfELig2RXTNKOI 9mPrtwgrptUzgU12x0PIMZZMD5dMsH577J0PIJQ0eVaLh3N6Dz11/V9OQoZo8PPI 1hFGH2MJQ5/S4uJ1FJYuhk5oxLfgeRgFwexSPZ499+2mKi8Lw9jFltf5km28PwFR L/Mz0KBbHqOLSGhrDKKdQslp/zXqp06s4UpISdiVe9PQ7jNfQ7dsTZ65tuU3iyTg Lj3rK5/uwm/9+spBYGyDc/WS63vZVA== -----END CERTIFICATE-----Generated at Tue Sep 9 19:09:35 2025 by rpki-client