$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa File: 3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa (raw, json) Hash identifier: h7CLHJ4iepXxra7E2LlJhRdAAWpBMP09XJHGxBErMEk= Subject key identifier: 1B:DE:8B:4D:4E:56:E5:98:47:34:69:43:F5:C6:0E:FF:69:A7:1F:FA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD9365248A737EA6979C97900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 1225 IP address blocks: 128.241.192.0/21 maxlen: 21 204.2.140.0/22 maxlen: 24 2001:418:3ff::/64 maxlen: 64 2001:418:1439::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:52:48:a7:37:ea:69:79:c9:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=4014c3b8-6af6-4d4b-8aa7-0132c0923cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2f:9e:22:46:01:a1:e0:10:2d:38:69:92:8c: ea:30:ce:d6:c3:c8:b0:43:f9:de:39:70:0d:13:9f: eb:22:ed:b2:9d:93:31:26:a1:dc:3f:a2:00:6e:d5: 67:25:0e:90:f4:ac:d9:f1:69:84:b1:80:5a:af:b2: bd:69:c2:94:e8:30:a0:6c:34:b1:31:6f:58:81:c8: c0:95:d3:71:b4:e3:38:ee:51:e0:5d:33:80:d3:eb: 9e:05:11:c9:8a:8f:8b:bb:6f:23:d5:59:95:2c:27: 5d:4d:fb:67:e2:c9:ae:f1:f4:3a:9e:25:91:f1:2e: 49:2b:ec:92:4d:86:79:0d:ea:a9:fe:54:c4:31:b0: 1e:79:2d:77:08:ea:eb:9e:93:02:4d:03:ed:28:17: b3:45:b3:e7:2d:04:4a:33:f3:b1:19:c8:73:ba:d3: 75:7a:65:52:47:cc:42:5f:e9:ca:30:65:ba:97:fb: bf:85:cb:28:08:e1:85:2d:24:2e:cb:ce:07:b6:1f: ef:96:20:30:e8:25:f0:13:d8:ed:63:66:56:f3:e0: 62:b0:ab:95:fe:bc:97:22:c2:cc:ec:62:8d:92:c0: 33:34:bb:1a:b8:c8:14:c9:97:58:9f:ee:78:59:26: a7:09:db:5d:4c:9e:e7:96:d9:7b:b7:78:b2:4e:82: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DE:8B:4D:4E:56:E5:98:47:34:69:43:F5:C6:0E:FF:69:A7:1F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.192.0/21 204.2.140.0/22 IPv6: 2001:418:3ff::/64 2001:418:1439::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d6:e2:50:bc:ba:ff:a1:0c:0a:2d:ad:a4:7f:59:b3:62:95: 92:37:2c:15:1d:aa:aa:b9:ae:e2:88:c6:f6:be:30:62:7d:78: 28:72:34:c2:9a:03:97:3c:0a:cb:1d:34:f2:d8:d7:29:bf:0e: ca:0e:0c:00:ad:17:8d:fe:cd:36:9e:8e:4f:64:d7:f8:89:70: 7f:5e:6f:3c:b7:1c:91:71:aa:36:11:6e:b4:72:80:99:96:90: 23:d6:b6:45:b7:93:c9:45:4d:ba:24:ae:35:9e:6b:b8:43:52: 20:70:f2:29:60:1b:17:02:5a:f9:10:03:21:ee:ea:ed:60:2b: be:aa:74:d4:a1:eb:7c:06:1b:38:03:76:cc:88:06:a8:74:97: d3:c2:f4:5f:0a:28:33:f1:9d:6e:8a:f8:3a:9c:6c:4d:b3:1c: 77:f3:7d:da:cd:75:62:96:ef:31:c2:a9:bc:02:bb:6b:7c:7c: 00:21:0a:3a:7e:93:69:4a:57:60:31:27:97:22:00:ae:0d:c0: 0d:f1:4f:7d:ec:25:90:87:26:e3:32:b6:e5:4d:5b:85:13:b2: d6:da:9c:c0:4e:40:d5:64:6c:44:c8:83:6c:f6:c3:13:25:ef: 13:8d:bb:cd:59:79:b9:a6:13:e7:af:b3:c5:16:b7:39:a4:65: 76:55:01:9a -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWErZNlJIpzfqaXnJeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk NDAxNGMzYjgtNmFmNi00ZDRiLThhYTctMDEzMmMwOTIzY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y+eIkYBoeAQLThpkozqMM7Ww8iwQ/neOXAN E5/rIu2ynZMxJqHcP6IAbtVnJQ6Q9KzZ8WmEsYBar7K9acKU6DCgbDSxMW9YgcjA ldNxtOM47lHgXTOA0+ueBRHJio+Lu28j1VmVLCddTftn4smu8fQ6niWR8S5JK+yS TYZ5Deqp/lTEMbAeeS13COrrnpMCTQPtKBezRbPnLQRKM/OxGchzutN1emVSR8xC X+nKMGW6l/u/hcsoCOGFLSQuy84Hth/vliAw6CXwE9jtY2ZW8+BisKuV/ryXIsLM 7GKNksAzNLsauMgUyZdYn+54WSanCdtdTJ7nltl7t3iyToJg7QIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFBvei01OVuWYRzRpQ/XGDv9ppx/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2Y4MWEwNmEtNzViMy0z YmQzLTliYTItODkyZjM3MDI3MmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQDgPHAAwQC zAKMMBoEAgACMBQDCQAgAQQYA/8AAAMHACABBBgUOTBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAT1uJQvLr/ oQwKLa2kf1mzYpWSNywVHaqqua7iiMb2vjBifXgocjTCmgOXPArLHTTy2Ncpvw7K DgwArReN/s02no5PZNf4iXB/Xm88txyRcao2EW60coCZlpAj1rZFt5PJRU26JK41 nmu4Q1IgcPIpYBsXAlr5EAMh7urtYCu+qnTUoet8Bhs4A3bMiAaodJfTwvRfCigz 8Z1uivg6nGxNsxx3833azXVilu8xwqm8ArtrfHwAIQo6fpNpSldgMSeXIgCuDcAN 8U997CWQhybjMrblTVuFE7LW2pzATkDVZGxEyINs9sMTJe8TjbvNWXm5phPnr7PF Frc5pGV2VQGa -----END CERTIFICATE-----Generated at Sat Aug 23 13:07:22 2025 by rpki-client