$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a1f6594-8e3c-3f03-a0a4-c8ef04abb0d6.roa File: 5a1f6594-8e3c-3f03-a0a4-c8ef04abb0d6.roa (raw, json) Hash identifier: WW0qpFRG+BjSH7cieU45teJbZuWvcr0I3c7TikAQaH4= Subject key identifier: 68:B0:B3:1A:77:97:29:1C:44:62:E0:AC:99:F9:99:F1:B9:66:49:32 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584ADD667D0E9C58FE8847ACF700 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a1f6594-8e3c-3f03-a0a4-c8ef04abb0d6.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 204.2.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:7d:0e:9c:58:fe:88:47:ac:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=5bbfe22c-e9c1-4a0a-9598-00bfcd6526e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:aa:1a:d5:40:83:f5:22:e0:b0:18:8f:d6: 7b:d5:76:2c:6c:70:3d:23:cc:00:da:e4:b2:bd:5e: 16:ea:76:97:dd:c4:88:04:f4:cd:1e:a9:18:ee:c4: 0f:84:ca:53:f8:9e:77:b3:4a:38:f2:4c:77:a7:77: c3:50:b8:5f:61:aa:35:0b:60:07:b7:b6:ee:47:91: d3:6d:d7:6c:17:55:23:1c:a2:35:ec:57:e8:e0:b7: 7b:cd:54:24:aa:b5:79:b2:b1:3f:ad:66:5c:10:2c: c1:ba:4a:4b:0c:97:ba:3e:b7:ef:b8:1d:e4:31:0f: bb:fe:d6:03:b5:70:59:51:0d:92:fc:31:00:c2:b8: 92:41:2a:fa:0a:28:0a:bf:d8:c3:75:a8:49:9d:ca: 5d:97:6e:42:db:15:9d:2d:6b:0d:35:61:30:a1:ca: b0:54:84:5a:58:33:af:7d:2f:c9:da:46:9a:8f:57: 5a:6f:84:98:36:c1:65:07:a1:f3:48:1c:9a:89:a9: c9:61:95:65:83:e4:7e:58:0c:f6:d4:7f:22:33:3e: b0:0b:68:60:4a:4f:99:f3:4f:ce:8a:f6:1a:ec:ee: f2:cc:3f:0c:84:51:3b:c8:ab:cc:e7:98:72:2c:a0: 17:7f:b8:e4:45:99:a1:15:19:f1:8a:24:e3:2b:14: 44:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B0:B3:1A:77:97:29:1C:44:62:E0:AC:99:F9:99:F1:B9:66:49:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a1f6594-8e3c-3f03-a0a4-c8ef04abb0d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ed:55:0b:73:de:6f:0e:94:bd:07:ee:d9:fc:06:ce:13:1b: ba:fc:f2:be:3b:b5:03:10:f5:53:04:84:c7:3f:ec:c2:a8:d1: d0:ca:84:f9:bd:ab:1b:db:58:91:1d:96:e9:84:0c:6f:af:d4: 81:a3:28:2f:9e:81:d9:d2:f0:6b:f9:8c:cc:80:16:57:10:2b: 05:a9:9e:35:f8:b0:aa:94:0b:ac:a4:37:a4:33:d1:fc:a9:bd: 0d:34:bf:4f:4a:30:75:c8:d8:4f:e0:3b:71:1f:05:c1:c9:b2: fc:bc:33:69:9c:02:28:51:4b:95:f4:74:09:d7:a9:88:26:56: ff:29:3f:6b:b0:ea:34:6b:1f:29:8b:57:d9:cd:e7:c1:ff:69: a3:44:35:91:a5:7d:23:7d:cb:0f:04:a1:28:da:d0:ff:ca:64: c8:04:ba:96:8f:96:e5:d7:d1:9e:25:6e:8c:e5:3f:1e:4b:6c: 98:75:25:36:fb:42:95:13:13:9c:8b:e0:96:fa:0f:6b:a6:fa: 17:e7:1a:6a:d0:88:a7:08:60:02:ea:a9:43:af:42:de:9e:0a: c5:e1:fc:c6:1a:08:21:06:60:45:f2:67:be:46:23:9a:bf:9d: 93:ec:60:7c:4f:85:38:10:2b:9e:15:69:17:e3:76:de:14:ef: 44:25:45:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZn0OnFj+iEes9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NWJiZmUyMmMtZTljMS00YTBhLTk1OTgtMDBiZmNkNjUyNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3+qGtVAg/Ui4LAYj9Z71XYsbHA9I8wA2uSy vV4W6naX3cSIBPTNHqkY7sQPhMpT+J53s0o48kx3p3fDULhfYao1C2AHt7buR5HT bddsF1UjHKI17Ffo4Ld7zVQkqrV5srE/rWZcECzBukpLDJe6PrfvuB3kMQ+7/tYD tXBZUQ2S/DEAwriSQSr6CigKv9jDdahJncpdl25C2xWdLWsNNWEwocqwVIRaWDOv fS/J2kaaj1dab4SYNsFlB6HzSByaianJYZVlg+R+WAz21H8iMz6wC2hgSk+Z80/O ivYa7O7yzD8MhFE7yKvM55hyLKAXf7jkRZmhFRnxiiTjKxRECQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiwsxp3lykcRGLgrJn5mfG5ZkkyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWExZjY1OTQtOGUzYy0z ZjAzLWEwYTQtYzhlZjA0YWJiMGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABntVQtz3m8OlL0H7tn8Bs4TG7r88r47tQMQ9VMEhMc/7MKo0dDKhPm9 qxvbWJEdlumEDG+v1IGjKC+egdnS8Gv5jMyAFlcQKwWpnjX4sKqUC6ykN6Qz0fyp vQ00v09KMHXI2E/gO3EfBcHJsvy8M2mcAihRS5X0dAnXqYgmVv8pP2uw6jRrHymL V9nN58H/aaNENZGlfSN9yw8EoSja0P/KZMgEupaPluXX0Z4lbozlPx5LbJh1JTb7 QpUTE5yL4Jb6D2um+hfnGmrQiKcIYALqqUOvQt6eCsXh/MYaCCEGYEXyZ75GI5q/ nZPsYHxPhTgQK54VaRfjdt4U70QlRVo= -----END CERTIFICATE-----Generated at Sat Aug 23 22:54:17 2025 by rpki-client