$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/85a980f7-1633-31c8-98a3-b870d25c413a.roa File: 85a980f7-1633-31c8-98a3-b870d25c413a.roa (raw, json) Hash identifier: EE0uAKl6CRmi2SCtxFFZTLb2LtcPMthm5u6GOpnDFr8= Subject key identifier: AA:69:B1:3A:94:88:61:1A:7A:6B:62:E3:B3:78:90:F0:D9:C3:0E:2F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584ADD667EE1E6FDFABDAFDBB5C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/85a980f7-1633-31c8-98a3-b870d25c413a.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 198.87.182.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:7e:e1:e6:fd:fa:bd:af:db:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=7d0be7cb-b6b7-43d6-a833-e7ffa2de8167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:92:bc:02:63:8f:cb:7b:c0:8e:6b:f3:45:b8: 50:a0:4d:67:41:1e:00:d4:32:e2:21:ac:c9:59:02: 8b:3b:7b:8e:48:03:6c:bb:ed:99:99:79:66:89:be: b5:53:44:47:16:ea:6f:df:a2:03:f5:90:5b:e0:b8: e8:d5:80:d2:91:26:30:97:02:90:e3:7e:e8:50:dc: 0c:d7:e0:95:91:fb:4d:97:db:16:89:e3:4c:51:cd: 55:e5:a4:3f:76:b9:65:fa:94:65:63:89:26:b5:15: 33:ed:8f:01:12:81:2a:87:71:21:f0:f0:51:df:33: b3:0c:34:b8:81:a1:d4:11:2f:97:c5:12:3b:7f:9d: b9:52:ea:43:c5:d1:30:a9:59:c3:8a:7b:ce:8d:44: 79:fb:7f:53:c2:23:dc:fa:c9:9c:af:a3:57:fb:89: 6f:fd:a8:ef:31:0f:a7:f0:80:6f:37:52:dc:fa:7f: 6e:7c:76:f0:4f:63:c4:06:63:39:ee:28:fa:dd:76: 0a:a5:a3:1f:b8:f7:be:09:7d:8f:19:7a:ca:2c:5b: 1d:7b:e0:2a:69:94:14:3c:54:d4:87:9c:3c:28:c6: 9e:1f:b7:9b:73:72:da:c5:67:18:b8:4a:d8:f9:46: a4:a8:e8:5a:92:38:09:6f:5b:b6:5d:07:2f:a3:42: 0d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:69:B1:3A:94:88:61:1A:7A:6B:62:E3:B3:78:90:F0:D9:C3:0E:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/85a980f7-1633-31c8-98a3-b870d25c413a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.87.182.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:2d:59:5d:72:fc:de:5e:97:79:7a:9f:3a:a1:dd:5b:d2:85: 50:52:2c:dd:dc:27:f8:17:d0:5a:57:46:99:2f:39:33:95:28: 5f:93:29:12:3b:0b:d3:d2:ef:ce:4b:9d:9b:df:4e:49:b5:40: 49:a3:42:9b:22:17:96:dd:94:10:8e:21:2d:5c:4f:8c:2d:91: ce:66:8c:d5:bd:6f:9d:24:cf:6a:53:bb:2a:1f:69:4a:b0:3b: 2b:e0:f3:2f:d5:3a:4d:26:ec:7d:cb:e9:43:1f:a8:e2:13:65: b4:c3:db:17:9c:92:b9:b0:00:af:09:b9:96:f9:7b:00:c9:dd: cc:d9:32:2b:f8:69:48:d0:b9:9a:83:eb:8b:8f:8d:0b:ec:c7: ee:df:dd:ae:91:e2:a9:bb:3a:d8:54:d9:0d:39:d1:cc:17:b6: db:45:32:96:d6:32:63:ce:60:e2:db:24:20:62:a8:e8:31:ed: 11:ee:9c:7d:d4:fd:6c:56:f1:1d:7e:ec:cf:53:8f:80:4d:a7: ed:e5:58:3c:20:de:84:64:66:21:c5:b6:ea:07:14:f5:a4:34: a3:8d:e0:67:02:30:57:98:18:e8:4e:02:f9:a7:6f:de:1b:56: 1d:a5:b5:35:c8:0c:b5:67:ab:b1:9a:ef:3b:33:2e:dc:97:01: 44:44:7c:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErdZn7h5v36va/btcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk N2QwYmU3Y2ItYjZiNy00M2Q2LWE4MzMtZTdmZmEyZGU4MTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppK8AmOPy3vAjmvzRbhQoE1nQR4A1DLiIazJ WQKLO3uOSANsu+2ZmXlmib61U0RHFupv36ID9ZBb4Ljo1YDSkSYwlwKQ437oUNwM 1+CVkftNl9sWieNMUc1V5aQ/drll+pRlY4kmtRUz7Y8BEoEqh3Eh8PBR3zOzDDS4 gaHUES+XxRI7f525UupDxdEwqVnDinvOjUR5+39TwiPc+smcr6NX+4lv/ajvMQ+n 8IBvN1Lc+n9ufHbwT2PEBmM57ij63XYKpaMfuPe+CX2PGXrKLFsde+AqaZQUPFTU h5w8KMaeH7ebc3LaxWcYuErY+UakqOhakjgJb1u2XQcvo0IN3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKppsTqUiGEaemti47N4kPDZww4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODVhOTgwZjctMTYzMy0z MWM4LTk4YTMtYjg3MGQyNWM0MTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHxle2ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbLVldcvzeXpd5ep86od1b0oVQUizd3Cf4F9BaV0aZLzkzlShfkykS OwvT0u/OS52b305JtUBJo0KbIheW3ZQQjiEtXE+MLZHOZozVvW+dJM9qU7sqH2lK sDsr4PMv1TpNJux9y+lDH6jiE2W0w9sXnJK5sACvCbmW+XsAyd3M2TIr+GlI0Lma g+uLj40L7Mfu392ukeKpuzrYVNkNOdHMF7bbRTKW1jJjzmDi2yQgYqjoMe0R7px9 1P1sVvEdfuzPU4+ATaft5Vg8IN6EZGYhxbbqBxT1pDSjjeBnAjBXmBjoTgL5p2/e G1YdpbU1yAy1Z6uxmu87My7clwFERHzm -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:24 2025 by rpki-client