$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/08d94185-ad52-3fcc-85c6-05879b3a374e.roa File: 08d94185-ad52-3fcc-85c6-05879b3a374e.roa (raw, json) Hash identifier: GFIrk5AOSpOFWHwqZkwixKXhkD+PJkGUZP9nakqhiG8= Subject key identifier: CD:5A:31:4B:4A:00:3A:0D:A7:F6:7B:18:A3:E2:4F:4F:B4:A0:11:58 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A4F39BD8ED92916D401C0C180 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/08d94185-ad52-3fcc-85c6-05879b3a374e.roa Signing time: Wed 25 Jun 2025 14:45:58 +0000 ROA not before: Wed 25 Jun 2025 14:45:58 +0000 ROA not after: Tue 23 Sep 2025 14:45:58 +0000 asID: 3949 IP address blocks: 157.238.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:39:bd:8e:d9:29:16:d4:01:c0:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 25 14:45:58 2025 GMT Not After : Sep 23 14:45:58 2025 GMT Subject: CN=4d7eb835-a8de-4c84-8de7-ecb00f3ff1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4e:f5:96:63:d7:0c:33:4d:12:f5:9c:0b:2a: 0d:38:df:c6:20:45:b8:58:09:fd:ba:f1:e1:b8:9a: eb:d0:58:25:b6:c8:c2:a9:f3:5e:4f:5c:ef:19:6e: 09:18:3e:e7:0a:79:49:71:5c:bb:36:d3:e3:e2:dd: 65:99:11:24:3a:7d:af:ab:a2:f3:4a:b1:03:bd:ee: 2b:e8:f7:c5:2d:e1:eb:7b:4b:25:94:48:fa:ec:5e: 67:12:ec:27:ba:2f:6f:9d:2c:36:44:d8:bc:da:94: b0:00:ee:7b:0b:df:3f:59:6e:89:52:45:97:3a:5a: 4a:bb:44:0b:a8:59:63:05:45:70:d6:73:ca:50:0b: ed:8b:5d:92:f8:d3:f3:ee:d9:2e:bd:08:29:35:9a: d0:06:f2:d4:4b:11:42:d5:c6:af:1d:61:6b:2d:8a: cf:14:8f:35:b3:f4:3e:10:46:81:7e:64:9a:8c:3f: 20:82:2a:c3:54:28:ec:39:bd:7f:a4:03:57:1c:d7: 25:96:85:1d:12:b1:6f:96:9d:26:b1:bf:3f:a3:64: 92:c2:33:95:53:a3:30:f3:3c:71:32:18:97:8b:1c: bc:5b:c2:6d:02:5c:04:44:aa:c9:80:cd:56:0c:f8: 1b:79:15:ba:c1:4c:03:54:29:2f:92:81:1d:3f:34: 4f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5A:31:4B:4A:00:3A:0D:A7:F6:7B:18:A3:E2:4F:4F:B4:A0:11:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/08d94185-ad52-3fcc-85c6-05879b3a374e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 157.238.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a4:ce:7a:7f:39:a5:8e:e4:a7:a6:9d:79:ab:e3:79:33:a9: 48:f7:c0:ee:a2:3d:85:68:1f:6c:61:0e:cd:39:bb:22:3a:27: 2b:6e:1c:47:7e:bb:c5:71:ee:a2:4b:e4:1d:35:f2:05:34:4d: a4:c9:d4:a5:85:d5:34:19:cf:36:d0:b6:22:94:eb:26:fc:ae: 44:9d:76:80:7f:aa:33:0d:c9:3e:53:98:16:c1:d6:57:fe:28: 8b:09:7f:a2:f4:a1:1f:da:77:81:a9:8d:72:d1:b0:75:56:c4: d1:6b:42:b3:e8:44:87:a0:5a:f6:ac:20:c2:79:c6:35:12:4d: f7:d5:3a:c3:db:5e:25:aa:ee:60:2f:54:c8:c1:82:9f:b1:27: 54:5a:fe:f9:49:6b:b5:b1:1e:34:81:b0:dd:89:90:8e:b1:ab: b7:d7:2c:bb:c2:fa:63:38:d5:5c:54:4d:8c:84:99:a1:ad:1a: 41:85:31:d6:09:de:60:12:fd:97:a7:db:71:dc:ba:84:7f:ca: dd:1c:a0:b8:74:11:26:dc:a2:b0:5e:e2:e9:9f:68:93:e6:9b: a6:43:6e:e5:80:c3:0b:fe:a0:5b:b5:ad:a2:4c:4e:1a:58:e1: 1d:a6:01:58:86:e6:06:73:61:e0:2e:4f:9e:05:84:1b:5a:e5: ae:5b:8b:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPOb2O2SkW1AHAwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYyNTE0NDU1OFoXDTI1MDkyMzE0NDU1OFowLzEtMCsGA1UEAxMk NGQ3ZWI4MzUtYThkZS00Yzg0LThkZTctZWNiMDBmM2ZmMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk71lmPXDDNNEvWcCyoNON/GIEW4WAn9uvHh uJrr0FgltsjCqfNeT1zvGW4JGD7nCnlJcVy7NtPj4t1lmREkOn2vq6LzSrEDve4r 6PfFLeHre0sllEj67F5nEuwnui9vnSw2RNi82pSwAO57C98/WW6JUkWXOlpKu0QL qFljBUVw1nPKUAvti12S+NPz7tkuvQgpNZrQBvLUSxFC1cavHWFrLYrPFI81s/Q+ EEaBfmSajD8ggirDVCjsOb1/pANXHNclloUdErFvlp0msb8/o2SSwjOVU6Mw8zxx MhiXixy8W8JtAlwERKrJgM1WDPgbeRW6wUwDVCkvkoEdPzRPowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1aMUtKADoNp/Z7GKPiT0+0oBFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDhkOTQxODUtYWQ1Mi0z ZmNjLTg1YzYtMDU4NzliM2EzNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCne60MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACekznp/OaWO5KemnXmr43kzqUj3wO6iPYVoH2xhDs05uyI6JytuHEd+ u8Vx7qJL5B018gU0TaTJ1KWF1TQZzzbQtiKU6yb8rkSddoB/qjMNyT5TmBbB1lf+ KIsJf6L0oR/ad4GpjXLRsHVWxNFrQrPoRIegWvasIMJ5xjUSTffVOsPbXiWq7mAv VMjBgp+xJ1Ra/vlJa7WxHjSBsN2JkI6xq7fXLLvC+mM41VxUTYyEmaGtGkGFMdYJ 3mAS/Zen23HcuoR/yt0coLh0ESbcorBe4umfaJPmm6ZDbuWAwwv+oFu1raJMThpY 4R2mAViG5gZzYeAuT54FhBta5a5bi0A= -----END CERTIFICATE-----Generated at Sun Jun 29 17:47:33 2025 by rpki-client