$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e7847cf-1ca3-3820-85be-905ee6db8681.roa File: 6e7847cf-1ca3-3820-85be-905ee6db8681.roa (raw, json) Hash identifier: sVfd8LZklqvfrEnAotVdzq5+5ogH2AoFuekmG3HPBqo= Subject key identifier: BA:8F:F7:B2:E5:F9:80:11:4F:0E:B3:D8:5B:F5:61:2C:1B:7A:99:3B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D1246527A2013137B48636 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e7847cf-1ca3-3820-85be-905ee6db8681.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 168.143.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:24:65:27:a2:01:31:37:b4:86:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=fc087cab-e854-4feb-b017-ab3c778fd8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:47:8f:73:be:18:ab:85:aa:a7:95:1b:d9: f9:8d:6a:58:6b:74:b9:53:32:08:a9:e4:05:92:a6: 1c:c8:cf:ee:d3:4a:04:03:39:27:6e:6e:94:16:ba: b9:ba:95:45:8f:82:6e:11:f2:fa:85:58:f9:22:5f: 7b:be:c3:19:52:dd:51:b3:8f:0e:49:94:88:d4:17: 90:e9:34:d2:23:bf:36:be:62:c5:d6:00:b2:ba:0e: 41:7c:7e:64:8b:34:4c:8c:66:05:3f:ae:b0:b4:f4: 93:73:75:8f:00:13:a8:15:d2:0c:1f:a4:6c:ab:a8: 8c:ed:df:79:95:77:be:a6:8e:e2:12:8d:2f:3c:b5: b9:2a:d6:02:5f:0a:50:b7:18:e6:f2:e2:36:aa:41: 91:fb:82:7a:61:74:43:d2:c3:9b:05:ac:e1:2b:fe: 0f:bc:73:3b:15:eb:da:0d:9a:78:7b:cf:6f:a4:81: fb:46:27:d3:f5:d2:1c:d1:c6:46:ab:8b:55:c9:a9: 0b:ec:f3:d4:a1:a7:ea:ec:dc:31:9d:0f:3e:14:b6: a7:27:5a:19:49:29:9a:e2:58:5a:0a:13:03:fd:92: 8a:01:2b:85:9b:42:79:a2:39:82:7f:6e:95:7e:78: d4:8f:78:7b:21:d4:4c:c2:20:51:4c:1f:05:e3:c7: 3a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8F:F7:B2:E5:F9:80:11:4F:0E:B3:D8:5B:F5:61:2C:1B:7A:99:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e7847cf-1ca3-3820-85be-905ee6db8681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:42:22:31:fc:d8:d3:14:24:de:f1:2c:b1:fc:eb:5e:3e:17: e8:1c:cc:2b:86:9f:91:b4:69:97:ab:c8:53:32:2d:19:37:e5: 50:95:d6:4e:37:72:b7:a0:85:e2:84:2c:35:e7:39:b3:16:14: 12:a3:12:d2:24:31:6d:31:09:fb:54:e7:b2:17:14:14:85:f5: 54:96:97:d0:58:7a:68:ca:a7:0e:e0:1a:67:90:83:88:74:73: 5a:c5:d2:00:bd:57:7a:1b:15:21:c7:d5:6f:6b:61:9b:01:7f: d4:8b:1a:73:c2:95:55:69:4c:a2:f0:ae:2b:7d:6d:da:8b:aa: 17:ce:fc:8e:9c:a0:06:58:c6:7a:a5:4c:7c:08:91:cd:e2:02: c3:00:c4:7f:1b:8b:2b:72:ad:0d:13:60:33:60:1c:9c:a3:f2: 41:1f:3d:33:40:bf:08:51:f5:f2:5d:0e:9b:fd:1e:52:97:4f: c7:d9:07:c5:cd:48:2f:cf:8f:27:63:4f:54:f2:04:2e:e1:83: 1f:6b:03:16:28:f7:ca:01:d0:d0:a2:89:27:8e:5c:b1:bd:d4: 58:26:55:fa:3e:ae:64:e7:e9:a6:a2:3a:45:92:65:a9:01:79: 68:6f:0f:67:63:23:43:f8:09:23:74:45:b7:2c:c6:f7:ef:6e: d9:77:d8:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SRlJ6IBMTe0hjYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZmMwODdjYWItZTg1NC00ZmViLWIwMTctYWIzYzc3OGZkOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1ZHj3O+GKuFqqeVG9n5jWpYa3S5UzIIqeQF kqYcyM/u00oEAzknbm6UFrq5upVFj4JuEfL6hVj5Il97vsMZUt1Rs48OSZSI1BeQ 6TTSI782vmLF1gCyug5BfH5kizRMjGYFP66wtPSTc3WPABOoFdIMH6Rsq6iM7d95 lXe+po7iEo0vPLW5KtYCXwpQtxjm8uI2qkGR+4J6YXRD0sObBazhK/4PvHM7Feva DZp4e89vpIH7RifT9dIc0cZGq4tVyakL7PPUoafq7NwxnQ8+FLanJ1oZSSma4lha ChMD/ZKKASuFm0J5ojmCf26VfnjUj3h7IdRMwiBRTB8F48c6iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqP97Ll+YARTw6z2Fv1YSwbepk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNmU3ODQ3Y2YtMWNhMy0z ODIwLTg1YmUtOTA1ZWU2ZGI4NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqI/WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBCIjH82NMUJN7xLLH8614+F+gczCuGn5G0aZeryFMyLRk35VCV1k43 cregheKELDXnObMWFBKjEtIkMW0xCftU57IXFBSF9VSWl9BYemjKpw7gGmeQg4h0 c1rF0gC9V3obFSHH1W9rYZsBf9SLGnPClVVpTKLwrit9bdqLqhfO/I6coAZYxnql THwIkc3iAsMAxH8biytyrQ0TYDNgHJyj8kEfPTNAvwhR9fJdDpv9HlKXT8fZB8XN SC/PjydjT1TyBC7hgx9rAxYo98oB0NCiiSeOXLG91FgmVfo+rmTn6aaiOkWSZakB eWhvD2djI0P4CSN0Rbcsxvfvbtl32Ko= -----END CERTIFICATE-----Generated at Sat Aug 23 13:13:07 2025 by rpki-client