$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7186b83b-ddc0-3354-8895-32af8a1dba79.roa File: 7186b83b-ddc0-3354-8895-32af8a1dba79.roa (raw, json) Hash identifier: ks3NYxc/wVk16l/zWqU8pCOMSpmt1hcueuWDiEPHPlA= Subject key identifier: 28:00:F9:11:9F:FA:78:DB:CB:BD:52:9A:73:FC:8A:B1:CE:A3:A9:B9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D121D42D29036E204E0400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7186b83b-ddc0-3354-8895-32af8a1dba79.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 2914 IP address blocks: 129.250.161.0/24 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:21:d4:2d:29:03:6e:20:4e:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=ebbaf115-5273-47d8-a0d1-a6489b9aeb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:4c:45:14:9c:c3:59:b4:f1:e4:fd:8b:e4: 68:c5:7b:69:dd:85:5f:13:fa:fd:58:18:73:e7:9c: 13:c1:9a:03:85:fd:d8:b5:27:21:85:2f:01:c7:28: a8:65:f8:c8:7c:8a:de:b1:dd:16:d8:b5:6a:03:61: 7c:62:69:c8:e1:89:b2:b5:5c:46:26:32:72:32:d8: 26:b2:6f:2e:b6:23:79:19:6f:f0:08:98:70:e9:8b: 2a:25:64:c2:dd:48:ca:15:c2:fb:38:76:5a:6f:89: ab:6e:6f:5e:50:98:ee:47:ad:6b:a5:29:46:0e:05: d5:d7:2b:fc:6f:f5:b2:56:85:7c:e6:0c:b7:44:13: 7c:e5:ec:ed:c8:d7:ae:f8:4d:6a:fe:20:d8:00:47: 15:3e:7f:59:d8:52:ca:93:d5:40:35:be:3f:78:9f: 90:21:12:10:0e:42:b6:3c:84:11:54:2a:c3:9e:c3: d6:41:94:32:c0:88:ca:b2:06:1f:c1:19:b3:81:47: d3:48:04:c6:dd:17:43:ac:ce:13:c0:16:25:77:a7: e2:4d:33:ff:8d:21:8c:0e:73:61:25:c0:66:aa:de: b1:40:e6:03:5f:d9:5d:c6:65:95:05:19:4e:10:13: 54:84:85:67:bf:46:74:ee:39:bd:dd:06:0f:b1:ec: 5e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:00:F9:11:9F:FA:78:DB:CB:BD:52:9A:73:FC:8A:B1:CE:A3:A9:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7186b83b-ddc0-3354-8895-32af8a1dba79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:a7:9b:95:be:62:ae:ff:59:4c:29:b1:0e:ba:97:53:f6:e7: 2f:fd:dc:6c:cd:d6:63:9f:9b:7a:c1:0f:99:f1:dd:ad:37:6c: 97:0f:a8:dd:0a:3c:48:e1:d1:c2:c1:03:34:19:f1:53:92:5e: 5a:7a:96:da:ab:c7:d1:19:12:7c:94:30:a9:8d:10:80:20:9c: 26:21:b7:40:b9:3b:54:02:71:44:cd:20:49:4f:02:a9:0f:8f: d9:06:cb:2e:b7:46:3c:63:d3:cc:8a:10:b2:1d:eb:a8:f2:03: f3:17:a5:be:e8:23:11:ac:f6:34:80:d1:6f:c4:b3:67:6f:83: 0d:2c:69:0a:8b:16:a3:20:98:82:83:0b:c4:c2:ca:18:80:29: 81:92:8a:ab:15:f9:da:57:ec:2d:5b:10:59:5c:22:63:3f:4c: c5:ba:63:fc:bc:ac:b1:75:4d:58:e8:9d:74:54:3d:97:1e:75: c5:41:82:f7:e4:06:ac:13:cd:2b:47:47:6d:aa:44:60:fb:3c: c9:d5:d4:0f:60:52:54:25:fa:4f:cf:ed:fb:3a:79:88:26:ad: c8:69:b4:73:a3:65:f3:92:a5:53:56:d2:89:1e:ce:a5:09:89: d4:0d:ff:23:09:00:d4:66:a0:e1:8c:9a:44:1a:bf:46:70:aa: 4b:a5:93:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SHULSkDbiBOBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZWJiYWYxMTUtNTI3My00N2Q4LWEwZDEtYTY0ODliOWFlYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJxMRRScw1m08eT9i+RoxXtp3YVfE/r9WBhz 55wTwZoDhf3YtSchhS8BxyioZfjIfIresd0W2LVqA2F8YmnI4YmytVxGJjJyMtgm sm8utiN5GW/wCJhw6YsqJWTC3UjKFcL7OHZab4mrbm9eUJjuR61rpSlGDgXV1yv8 b/WyVoV85gy3RBN85eztyNeu+E1q/iDYAEcVPn9Z2FLKk9VANb4/eJ+QIRIQDkK2 PIQRVCrDnsPWQZQywIjKsgYfwRmzgUfTSATG3RdDrM4TwBYld6fiTTP/jSGMDnNh JcBmqt6xQOYDX9ldxmWVBRlOEBNUhIVnv0Z07jm93QYPsexegwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgA+RGf+njby71SmnP8irHOo6m5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzE4NmI4M2ItZGRjMC0z MzU0LTg4OTUtMzJhZjhhMWRiYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgfqhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJinm5W+Yq7/WUwpsQ66l1P25y/93GzN1mOfm3rBD5nx3a03bJcPqN0K PEjh0cLBAzQZ8VOSXlp6ltqrx9EZEnyUMKmNEIAgnCYht0C5O1QCcUTNIElPAqkP j9kGyy63Rjxj08yKELId66jyA/MXpb7oIxGs9jSA0W/Es2dvgw0saQqLFqMgmIKD C8TCyhiAKYGSiqsV+dpX7C1bEFlcImM/TMW6Y/y8rLF1TVjonXRUPZcedcVBgvfk BqwTzStHR22qRGD7PMnV1A9gUlQl+k/P7fs6eYgmrchptHOjZfOSpVNW0okezqUJ idQN/yMJANRmoOGMmkQav0Zwqkulk5Q= -----END CERTIFICATE-----Generated at Sat Aug 23 15:07:30 2025 by rpki-client