$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2d6c3e-ed41-3d11-975b-494ee976312d.roa File: 3d2d6c3e-ed41-3d11-975b-494ee976312d.roa (raw, json) Hash identifier: IBDwY8GNN2DDmatuntsYwvfLBNL8Ht8xU3Dbbx0n/rU= Subject key identifier: 8D:36:E7:DB:BA:6C:BE:81:B0:A8:F9:C1:CC:37:5B:EE:9B:FB:9D:82 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AECC1327855449722556A40A0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2d6c3e-ed41-3d11-975b-494ee976312d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 2914 IP address blocks: 129.250.161.160/27 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:32:78:55:44:97:22:55:6a:40:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=793d7024-70a1-441c-a01b-304a1e7610db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e3:7c:00:a1:b7:9f:c2:be:6a:10:24:bb:ba: 15:09:7d:68:f6:dc:55:e2:74:1c:4a:99:ea:a9:00: 22:84:0f:c0:50:fa:a0:0a:37:42:23:af:48:9c:92: a4:84:83:d6:d4:ab:8a:15:e9:f5:52:02:4b:cc:26: 2c:17:0a:cd:ec:3a:74:64:36:bf:dd:0a:15:88:05: c3:c6:e8:57:6a:f1:0f:34:78:30:9c:48:f9:11:3f: ae:22:88:df:ab:dd:63:ac:b9:f5:9c:76:15:22:c5: b0:35:fb:60:07:fd:b5:33:8f:65:d9:3a:7b:2e:08: 4b:da:b2:ce:11:ab:07:46:b3:45:56:3b:49:e6:ef: 64:41:90:e0:38:86:5f:4d:c2:58:b4:2a:66:32:ab: 9f:4b:66:3a:c3:59:0f:8f:73:35:94:43:ca:ba:31: f3:9f:f1:2e:d5:4a:b7:71:f9:f8:bb:c0:5b:40:86: e5:93:26:cc:e4:53:14:7a:3e:e2:7c:be:b0:03:ac: 47:0d:d4:cc:18:13:e7:52:0c:a1:75:e8:ad:30:37: cb:69:f7:c4:a3:ca:ad:74:75:0e:60:9e:23:cb:7d: 16:9f:13:fd:05:e9:a1:44:4c:3f:68:b8:f7:ea:e5: 6d:ce:2e:48:09:f7:ea:5a:e8:00:74:42:02:92:bf: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:36:E7:DB:BA:6C:BE:81:B0:A8:F9:C1:CC:37:5B:EE:9B:FB:9D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2d6c3e-ed41-3d11-975b-494ee976312d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.161.160/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:98:dc:9d:a9:ed:f4:be:76:7a:76:46:77:d2:2f:62:d3:ca: fe:80:85:62:3e:00:dc:17:1e:cc:1e:72:11:36:30:4d:6a:a8: 9f:50:ed:2e:a4:07:57:50:f3:6f:6a:18:44:e2:9f:10:18:bc: 28:36:72:16:fc:36:2d:e6:b9:5c:55:e3:aa:27:7b:8f:e0:21: c5:bd:6a:cd:15:3a:3d:ed:0d:7d:b5:9e:16:22:a2:f4:5e:48: 2c:a3:1a:95:3a:5e:2a:0d:36:3d:16:b1:d9:c6:4b:7a:48:ae: 1c:4b:8e:59:b8:e2:32:e7:7b:99:76:de:25:39:4b:51:d7:9b: 74:54:2a:6d:53:c8:71:a7:c1:7a:61:7a:d7:46:9e:5e:bf:26: 45:17:96:8d:75:08:86:ee:2a:5e:6a:a1:56:21:d8:b3:ae:b1: be:ae:7e:b8:ab:97:7c:8c:f1:e6:49:ba:15:c3:e6:a3:ec:e2: b4:6e:c7:2a:6c:1b:43:2b:66:78:d2:8e:7a:9e:82:eb:1a:f7: 53:7d:f3:40:e9:64:ab:58:a9:4f:4e:d5:4f:04:a7:04:42:ee: 26:4d:90:21:c4:de:95:f6:5a:a3:b6:51:e1:ea:e5:d8:7e:94: 3b:0f:21:48:b6:16:27:06:0c:4c:7d:c7:3f:b9:e8:87:81:40: a6:6e:07:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErswTJ4VUSXIlVqQKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzkzZDcwMjQtNzBhMS00NDFjLWEwMWItMzA0YTFlNzYxMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeN8AKG3n8K+ahAku7oVCX1o9txV4nQcSpnq qQAihA/AUPqgCjdCI69InJKkhIPW1KuKFen1UgJLzCYsFwrN7Dp0ZDa/3QoViAXD xuhXavEPNHgwnEj5ET+uIojfq91jrLn1nHYVIsWwNftgB/21M49l2Tp7LghL2rLO EasHRrNFVjtJ5u9kQZDgOIZfTcJYtCpmMqufS2Y6w1kPj3M1lEPKujHzn/Eu1Uq3 cfn4u8BbQIblkybM5FMUej7ifL6wA6xHDdTMGBPnUgyhdeitMDfLaffEo8qtdHUO YJ4jy30WnxP9BemhREw/aLj36uVtzi5ICffqWugAdEICkr+J6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI0259u6bL6BsKj5wcw3W+6b+52CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2QyZDZjM2UtZWQ0MS0z ZDExLTk3NWItNDk0ZWU5NzYzMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfqhoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCfmNydqe30vnZ6dkZ30i9i08r+gIViPgDcFx7MHnIRNjBNaqifUO0u pAdXUPNvahhE4p8QGLwoNnIW/DYt5rlcVeOqJ3uP4CHFvWrNFTo97Q19tZ4WIqL0 XkgsoxqVOl4qDTY9FrHZxkt6SK4cS45ZuOIy53uZdt4lOUtR15t0VCptU8hxp8F6 YXrXRp5evyZFF5aNdQiG7ipeaqFWIdizrrG+rn64q5d8jPHmSboVw+aj7OK0bscq bBtDK2Z40o56noLrGvdTffNA6WSrWKlPTtVPBKcEQu4mTZAhxN6V9lqjtlHh6uXY fpQ7DyFIthYnBgxMfcc/ueiHgUCmbgcf -----END CERTIFICATE-----Generated at Sat Aug 23 14:55:14 2025 by rpki-client