$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c11d7fad-5b25-36bc-8497-45c86e9beb9e.roa File: c11d7fad-5b25-36bc-8497-45c86e9beb9e.roa (raw, json) Hash identifier: 1aMI9hbw3ZKyErFKsKZZC/gVQi5DTZ8pEuyfe9SQuJA= Subject key identifier: 0E:3D:A2:6E:F1:6C:74:E5:43:68:3B:0E:CB:D4:DE:18:3F:44:DE:2A Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Certificate serial: 010D0C9F4328584AF95148BEF4045955F2922700 Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c11d7fad-5b25-36bc-8497-45c86e9beb9e.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 30722 IP address blocks: 47.53.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:48:be:f4:04:59:55:f2:92:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=c40c6ab9-5f90-413e-81f5-d0f94aa54b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:6d:30:82:29:c8:5b:cd:09:96:f4:ee:02: cc:18:47:c8:38:4d:9a:4d:72:a4:0b:b0:0b:c3:52: b1:82:ab:a0:08:5b:49:c2:a2:44:50:84:ac:e8:6c: cb:43:58:45:2b:5f:64:d5:94:92:c9:eb:70:81:9b: 21:a9:48:03:75:2e:1d:d1:58:d4:d0:3d:b3:cd:fd: bc:71:a4:0f:2c:c1:f4:44:48:bc:0e:ca:5a:5c:cb: f6:e2:6d:b7:aa:97:b1:ee:0b:60:ab:5c:11:37:32: 2d:a6:3c:40:07:6d:6c:a8:63:6b:71:2d:cf:e2:59: 47:99:83:38:b7:40:bc:af:a3:8a:ff:9f:fc:29:a6: c2:98:e1:13:6b:52:77:d8:c2:26:14:68:72:4a:56: c7:75:c1:28:28:f8:67:80:c7:44:c5:34:c2:b4:16: a7:fe:ab:a2:1b:56:7e:aa:aa:48:46:42:f4:94:1e: 7d:1c:04:b6:90:44:9e:c5:ef:a7:d6:6f:da:9e:1e: dc:6b:35:84:b4:d7:31:c7:92:0f:3e:ef:37:28:42: 3a:d0:02:64:8f:56:5e:1e:fc:09:b7:64:4c:6f:f0: ac:20:39:36:75:fb:12:8b:e0:88:72:09:19:6d:19: d4:7f:90:26:c5:7f:8d:21:e1:7b:3a:28:8d:ce:96: 02:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3D:A2:6E:F1:6C:74:E5:43:68:3B:0E:CB:D4:DE:18:3F:44:DE:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c11d7fad-5b25-36bc-8497-45c86e9beb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl X509v3 Authority Key Identifier: keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer sbgp-ipAddrBlock: critical IPv4: 47.53.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b5:46:16:5c:75:01:20:29:a3:8e:21:9a:fc:d5:80:72:f3: d3:db:46:5f:1d:55:47:0b:54:ab:87:f6:26:4f:7c:38:f8:42: f7:7f:b7:ec:58:01:a3:2a:cd:75:74:ab:19:2d:0b:67:16:63: f1:9b:50:1a:1d:b4:1c:ee:43:df:9b:b7:4c:13:ab:86:81:7f: 34:16:10:cd:c6:c6:77:90:1a:5f:37:fa:62:3b:93:2c:97:74: b4:bd:9c:01:2b:3a:a8:47:27:19:1b:3b:7f:fe:6f:ef:fe:42: cb:d2:b3:30:8b:93:a0:9d:7c:3a:0f:a4:e4:75:62:8f:87:03: 62:30:36:d9:60:9b:c2:86:2e:35:1a:b5:ba:90:6d:80:c0:a1: 42:b3:1c:73:98:f1:05:1c:78:02:e0:bb:f1:73:f1:0c:d0:54: d1:44:f5:f8:16:77:1c:2a:b6:3d:ad:a9:c0:e4:ad:5b:12:6e: 57:c8:a5:52:97:e6:7b:51:87:72:3d:82:5b:67:fb:c4:53:30: e3:62:d0:e4:6f:3c:bc:07:a5:33:42:3a:db:f0:94:a4:cc:e0: 41:66:7b:80:1f:5c:7c:21:d0:07:b1:7b:7a:76:f1:2c:31:0c: 83:c3:b9:83:be:06:5f:dc:71:25:3d:92:f1:30:68:0e:8f:8f: 0a:23:99:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUi+9ARZVfKSJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0 NWMxMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YzQwYzZhYjktNWY5MC00MTNlLTgxZjUtZDBmOTRhYTU0YjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxORtMIIpyFvNCZb07gLMGEfIOE2aTXKkC7AL w1KxgqugCFtJwqJEUISs6GzLQ1hFK19k1ZSSyetwgZshqUgDdS4d0VjU0D2zzf28 caQPLMH0REi8DspaXMv24m23qpex7gtgq1wRNzItpjxAB21sqGNrcS3P4llHmYM4 t0C8r6OK/5/8KabCmOETa1J32MImFGhySlbHdcEoKPhngMdExTTCtBan/quiG1Z+ qqpIRkL0lB59HAS2kESexe+n1m/anh7cazWEtNcxx5IPPu83KEI60AJkj1ZeHvwJ t2RMb/CsIDk2dfsSi+CIcgkZbRnUf5AmxX+NIeF7OiiNzpYCOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA49om7xbHTlQ2g7DsvU3hg/RN4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5 ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvYzExZDdmYWQtNWIyNS0z NmJjLTg0OTctNDVjODZlOWJlYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1 NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky YjdhNTQ1YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELzXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK1RhZcdQEgKaOOIZr81YBy89PbRl8dVUcLVKuH9iZPfDj4Qvd/t+xY AaMqzXV0qxktC2cWY/GbUBodtBzuQ9+bt0wTq4aBfzQWEM3GxneQGl83+mI7kyyX dLS9nAErOqhHJxkbO3/+b+/+QsvSszCLk6CdfDoPpOR1Yo+HA2IwNtlgm8KGLjUa tbqQbYDAoUKzHHOY8QUceALgu/Fz8QzQVNFE9fgWdxwqtj2tqcDkrVsSblfIpVKX 5ntRh3I9gltn+8RTMONi0ORvPLwHpTNCOtvwlKTM4EFme4AfXHwh0Aexe3p28Swx DIPDuYO+Bl/ccSU9kvEwaA6PjwojmT0= -----END CERTIFICATE-----Generated at Tue Sep 9 19:09:35 2025 by rpki-client