$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0d10bd09-f057-39b7-bbdc-5e26676ff449.roa File: 0d10bd09-f057-39b7-bbdc-5e26676ff449.roa (raw, json) Hash identifier: y8K5Clffn5EhB1NVUQZa47L3jPcEUrlRW4nzjbEMTB8= Subject key identifier: D5:9E:E6:B9:29:20:34:C4:59:C4:58:B4:66:A2:35:DB:AA:9B:63:6B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D11862E83CAD5C29CE2340 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0d10bd09-f057-39b7-bbdc-5e26676ff449.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 3949 IP address blocks: 204.2.42.16/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:18:62:e8:3c:ad:5c:29:ce:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=646e897e-4fd9-41e5-87d2-313ca29f7f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:96:07:ad:a0:7d:a3:a2:58:d8:2a:4a:4d:6e: cb:8e:ad:9b:75:5c:9f:f2:f6:8c:c0:4e:73:8b:6f: bf:e8:81:73:68:a7:6d:de:5d:32:bb:fb:da:7d:24: b8:b1:47:85:89:49:8b:52:a1:4e:17:b8:c5:aa:8f: 3d:ff:b0:c5:7f:c6:9a:13:27:d0:8d:d9:25:3e:25: a7:47:93:f6:d2:59:93:5b:4a:c1:17:c5:e9:79:75: 2f:92:ab:2c:34:33:70:47:ff:d6:c9:e0:b4:b0:28: 23:3e:e6:85:09:48:e8:6d:57:df:c5:17:b1:ea:f0: e1:5d:e3:5c:2f:11:c6:a4:60:93:38:4b:79:7c:45: e2:53:67:17:47:42:94:4d:a8:7a:00:a1:5e:44:6e: 5d:15:23:35:b9:00:7d:31:b2:6d:93:1f:0d:75:74: 5f:35:65:30:bd:00:ed:94:15:20:51:98:97:27:89: 05:71:c2:e0:38:e8:51:f2:68:45:78:1a:3c:f2:2c: ef:ad:4f:e1:5e:8b:75:38:32:dd:31:b8:ad:89:43: 8d:e3:f8:23:be:a8:78:b1:df:df:f4:08:86:0b:8b: ba:7f:a9:9e:c4:f1:96:a6:6b:d2:f4:1b:7b:da:a8: e7:99:1a:6c:af:ba:75:73:07:fe:25:6a:11:7c:4c: 71:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9E:E6:B9:29:20:34:C4:59:C4:58:B4:66:A2:35:DB:AA:9B:63:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0d10bd09-f057-39b7-bbdc-5e26676ff449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.42.16/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:fa:97:95:7f:f3:a6:de:98:0c:a3:3a:42:23:95:b7:b6:b9: fc:c9:e4:a1:27:86:74:40:82:3e:b5:23:b7:7e:89:67:24:7d: 09:c8:97:7f:61:be:68:e3:f1:61:d6:ec:a1:8d:7a:62:89:e6: da:8c:a6:8e:e2:c0:6d:6e:25:70:7c:5e:3e:fa:18:8a:5e:91: 6e:93:16:8a:6b:9f:33:f2:0d:32:cb:b8:da:75:c4:b0:df:9b: 8c:14:6a:d9:23:f0:55:3b:23:65:c3:d4:c6:c2:35:ea:5b:c9: ef:c6:a8:ea:8e:42:b3:b5:27:b4:eb:d3:d2:d7:d2:c1:09:aa: 55:bd:63:d6:ea:8f:56:a5:20:d1:6f:2a:76:59:12:5a:dd:0f: a6:2a:52:04:b7:08:40:01:33:e0:4f:ae:c3:df:7d:78:6f:73: d0:e3:ce:5a:ce:5b:5d:04:8c:47:77:15:3e:fd:57:51:1e:52: c5:86:25:15:f4:ae:f3:25:70:d8:45:3c:a1:66:61:8e:03:cf: 2a:6a:b3:5c:df:1c:48:6d:77:54:7c:b3:50:48:37:17:0e:0d: 47:95:36:60:b8:d1:13:f1:90:19:fb:38:c4:4c:f7:01:a5:e4: 73:ce:a0:18:73:13:ff:29:61:de:03:bb:f7:c1:dc:9e:e3:f4: f2:3e:dd:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErX0Rhi6DytXCnOI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NjQ2ZTg5N2UtNGZkOS00MWU1LTg3ZDItMzEzY2EyOWY3ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJYHraB9o6JY2CpKTW7Ljq2bdVyf8vaMwE5z i2+/6IFzaKdt3l0yu/vafSS4sUeFiUmLUqFOF7jFqo89/7DFf8aaEyfQjdklPiWn R5P20lmTW0rBF8XpeXUvkqssNDNwR//WyeC0sCgjPuaFCUjobVffxRex6vDhXeNc LxHGpGCTOEt5fEXiU2cXR0KUTah6AKFeRG5dFSM1uQB9MbJtkx8NdXRfNWUwvQDt lBUgUZiXJ4kFccLgOOhR8mhFeBo88izvrU/hXot1ODLdMbitiUON4/gjvqh4sd/f 9AiGC4u6f6mexPGWpmvS9Bt72qjnmRpsr7p1cwf+JWoRfExx3wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNWe5rkpIDTEWcRYtGaiNduqm2NrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGQxMGJkMDktZjA1Ny0z OWI3LWJiZGMtNWUyNjY3NmZmNDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAIqEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4+peVf/Om3pgMozpCI5W3trn8yeShJ4Z0QII+tSO3folnJH0JyJd/ Yb5o4/Fh1uyhjXpiiebajKaO4sBtbiVwfF4++hiKXpFukxaKa58z8g0yy7jadcSw 35uMFGrZI/BVOyNlw9TGwjXqW8nvxqjqjkKztSe069PS19LBCapVvWPW6o9WpSDR byp2WRJa3Q+mKlIEtwhAATPgT67D3314b3PQ485azltdBIxHdxU+/VdRHlLFhiUV 9K7zJXDYRTyhZmGOA88qarNc3xxIbXdUfLNQSDcXDg1HlTZguNET8ZAZ+zjETPcB peRzzqAYcxP/KWHeA7v3wdye4/TyPt3r -----END CERTIFICATE-----Generated at Sat Aug 23 13:46:36 2025 by rpki-client