$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa File: 27ad11b4-e211-3ca4-a206-bd00c733729c.roa (raw, json) Hash identifier: zd3XH3OCK+s3lA+94Qhw39LDsd4F446RMx2BrK1Pp20= Subject key identifier: C1:42:AD:DE:19:8D:F4:E7:74:91:49:64:E5:BD:96:4C:17:70:8B:77 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD3A126DD2D544D92B864F650 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 213802 IP address blocks: 128.241.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:26:dd:2d:54:4d:92:b8:64:f6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=3f39d431-26c0-4716-89a7-5bb2ce80bae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dd:d4:eb:13:ac:9b:89:a0:cf:c7:a4:2a:b3: f7:64:fe:3c:b2:b9:6e:eb:e0:53:c3:a5:50:f6:6d: 31:f0:f3:5d:ac:b4:21:ba:01:ab:63:8f:79:3e:aa: 8e:ff:28:7f:70:cf:2c:40:79:31:4a:e8:c1:11:1d: 12:2e:e8:88:84:aa:4f:65:72:b1:04:eb:90:19:2d: 94:8e:c0:4d:0f:36:1a:2c:a4:f1:f3:4f:ef:72:1a: b9:bd:92:1f:51:c2:f6:4d:a1:2d:ff:61:c3:58:0a: 14:f9:43:a7:dd:5f:c7:d7:80:f0:ff:de:be:7c:06: 96:8c:51:93:99:e0:57:15:85:92:c1:93:a9:9e:63: 39:e9:90:e5:77:05:15:2f:0d:d4:b0:48:9f:ab:9a: 84:36:57:42:92:3c:2e:1a:dd:77:cf:88:30:84:e6: 11:3b:8b:88:50:22:37:10:83:1e:b3:83:53:b8:de: fb:11:1e:8c:4c:29:f7:eb:9d:46:48:53:a9:31:a2: c8:6e:36:b8:d3:d1:e8:bd:aa:01:3d:8e:d7:d8:e4: 52:ea:d7:b5:fc:6f:cf:17:d6:26:64:87:be:63:62: a7:5c:37:35:aa:10:59:83:c3:79:7e:b6:b9:14:40: 51:75:c6:14:23:99:8e:e4:a8:fd:c9:bd:34:0e:31: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:42:AD:DE:19:8D:F4:E7:74:91:49:64:E5:BD:96:4C:17:70:8B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ab:6b:61:10:11:23:4b:54:bb:61:ae:e8:bd:db:a2:23:f5: 6f:06:57:f6:d0:3f:c6:b0:ce:21:e9:5d:68:f5:22:09:3d:aa: 8d:ee:62:f9:f5:f8:d9:ce:59:9a:94:9d:86:16:26:59:80:e5: d2:2f:bb:6f:0a:d0:b6:d5:63:43:8d:50:8f:a9:21:35:62:54: 92:57:55:33:27:6b:cd:38:cc:74:59:d7:5f:02:d8:21:5a:e5: 97:0b:f4:3a:dd:aa:38:0b:c2:28:cb:4c:d0:c0:bd:20:18:46: 64:cc:57:11:e1:bb:c0:74:5d:c5:5e:6e:60:87:ef:8e:72:ac: fe:ee:cc:73:50:14:3c:6d:8b:6f:58:af:37:2b:cc:a4:4e:28: f7:1c:e8:7b:83:d3:2e:cf:a5:dc:9f:6f:1e:fa:87:77:6b:96: 6e:eb:5d:b8:91:69:b5:e0:f5:cb:f7:ba:6e:88:8b:97:18:72: e2:39:75:f4:31:00:fb:75:b3:34:b8:83:1b:d1:84:d9:1b:3f: 0d:ff:97:77:f4:f2:3b:3b:7f:24:6f:31:ba:fb:6d:95:be:b1: 1c:8d:fe:10:01:59:aa:62:3a:45:e0:92:87:b8:ba:b4:65:5a: ef:8f:11:47:60:4c:25:52:58:f6:34:bd:09:f9:04:1b:ae:f4: 85:49:f0:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSbdLVRNkrhk9lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk M2YzOWQ0MzEtMjZjMC00NzE2LTg5YTctNWJiMmNlODBiYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt3U6xOsm4mgz8ekKrP3ZP48srlu6+BTw6VQ 9m0x8PNdrLQhugGrY495PqqO/yh/cM8sQHkxSujBER0SLuiIhKpPZXKxBOuQGS2U jsBNDzYaLKTx80/vchq5vZIfUcL2TaEt/2HDWAoU+UOn3V/H14Dw/96+fAaWjFGT meBXFYWSwZOpnmM56ZDldwUVLw3UsEifq5qENldCkjwuGt13z4gwhOYRO4uIUCI3 EIMes4NTuN77ER6MTCn3651GSFOpMaLIbja409HovaoBPY7X2ORS6te1/G/PF9Ym ZIe+Y2KnXDc1qhBZg8N5fra5FEBRdcYUI5mO5Kj9yb00DjEZSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFCrd4ZjfTndJFJZOW9lkwXcIt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjdhZDExYjQtZTIxMS0z Y2E0LWEyMDYtYmQwMGM3MzM3MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgPHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmra2EQESNLVLthrui926Ij9W8GV/bQP8awziHpXWj1Igk9qo3uYvn1 +NnOWZqUnYYWJlmA5dIvu28K0LbVY0ONUI+pITViVJJXVTMna804zHRZ118C2CFa 5ZcL9DrdqjgLwijLTNDAvSAYRmTMVxHhu8B0XcVebmCH745yrP7uzHNQFDxti29Y rzcrzKROKPcc6HuD0y7Ppdyfbx76h3drlm7rXbiRabXg9cv3um6Ii5cYcuI5dfQx APt1szS4gxvRhNkbPw3/l3f08js7fyRvMbr7bZW+sRyN/hABWapiOkXgkoe4urRl Wu+PEUdgTCVSWPY0vQn5BBuu9IVJ8Ck= -----END CERTIFICATE-----Generated at Sat Aug 23 13:08:54 2025 by rpki-client