$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2d4512f9-c056-36bf-88f6-4bace83c24cf.roa File: 2d4512f9-c056-36bf-88f6-4bace83c24cf.roa (raw, json) Hash identifier: SAS1D7lwWCRrNjeU/GlpHw9yVqsV9x7s5K0WUCMvIS8= Subject key identifier: F8:63:E0:72:DE:07:3A:BF:31:CC:BF:F7:67:E8:70:16:FD:FA:CD:75 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD9365CEF62BC9D22E9E020E0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2d4512f9-c056-36bf-88f6-4bace83c24cf.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 204.2.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5c:ef:62:bc:9d:22:e9:e0:20:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=96f99de7-7bc0-48b6-85fa-819f460e420e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0d:a8:53:33:a2:e4:3b:f8:e7:c2:88:88:c1: 86:4d:7d:1d:7c:53:3c:03:ea:6b:b4:d9:fb:88:36: 28:86:84:f4:3a:de:e4:4f:10:01:64:9a:ae:10:7c: a6:1d:77:9a:0f:e4:aa:df:6f:2f:a6:86:9b:cd:df: 81:d7:4b:17:ae:69:87:a7:3f:b2:9a:f1:38:75:20: 98:c4:41:2b:e3:3c:c6:81:bb:c0:b4:d3:8d:cd:fc: 55:59:d9:31:bc:3c:85:50:48:e9:92:0c:e9:17:28: 43:f8:6d:5f:fd:b2:a3:7f:38:ff:c5:4a:9e:66:1b: 8a:7d:22:43:af:e0:d2:0b:11:6f:59:82:63:b7:6a: ed:be:bf:67:a0:c4:3d:0b:be:93:3e:a4:ee:a0:f9: 41:8e:69:18:2d:7e:1f:03:c9:75:54:7d:92:c8:a7: 4d:cb:4f:0a:aa:4c:e9:6a:60:77:7e:66:09:f5:4e: e7:4d:bc:e5:72:4e:ba:8f:9b:bc:e2:59:e6:ad:80: a4:77:8b:13:d7:1c:28:a4:6e:b3:1a:55:a6:5d:e7: 21:45:b1:fd:3d:9d:55:7e:ff:37:53:5d:5b:51:8f: cb:12:27:47:43:22:d0:3b:7c:10:0f:4a:55:a9:07: 14:9c:4b:b8:9c:56:f7:b4:cd:bc:b2:23:17:82:18: 67:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:63:E0:72:DE:07:3A:BF:31:CC:BF:F7:67:E8:70:16:FD:FA:CD:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2d4512f9-c056-36bf-88f6-4bace83c24cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:df:6b:c7:fa:8f:e7:59:da:07:b2:2a:f4:6d:c4:63:4b:d9: 1d:a8:3c:7e:f9:0a:40:ef:a4:b4:95:b6:4a:dd:6a:58:6c:f3: 52:cc:1d:9c:ec:a2:ea:43:10:ce:64:2c:86:a0:2b:40:34:02: 33:15:a9:1b:4d:37:f0:95:08:93:b8:93:87:5c:bf:3a:f7:4a: 30:8b:55:d9:8b:5f:a2:af:da:ca:00:85:56:84:1b:61:cf:ba: 20:d2:db:00:51:93:1f:0d:12:5e:5e:8b:9c:17:f1:93:8a:be: 2c:32:c5:cc:b8:ad:06:ad:9c:7d:4f:24:a4:df:32:a9:30:ab: d0:f2:60:76:09:f2:97:63:aa:22:72:26:04:71:3b:35:65:6b: 99:0c:cd:10:5c:71:8d:17:74:af:16:f3:88:b9:2d:d1:69:c5: 0d:56:8f:25:1f:ba:7f:4b:e8:fc:7e:33:2d:ec:71:d8:24:dc: 4f:4a:42:cc:be:9d:57:6a:fd:91:ff:cf:b6:fc:d1:75:d2:83: 89:34:55:99:f3:d1:b5:1f:fa:81:5a:7a:ef:b7:0e:31:1f:ef: e1:29:c3:0a:e6:30:5f:66:dc:ce:8a:7b:80:04:11:2a:99:35: a9:a4:62:00:e7:d3:32:1d:0c:8c:2a:18:28:59:52:55:89:f5: b5:70:b6:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNlzvYrydIungIOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk OTZmOTlkZTctN2JjMC00OGI2LTg1ZmEtODE5ZjQ2MGU0MjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A2oUzOi5Dv458KIiMGGTX0dfFM8A+prtNn7 iDYohoT0Ot7kTxABZJquEHymHXeaD+Sq328vpoabzd+B10sXrmmHpz+ymvE4dSCY xEEr4zzGgbvAtNONzfxVWdkxvDyFUEjpkgzpFyhD+G1f/bKjfzj/xUqeZhuKfSJD r+DSCxFvWYJjt2rtvr9noMQ9C76TPqTuoPlBjmkYLX4fA8l1VH2SyKdNy08Kqkzp amB3fmYJ9U7nTbzlck66j5u84lnmrYCkd4sT1xwopG6zGlWmXechRbH9PZ1Vfv83 U11bUY/LEidHQyLQO3wQD0pVqQcUnEu4nFb3tM28siMXghhnBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhj4HLeBzq/Mcy/92focBb9+s11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmQ0NTEyZjktYzA1Ni0z NmJmLTg4ZjYtNGJhY2U4M2MyNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzALhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLfa8f6j+dZ2geyKvRtxGNL2R2oPH75CkDvpLSVtkrdalhs81LMHZzs oupDEM5kLIagK0A0AjMVqRtNN/CVCJO4k4dcvzr3SjCLVdmLX6Kv2soAhVaEG2HP uiDS2wBRkx8NEl5ei5wX8ZOKviwyxcy4rQatnH1PJKTfMqkwq9DyYHYJ8pdjqiJy JgRxOzVla5kMzRBccY0XdK8W84i5LdFpxQ1WjyUfun9L6Px+My3scdgk3E9KQsy+ nVdq/ZH/z7b80XXSg4k0VZnz0bUf+oFaeu+3DjEf7+EpwwrmMF9m3M6Ke4AEESqZ NamkYgDn0zIdDIwqGChZUlWJ9bVwti4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:59:32 2025 by rpki-client