$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/04dd92be-4771-31c5-9332-7c1b76450796.roa File: 04dd92be-4771-31c5-9332-7c1b76450796.roa (raw, json) Hash identifier: SKXgEkFKURp3d67yKXcicsJlBgY5Wobs/zjkhh92kBo= Subject key identifier: 9F:AC:6E:ED:EF:11:83:88:5A:1B:6C:B7:D1:AF:13:BF:0A:63:09:63 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD9365CDBEBD3A12F58546680 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/04dd92be-4771-31c5-9332-7c1b76450796.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 204.2.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5c:db:eb:d3:a1:2f:58:54:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=c8b8b985-0354-408e-9ef8-8e1b40d96108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:52:2c:1c:9d:ba:a4:1c:3a:d7:b5:81:92: e2:62:94:73:dc:10:ef:4e:c3:ad:8b:4f:26:bc:8f: 58:33:2e:53:68:6a:35:10:cd:21:aa:6d:1a:5f:3e: 4e:b9:65:c1:71:5f:a8:e2:11:95:2f:09:17:bc:19: de:ea:b4:a9:77:06:3c:e4:7e:4b:d5:b1:49:61:e8: 0a:0a:43:aa:94:77:97:53:87:86:31:6b:12:f0:db: 8c:b9:e5:21:ce:ce:90:6a:18:78:0f:17:f5:f8:0a: 52:11:e1:7b:ab:06:f3:3f:56:61:d7:42:49:99:23: 35:da:46:8c:92:43:9e:75:06:b6:c7:ad:a7:f4:f1: 29:2e:99:44:d5:ea:df:73:5b:8f:3f:82:32:f7:2d: bd:0a:53:d2:83:cc:e6:3a:eb:e9:12:9d:86:66:5c: ad:e1:5a:13:29:ad:cf:0a:01:69:ce:f4:0f:75:58: e2:f2:aa:90:4c:0a:e7:8d:97:94:60:ab:e6:90:ce: 21:8f:b5:f7:f1:5c:f3:8e:eb:99:a5:9a:7f:ef:04: 81:dd:d1:8f:1d:02:a4:2d:0a:a4:4d:20:71:96:c5: 99:e4:33:fc:ae:65:97:0d:32:93:99:61:ae:59:e7: e9:c5:19:ac:10:53:9e:00:97:dd:63:72:c3:f0:08: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AC:6E:ED:EF:11:83:88:5A:1B:6C:B7:D1:AF:13:BF:0A:63:09:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/04dd92be-4771-31c5-9332-7c1b76450796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:b2:f5:74:0e:4d:0c:db:37:b0:c9:2d:b0:71:67:1c:68:77: 3d:ab:1a:e6:c4:70:4c:5f:c7:23:b2:c0:10:9d:14:08:b4:0b: a5:9d:e2:e3:48:68:01:cb:e7:2e:09:69:be:1e:f6:6a:c0:7f: a7:9f:54:9c:3c:e9:d6:a1:1f:98:24:16:0f:69:6a:b3:30:45: 48:79:ad:af:2d:40:5e:3b:04:57:e4:54:30:92:d0:ae:f3:9e: 2a:e7:49:42:1c:4a:8c:42:4d:9c:96:b0:98:61:6b:38:fd:37: 30:62:c3:1b:2c:90:d9:69:af:8b:ac:5e:1c:c2:83:6d:29:92: 4d:cd:cf:7f:69:15:d9:0a:53:ba:c5:a4:8a:df:67:6d:9f:0d: 6c:f1:bb:31:ee:5d:b1:19:95:31:a0:94:80:35:40:79:9f:20: 79:72:b2:64:1c:a4:3c:f3:ee:8f:22:f9:65:ac:88:2b:9b:8a: 6e:ec:72:35:83:7a:aa:ac:62:00:be:5c:5c:88:f8:68:0c:a2: 3d:ca:91:94:c2:6c:29:b5:80:36:41:3e:66:d0:21:74:46:ab: 60:f8:19:8a:99:6d:6d:eb:d3:b4:45:11:73:f4:f5:db:f0:ae: 88:98:a9:d1:8e:02:7e:45:fe:d2:de:67:3c:a0:9a:a3:a9:9a: d5:95:5b:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNlzb69OhL1hUZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YzhiOGI5ODUtMDM1NC00MDhlLTllZjgtOGUxYjQwZDk2MTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL9SLByduqQcOte1gZLiYpRz3BDvTsOti08m vI9YMy5TaGo1EM0hqm0aXz5OuWXBcV+o4hGVLwkXvBne6rSpdwY85H5L1bFJYegK CkOqlHeXU4eGMWsS8NuMueUhzs6Qahh4Dxf1+ApSEeF7qwbzP1Zh10JJmSM12kaM kkOedQa2x62n9PEpLplE1erfc1uPP4Iy9y29ClPSg8zmOuvpEp2GZlyt4VoTKa3P CgFpzvQPdVji8qqQTArnjZeUYKvmkM4hj7X38VzzjuuZpZp/7wSB3dGPHQKkLQqk TSBxlsWZ5DP8rmWXDTKTmWGuWefpxRmsEFOeAJfdY3LD8AjcOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+sbu3vEYOIWhtst9GvE78KYwljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDRkZDkyYmUtNDc3MS0z MWM1LTkzMzItN2MxYjc2NDUwNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAKRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqy9XQOTQzbN7DJLbBxZxxodz2rGubEcExfxyOywBCdFAi0C6Wd4uNI aAHL5y4Jab4e9mrAf6efVJw86dahH5gkFg9parMwRUh5ra8tQF47BFfkVDCS0K7z nirnSUIcSoxCTZyWsJhhazj9NzBiwxsskNlpr4usXhzCg20pkk3Nz39pFdkKU7rF pIrfZ22fDWzxuzHuXbEZlTGglIA1QHmfIHlysmQcpDzz7o8i+WWsiCubim7scjWD eqqsYgC+XFyI+GgMoj3KkZTCbCm1gDZBPmbQIXRGq2D4GYqZbW3r07RFEXP09dvw roiYqdGOAn5F/tLeZzygmqOpmtWVW7s= -----END CERTIFICATE-----Generated at Sat Aug 23 16:25:30 2025 by rpki-client