$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa File: c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa (raw, json) Hash identifier: AIq0JyGptGXJEYu3AC6CtaQbHTXqqV4fcm3iDFTq+og= Subject key identifier: 7D:08:CA:AF:D5:B7:F5:73:B4:B0:B4:F9:DB:3A:17:32:7B:67:F6:45 Certificate issuer: /CN=53047e29-2570-4585-9e69-b23797196c26 Certificate serial: 010D0C9F4328584AB220D47F03E17C7C581D4C00 Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 397183 IP address blocks: 158.116.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:d4:7f:03:e1:7c:7c:58:1d:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53047e29-2570-4585-9e69-b23797196c26 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=e356201e-3d31-415d-b98f-46642dff979a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:82:71:90:6c:89:a5:60:34:74:ab:52:fc:f0: 54:ab:d3:02:a1:f4:09:68:41:e5:5b:f8:bf:33:c1: ef:1b:a4:39:0f:45:3c:65:3a:1d:ca:f7:4b:80:c3: e1:fb:43:be:2b:07:c1:fd:19:df:e6:44:fc:65:23: 92:f4:cf:36:d3:41:e5:33:dc:1a:92:68:19:a6:2f: 8a:a9:dc:98:95:02:15:2f:18:a9:43:16:1a:3d:0f: 1b:98:6f:1b:e6:8a:c1:64:22:88:4f:3b:0c:81:aa: 4a:a8:ac:d2:96:bd:f3:7f:80:e4:f5:3a:0b:75:fe: 82:6a:dd:fd:0e:74:8e:af:e0:f3:42:1e:0d:26:8f: 39:f2:f8:ed:80:b6:cb:02:c8:33:47:9e:f0:be:76: da:94:9e:c9:da:85:08:0a:2f:2e:42:46:e0:81:d1: 7b:be:0c:73:3b:28:15:6c:02:0e:05:11:d3:5d:74: a5:85:25:23:c5:59:5d:1e:79:2b:35:c1:f7:6a:a0: ef:2e:cc:91:2b:72:d9:71:e0:9b:29:08:48:24:ef: 97:ce:38:83:08:9c:2f:27:54:ba:e6:24:26:4e:16: 82:90:11:58:c7:5d:6c:c3:46:fd:6b:ce:ca:87:6f: ce:64:39:7d:a7:16:71:f9:fc:e1:af:cc:0c:b5:44: 31:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:08:CA:AF:D5:B7:F5:73:B4:B0:B4:F9:DB:3A:17:32:7B:67:F6:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl X509v3 Authority Key Identifier: keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer sbgp-ipAddrBlock: critical IPv4: 158.116.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ca:66:52:bc:07:a4:b4:55:8c:05:22:4f:0c:0d:74:e7:47: cf:88:7c:06:da:47:bf:73:8f:43:8d:61:1d:11:94:5a:c3:01: 43:be:f1:87:b5:87:aa:0e:9e:1a:ac:02:fb:6b:39:1d:ae:60: 65:db:f7:f7:5c:fb:15:b1:a7:ab:55:9c:bd:a7:51:cb:11:49: 27:54:55:24:5e:45:41:9e:9c:cc:00:4c:57:15:43:8b:99:19: 06:b9:19:ae:96:78:08:ff:17:17:bd:0e:45:b4:db:38:b5:fe: 08:a3:f9:f9:ed:45:96:f2:1a:f1:98:31:ee:69:ca:c9:9f:fd: 19:f0:3a:18:23:b9:e9:5d:24:5c:95:2a:72:d4:92:e1:67:29: d3:d0:1e:46:1e:ef:6b:ea:bc:71:30:4d:2f:7e:7d:28:7e:ed: d4:c8:f6:fd:d1:44:d2:4e:48:4b:4e:26:b1:3b:88:69:dc:1d: fa:3a:a8:39:cf:96:56:a3:a3:53:22:1a:0d:20:aa:51:5d:09: 9b:c9:2d:14:f7:22:c2:53:c0:48:5f:55:c8:3b:6f:49:80:cc: 76:87:5c:00:0f:cc:c6:d6:90:e7:a5:7e:8d:7f:5d:c5:12:b3: 66:9f:99:da:4d:12:0c:4e:60:7b:ec:81:cf:73:82:69:24:e2: 3c:cf:69:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINR/A+F8fFgdTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMwNDdlMjktMjU3MC00NTg1LTllNjktYjIzNzk3MTk2 YzI2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTM1NjIwMWUtM2QzMS00MTVkLWI5OGYtNDY2NDJkZmY5NzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4JxkGyJpWA0dKtS/PBUq9MCofQJaEHlW/i/ M8HvG6Q5D0U8ZTodyvdLgMPh+0O+KwfB/Rnf5kT8ZSOS9M8200HlM9wakmgZpi+K qdyYlQIVLxipQxYaPQ8bmG8b5orBZCKITzsMgapKqKzSlr3zf4Dk9ToLdf6Cat39 DnSOr+DzQh4NJo858vjtgLbLAsgzR57wvnbalJ7J2oUICi8uQkbggdF7vgxzOygV bAIOBRHTXXSlhSUjxVldHnkrNcH3aqDvLsyRK3LZceCbKQhIJO+XzjiDCJwvJ1S6 5iQmThaCkBFYx11sw0b9a87Kh2/OZDl9pxZx+fzhr8wMtUQxkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0Iyq/Vt/VztLC0+ds6FzJ7Z/ZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MzA0 N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3OTcxOTZjMjYvYzQxYzU0MWEtNDIxOS0z MmRkLWFjMDUtYjliYmYxZGRlYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTMwNDdlMjktMjU3MC00NTg1LTll NjktYjIzNzk3MTk2YzI2LzUzMDQ3ZTI5LTI1NzAtNDU4NS05ZTY5LWIyMzc5NzE5 NmMyNi5jcmwwHwYDVR0jBBgwFoAUwbHF/ap4TpJ+5eUnes7voPyzEdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MzA0N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3 OTcxOTZjMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnnQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzKZlK8B6S0VYwFIk8MDXTnR8+IfAbaR79zj0ONYR0RlFrDAUO+8Ye1 h6oOnhqsAvtrOR2uYGXb9/dc+xWxp6tVnL2nUcsRSSdUVSReRUGenMwATFcVQ4uZ GQa5Ga6WeAj/Fxe9DkW02zi1/gij+fntRZbyGvGYMe5pysmf/RnwOhgjueldJFyV KnLUkuFnKdPQHkYe72vqvHEwTS9+fSh+7dTI9v3RRNJOSEtOJrE7iGncHfo6qDnP llajo1MiGg0gqlFdCZvJLRT3IsJTwEhfVcg7b0mAzHaHXAAPzMbWkOelfo1/XcUS s2afmdpNEgxOYHvsgc9zgmkk4jzPabY= -----END CERTIFICATE-----Generated at Sat Aug 9 20:47:57 2025 by rpki-client