$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8167820f-dba9-3202-8768-7ee9b0e5f7d2.roa File: 8167820f-dba9-3202-8768-7ee9b0e5f7d2.roa (raw, json) Hash identifier: Hoj55Mgd0D6kGK1+J+Kt/bc1bcnIREgDgEtNNTdaVG8= Subject key identifier: 1B:A3:37:B9:A8:36:1D:8A:A6:0F:CA:8C:6A:85:C9:EC:C4:A2:8B:6E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584ADD667F42EF26042EDF08F000 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8167820f-dba9-3202-8768-7ee9b0e5f7d2.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 204.2.164.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:7f:42:ef:26:04:2e:df:08:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=819ae697-83a4-472b-ba3d-bae87c3adff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:3e:f6:5e:07:c6:54:7f:45:f8:69:34:e3: 7c:ce:52:ae:01:d7:82:8a:f0:07:b3:25:73:7d:49: 7c:0f:04:69:aa:90:ab:1f:e5:5d:95:88:e3:f4:09: cb:c9:a2:5a:9b:0c:ed:32:68:d9:55:b4:84:1c:4a: 5c:29:d4:bf:9d:6b:24:ae:eb:c2:45:f7:da:3e:78: 12:3e:1f:1d:b2:21:23:93:c5:d7:9b:43:08:20:0a: 5e:c3:f4:76:7f:92:2a:c8:16:53:8f:3b:9e:0a:d7: 8b:39:8d:07:f1:b1:c8:02:15:ad:22:2c:70:43:fb: 4b:e6:f1:c3:90:fa:97:e8:b3:35:b6:62:25:f2:74: 04:71:11:c6:da:8b:54:7d:ff:d0:52:34:50:46:33: 0c:79:ef:cd:d1:19:e5:5a:cb:65:9b:6c:25:24:a6: 61:7d:7d:70:72:fc:b9:e4:1a:43:c7:8f:4d:38:ba: f8:e1:aa:c2:dd:c9:43:b4:f9:ea:10:7f:5b:58:f5: 8e:65:62:f3:75:e5:99:bf:16:20:de:80:ef:16:d0: 6b:71:e6:a7:4d:ec:cf:f3:67:07:40:50:a2:ac:c2: c9:b8:a6:42:85:a5:e7:bc:58:bd:66:23:7c:26:de: c6:3d:82:3f:27:d6:49:50:e8:e8:05:a3:2a:be:b8: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A3:37:B9:A8:36:1D:8A:A6:0F:CA:8C:6A:85:C9:EC:C4:A2:8B:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8167820f-dba9-3202-8768-7ee9b0e5f7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f3:eb:9e:16:8e:10:5f:2a:ae:20:af:3b:b4:a8:cc:6a:de: fa:2d:a0:72:95:36:24:28:1c:08:53:9e:78:ad:6e:bc:25:94: f8:04:14:d4:c8:8c:1f:97:10:e3:a4:4d:27:94:be:66:dd:2c: 0a:bc:93:35:d5:bc:3e:63:ae:2a:20:07:5d:59:ee:24:70:1f: 7a:0d:a8:c1:fa:fb:e8:f4:2d:6b:c8:24:f9:92:ae:c4:74:89: bf:37:80:2c:45:91:cb:a9:15:49:3c:ee:dc:27:fb:60:32:e2: 13:33:3c:c2:18:07:3c:56:e8:a3:af:b7:93:f7:61:9d:e9:64: 99:49:02:b2:21:37:71:11:d0:25:fe:c1:8c:6c:f2:30:4d:0a: 4f:ea:d6:ba:7b:e6:93:40:c9:22:d6:a7:26:3c:82:e7:dc:df: fa:6a:c8:a2:4f:0a:ce:11:95:fb:15:cd:c6:4b:c5:ee:6a:97: e3:42:e1:34:26:35:79:80:5c:2b:59:c0:0e:d4:73:ab:e1:5f: 0d:5f:8d:df:18:09:7b:f8:73:e4:07:e2:c0:08:e3:e5:73:1f: fb:30:43:18:de:84:63:a6:06:10:f9:b8:1a:9d:4b:0e:fb:d0: b2:7f:dd:40:70:9b:26:37:74:31:64:18:2a:da:52:ad:1e:45: aa:6b:71:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZn9C7yYELt8I8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ODE5YWU2OTctODNhNC00NzJiLWJhM2QtYmFlODdjM2FkZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY4+9l4HxlR/RfhpNON8zlKuAdeCivAHsyVz fUl8DwRpqpCrH+VdlYjj9AnLyaJamwztMmjZVbSEHEpcKdS/nWskruvCRffaPngS Ph8dsiEjk8XXm0MIIApew/R2f5IqyBZTjzueCteLOY0H8bHIAhWtIixwQ/tL5vHD kPqX6LM1tmIl8nQEcRHG2otUff/QUjRQRjMMee/N0RnlWstlm2wlJKZhfX1wcvy5 5BpDx49NOLr44arC3clDtPnqEH9bWPWOZWLzdeWZvxYg3oDvFtBrceanTezP82cH QFCirMLJuKZChaXnvFi9ZiN8Jt7GPYI/J9ZJUOjoBaMqvrh9EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBujN7moNh2Kpg/KjGqFyezEootuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODE2NzgyMGYtZGJhOS0z MjAyLTg3NjgtN2VlOWIwZTVmN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3z654WjhBfKq4grzu0qMxq3votoHKVNiQoHAhTnnitbrwllPgEFNTI jB+XEOOkTSeUvmbdLAq8kzXVvD5jriogB11Z7iRwH3oNqMH6++j0LWvIJPmSrsR0 ib83gCxFkcupFUk87twn+2Ay4hMzPMIYBzxW6KOvt5P3YZ3pZJlJArIhN3ER0CX+ wYxs8jBNCk/q1rp75pNAySLWpyY8gufc3/pqyKJPCs4RlfsVzcZLxe5ql+NC4TQm NXmAXCtZwA7Uc6vhXw1fjd8YCXv4c+QH4sAI4+VzH/swQxjehGOmBhD5uBqdSw77 0LJ/3UBwmyY3dDFkGCraUq0eRaprcaY= -----END CERTIFICATE-----Generated at Sat Aug 23 16:56:17 2025 by rpki-client