$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa File: 0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa (raw, json) Hash identifier: /9gLH88o03BlE6fYvqxAcQLlG/p74HhCITK7dYk0L0w= Subject key identifier: D1:AD:86:3A:CB:70:D6:A7:A5:30:93:22:31:10:4E:5F:FC:AB:C9:C8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D124FACCBCBF15502F6B00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 1225 IP address blocks: 129.250.53.64/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:24:fa:cc:bc:bf:15:50:2f:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=909d5d39-681b-477d-b380-76bfd8398287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:01:c3:83:53:df:03:bb:f0:89:cc:d3:09:d4: 13:a5:a1:be:d8:dd:89:3d:2c:1d:7c:09:cf:0b:3e: 5b:a7:e3:75:dd:a2:97:f7:7b:fd:62:59:8e:e3:e4: 34:48:2c:ef:67:1c:28:7d:92:a6:59:67:bf:d4:1d: 05:10:f2:a5:18:70:b7:b3:92:ff:c8:6a:81:24:b2: 3c:af:90:43:f6:88:50:75:45:c1:ce:b3:54:7e:cd: c6:1a:9d:a6:b2:25:3a:b6:95:50:1d:90:7f:98:e8: cc:53:18:bb:93:f5:37:5e:ba:74:c8:69:4f:b4:47: 61:6c:3a:b5:8d:75:fd:41:06:9a:b8:be:8a:a3:c1: cf:ac:50:dc:4b:35:3e:d6:49:14:ea:89:a3:2e:e7: 1f:53:af:a6:7d:20:0e:c0:8a:a6:9b:a5:0a:d8:5c: 73:ea:93:38:47:42:e4:16:eb:2b:cc:49:77:a4:40: 7f:6a:db:23:d0:36:6a:bd:01:0f:fe:93:b9:a2:44: e5:ee:89:be:af:58:77:17:72:b0:e1:76:28:1e:df: f3:34:4e:33:73:44:fb:4e:d4:c9:ff:1e:f7:b2:fc: fd:c1:21:80:03:cf:5a:ba:b9:e8:78:25:e5:02:fc: 56:71:b3:4c:81:a6:0c:18:ef:a1:68:25:50:44:9c: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AD:86:3A:CB:70:D6:A7:A5:30:93:22:31:10:4E:5F:FC:AB:C9:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.53.64/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:84:d7:23:23:3c:ec:2b:77:e9:f0:19:31:6d:b0:12:c0:58: c4:e6:33:4d:8f:98:67:b2:1f:9c:65:86:cb:70:b5:6b:78:73: a6:47:d0:8b:05:c4:f0:ec:df:df:4b:e1:7d:6f:13:e0:17:8a: 89:50:92:57:85:ec:f3:32:32:9a:fe:e0:b6:2d:43:1d:3f:69: 65:af:af:97:28:6b:03:92:48:bf:8f:e5:af:df:25:47:a0:d0: a8:88:03:e7:e0:e0:ff:14:39:bc:84:69:f9:19:84:a1:22:58: d0:dd:07:65:71:da:25:24:b9:cf:c0:47:a4:06:58:f7:af:5a: a9:8c:44:74:67:16:4c:ad:30:59:11:66:1b:43:3c:17:79:36: 49:7c:1c:a0:6a:3b:78:96:8a:c0:f2:5e:09:86:2f:e2:f3:9f: 0c:ee:e9:00:1a:89:36:87:ba:d0:38:9e:d8:1a:80:8d:98:2d: f2:79:86:3c:4e:2a:df:c2:3c:84:56:29:18:65:c6:68:09:49: bf:f2:97:e0:e3:69:f7:3d:0c:61:92:37:f1:9c:d7:c7:f3:1f: 4b:da:34:94:91:c9:6f:8a:b3:09:2c:e4:e1:dd:dd:d9:2e:0f: 89:3f:40:90:b1:31:dc:6d:1a:18:98:d9:33:c1:bc:82:f5:78: ad:66:47:ad -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErX0ST6zLy/FVAvawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OTA5ZDVkMzktNjgxYi00NzdkLWIzODAtNzZiZmQ4Mzk4Mjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wHDg1PfA7vwiczTCdQTpaG+2N2JPSwdfAnP Cz5bp+N13aKX93v9YlmO4+Q0SCzvZxwofZKmWWe/1B0FEPKlGHC3s5L/yGqBJLI8 r5BD9ohQdUXBzrNUfs3GGp2msiU6tpVQHZB/mOjMUxi7k/U3Xrp0yGlPtEdhbDq1 jXX9QQaauL6Ko8HPrFDcSzU+1kkU6omjLucfU6+mfSAOwIqmm6UK2Fxz6pM4R0Lk FusrzEl3pEB/atsj0DZqvQEP/pO5okTl7om+r1h3F3Kw4XYoHt/zNE4zc0T7TtTJ /x73svz9wSGAA89aurnoeCXlAvxWcbNMgaYMGO+haCVQRJwBGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNGthjrLcNanpTCTIjEQTl/8q8nIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGJhOWRhZDAtMDFiZS0z NzAwLWFiMWYtMjE0ZjAzZGM3ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfo1QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBthNcjIzzsK3fp8BkxbbASwFjE5jNNj5hnsh+cZYbLcLVreHOmR9CL BcTw7N/fS+F9bxPgF4qJUJJXhezzMjKa/uC2LUMdP2llr6+XKGsDkki/j+Wv3yVH oNCoiAPn4OD/FDm8hGn5GYShIljQ3QdlcdolJLnPwEekBlj3r1qpjER0ZxZMrTBZ EWYbQzwXeTZJfBygajt4lorA8l4Jhi/i858M7ukAGok2h7rQOJ7YGoCNmC3yeYY8 TirfwjyEVikYZcZoCUm/8pfg42n3PQxhkjfxnNfH8x9L2jSUkclvirMJLOTh3d3Z Lg+JP0CQsTHcbRoYmNkzwbyC9XitZket -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:48 2025 by rpki-client