$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/409cf6f8-483a-3c61-a454-9e18624649fa.roa File: 409cf6f8-483a-3c61-a454-9e18624649fa.roa (raw, json) Hash identifier: yUzkQJLcGP5+6q4eXQvLOEgGgnaRiGR4RX3EOtGUI5Q= Subject key identifier: FE:F8:A7:E8:22:28:D6:6A:F3:81:07:C9:9D:42:23:54:3C:AA:02:50 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AECC132B144FCB9D00158AE00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/409cf6f8-483a-3c61-a454-9e18624649fa.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 393560 IP address blocks: 168.143.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:32:b1:44:fc:b9:d0:01:58:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3f5c6298-2597-499c-9751-3d036c4641a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:c8:35:20:d9:10:b2:7a:0a:62:75:f0:1d: ae:06:a9:a4:cf:ad:ef:fc:27:44:45:28:64:08:b0: e1:8f:6b:52:3b:8a:71:5a:df:f1:9b:ed:bf:b4:0d: 5e:e1:cf:06:cc:85:b0:51:43:9f:4e:ee:ee:dc:dd: ee:ed:b4:e5:35:0f:d4:ad:e6:04:54:6a:46:8e:57: ad:a1:fb:f3:c0:d9:cc:c3:59:b8:0c:6d:e4:db:b6: 47:27:89:45:9b:f5:16:43:c2:19:f6:7d:6c:62:d6: da:30:54:6a:85:57:4a:4f:71:20:7d:72:80:eb:38: 93:85:32:5b:fd:e6:6f:d8:5d:33:8b:b9:b8:b7:2e: d6:89:2c:7b:ea:0d:a3:61:1a:b9:36:62:11:b2:65: 85:bb:11:38:6a:6c:0c:4d:2a:81:c4:b4:c5:5f:3c: 46:fa:02:94:c9:f1:7d:07:f0:4b:9e:d7:e6:f8:2a: fd:d9:4a:0c:b5:b4:cf:be:cf:66:ea:d9:05:55:cf: 4a:e3:85:fc:7f:38:e3:c9:a0:9e:c7:b4:99:11:89: 35:e6:86:5a:cd:d1:64:dd:d5:3b:8d:35:86:c3:db: c6:aa:d8:37:73:97:55:8f:bb:5a:76:e4:64:0c:d1: a8:30:ee:51:f0:b6:bc:ea:2f:20:3c:5f:00:4f:38: e7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F8:A7:E8:22:28:D6:6A:F3:81:07:C9:9D:42:23:54:3C:AA:02:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/409cf6f8-483a-3c61-a454-9e18624649fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:79:48:fe:26:6f:8b:e6:89:97:77:85:a3:b6:b6:b4:d0:64: 13:73:38:ba:93:dc:f7:2c:27:c0:03:a6:5e:16:d4:d6:5c:01: 2f:47:4c:e3:a3:52:2b:92:e0:39:e1:4c:33:64:49:9d:72:db: 0c:e3:e1:42:b5:c4:16:c1:e7:56:c2:75:52:93:a2:9d:c9:1b: f4:f6:d6:94:47:03:5c:21:ba:73:32:ee:3f:70:4b:75:7b:3b: 40:25:40:4f:9b:f3:d5:7a:02:f6:5d:29:03:71:46:81:a3:2b: e4:38:f6:7a:31:35:79:42:f6:97:44:ae:d7:db:ba:24:83:8a: 07:8c:95:0b:e7:4d:78:fe:34:76:18:86:56:97:a4:03:6c:07: ef:65:ad:8c:67:6e:38:f8:29:8d:cc:1f:d4:d1:3a:3f:1b:cd: 1c:02:ed:27:9d:0b:6a:f3:f8:1c:7d:67:7e:f0:0d:0a:61:12: bd:e7:0a:be:a9:b3:16:a5:e6:db:ad:51:18:2c:84:16:ce:2c: a6:f9:58:e4:67:d9:88:9d:88:4c:fc:8e:d2:a2:e7:d2:ce:70: 6e:2f:ca:11:55:d5:34:e5:e6:15:26:77:6d:74:a2:6f:5b:c9: 1c:81:48:8b:9e:d3:f5:b6:e7:dd:65:11:ee:04:1d:99:56:46: 98:be:23:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTKxRPy50AFYrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2Y1YzYyOTgtMjU5Ny00OTljLTk3NTEtM2QwMzZjNDY0MWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmrINSDZELJ6CmJ18B2uBqmkz63v/CdERShk CLDhj2tSO4pxWt/xm+2/tA1e4c8GzIWwUUOfTu7u3N3u7bTlNQ/UreYEVGpGjlet ofvzwNnMw1m4DG3k27ZHJ4lFm/UWQ8IZ9n1sYtbaMFRqhVdKT3EgfXKA6ziThTJb /eZv2F0zi7m4ty7WiSx76g2jYRq5NmIRsmWFuxE4amwMTSqBxLTFXzxG+gKUyfF9 B/BLntfm+Cr92UoMtbTPvs9m6tkFVc9K44X8fzjjyaCex7SZEYk15oZazdFk3dU7 jTWGw9vGqtg3c5dVj7taduRkDNGoMO5R8La86i8gPF8ATzjnqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP74p+giKNZq84EHyZ1CI1Q8qgJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDA5Y2Y2ZjgtNDgzYS0z YzYxLWE0NTQtOWUxODYyNDY0OWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqI/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF5SP4mb4vmiZd3haO2trTQZBNzOLqT3PcsJ8ADpl4W1NZcAS9HTOOj UiuS4DnhTDNkSZ1y2wzj4UK1xBbB51bCdVKTop3JG/T21pRHA1whunMy7j9wS3V7 O0AlQE+b89V6AvZdKQNxRoGjK+Q49noxNXlC9pdErtfbuiSDigeMlQvnTXj+NHYY hlaXpANsB+9lrYxnbjj4KY3MH9TROj8bzRwC7SedC2rz+Bx9Z37wDQphEr3nCr6p sxal5tutURgshBbOLKb5WORn2YidiEz8jtKi59LOcG4vyhFV1TTl5hUmd210om9b yRyBSIue0/W2591lEe4EHZlWRpi+I/g= -----END CERTIFICATE-----Generated at Sat Aug 23 20:19:06 2025 by rpki-client