$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/609552ca-a27a-357f-b6b6-3b4483c88884.roa File: 609552ca-a27a-357f-b6b6-3b4483c88884.roa (raw, json) Hash identifier: M2HgIuJvmUSAqmCfUVLKOHPeeDBOCdit1bvxVRPIeq0= Subject key identifier: F6:B8:AC:00:F0:67:6C:98:08:E4:5A:D8:B6:95:72:F6:74:E8:30:FD Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D122141A567B33D5811030 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/609552ca-a27a-357f-b6b6-3b4483c88884.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 14717 IP address blocks: 207.156.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:22:14:1a:56:7b:33:d5:81:10:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=58e96647-2baf-4edc-b3bf-e3a235a4dcb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:75:7a:cf:97:c2:2f:b6:58:42:2c:3c:a6:43: b1:2e:e7:db:ab:75:f2:31:e3:8d:ef:b7:63:7d:1d: b8:e6:ae:fc:2f:35:23:af:9a:ea:d4:3d:2f:50:a6: 9e:ad:c4:8b:c3:51:80:45:4e:d8:54:94:52:bb:39: 13:63:7e:17:5c:53:93:ca:d9:59:23:0e:e4:9f:c9: e2:77:4d:36:8a:1c:67:f6:dc:92:40:a2:f5:a1:7d: ea:22:72:f2:f9:c3:a5:45:54:1e:8c:d3:b3:c9:bd: ba:3d:e8:23:8f:7a:af:c3:0d:54:03:30:96:c5:64: 70:d5:93:cc:34:1c:5d:20:28:5c:34:6f:03:71:c1: 39:97:1a:60:f8:d9:fc:c7:8f:ed:a4:c5:78:2c:b7: b2:be:d9:33:7f:9a:e9:18:5c:5d:64:f2:2d:8c:40: ae:9e:f3:2b:e8:3b:83:f7:df:d7:ed:19:87:50:66: f2:a2:0e:07:41:5a:cd:18:00:f5:9d:6e:1d:44:6d: 93:ba:c2:5a:ea:98:d3:90:d9:c5:f6:86:e1:73:8e: d0:7a:f0:2a:37:ba:25:77:2f:40:2f:0f:dd:cb:3a: 8c:e4:da:46:64:3f:fe:49:20:0f:e5:14:ee:97:08: a9:80:82:99:8b:c4:7d:d9:5f:fc:57:78:f4:7d:b6: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B8:AC:00:F0:67:6C:98:08:E4:5A:D8:B6:95:72:F6:74:E8:30:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/609552ca-a27a-357f-b6b6-3b4483c88884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.156.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6e:0a:ff:3f:46:11:7d:9a:55:69:40:9e:b3:0f:7b:fa:c9: a6:45:6b:34:be:2f:e0:23:98:bc:86:15:88:34:4d:6a:1d:ba: cb:25:b3:cf:6e:95:fd:36:5f:f2:71:d0:29:51:51:f4:9b:75: c7:40:85:0a:fb:8f:ef:00:d5:03:8a:6a:d6:00:fc:5c:88:58: c1:f2:7a:c3:71:2c:f5:4b:de:9d:d6:17:9e:0b:b5:41:81:33: 8d:63:fa:95:ea:7e:29:ca:54:0d:02:46:5e:57:8f:10:a2:67: ba:03:de:1d:5e:ce:80:81:a5:1a:bf:ca:61:96:68:28:5d:bc: 83:13:ac:27:4c:6e:11:9d:24:10:05:28:e2:3b:3d:58:ac:d6: 8a:a1:6e:74:1f:9a:e3:9b:a2:72:1b:36:fa:10:7c:37:bf:47: 19:02:c7:fc:b9:06:ab:c4:84:94:11:24:6d:8e:c7:0e:a3:98: 7c:15:95:e1:8b:53:ca:8c:b8:c1:a7:89:d9:cd:3c:49:dc:68: 43:45:7b:0f:ac:89:28:f8:df:ee:fb:a9:69:d3:1b:bd:05:1e: 4e:7a:34:80:02:3e:1a:b6:b9:40:6a:b3:d1:bb:df:40:95:ab: 0d:39:f5:0c:e9:4d:5a:02:d5:53:b6:0b:5e:8b:d2:95:a8:a7: 7c:6a:e4:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SIUGlZ7M9WBEDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NThlOTY2NDctMmJhZi00ZWRjLWIzYmYtZTNhMjM1YTRkY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXV6z5fCL7ZYQiw8pkOxLufbq3XyMeON77dj fR245q78LzUjr5rq1D0vUKaercSLw1GARU7YVJRSuzkTY34XXFOTytlZIw7kn8ni d002ihxn9tySQKL1oX3qInLy+cOlRVQejNOzyb26Pegjj3qvww1UAzCWxWRw1ZPM NBxdIChcNG8DccE5lxpg+Nn8x4/tpMV4LLeyvtkzf5rpGFxdZPItjECunvMr6DuD 99/X7RmHUGbyog4HQVrNGAD1nW4dRG2TusJa6pjTkNnF9obhc47QevAqN7oldy9A Lw/dyzqM5NpGZD/+SSAP5RTulwipgIKZi8R92V/8V3j0fbah9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa4rADwZ2yYCORa2LaVcvZ06DD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjA5NTUyY2EtYTI3YS0z NTdmLWI2YjYtM2I0NDgzYzg4ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz5zYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5uCv8/RhF9mlVpQJ6zD3v6yaZFazS+L+AjmLyGFYg0TWodussls89u lf02X/Jx0ClRUfSbdcdAhQr7j+8A1QOKatYA/FyIWMHyesNxLPVL3p3WF54LtUGB M41j+pXqfinKVA0CRl5XjxCiZ7oD3h1ezoCBpRq/ymGWaChdvIMTrCdMbhGdJBAF KOI7PVis1oqhbnQfmuObonIbNvoQfDe/RxkCx/y5BqvEhJQRJG2Oxw6jmHwVleGL U8qMuMGnidnNPEncaENFew+siSj43+77qWnTG70FHk56NIACPhq2uUBqs9G730CV qw059QzpTVoC1VO2C16L0pWop3xq5JQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:51 2025 by rpki-client