$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9617c6b9-4be1-3809-a3a7-4ff0291a730f.roa File: 9617c6b9-4be1-3809-a3a7-4ff0291a730f.roa (raw, json) Hash identifier: e8rqLn9/0RuV5N4G/q3kMTuVXyEX1IIt7H7SIQKnFuA= Subject key identifier: 6F:76:1C:B5:FC:10:0C:3D:5D:65:8F:C5:CE:0F:E9:B9:D0:73:F1:00 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D1251E96E03314EE180900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9617c6b9-4be1-3809-a3a7-4ff0291a730f.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 1225 IP address blocks: 157.238.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:25:1e:96:e0:33:14:ee:18:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=f7317a95-ca68-4f8c-bc75-55416bbb6eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:8c:f1:f4:32:a3:9b:e8:f1:81:45:16:2a: cf:ba:57:bd:5e:7b:85:61:65:2e:b1:04:8d:ee:a7: f0:6a:b9:48:76:95:b4:10:bc:95:c2:49:94:2e:e5: a1:48:88:d3:ef:3f:8e:2d:70:be:b4:64:05:c7:6a: 3b:0b:1d:1e:7b:e3:ff:6b:1f:15:36:47:75:92:94: 74:cf:db:c0:2c:1f:20:33:13:8d:dc:07:64:32:32: 8e:66:cc:9d:97:c5:19:64:98:c3:8e:63:fb:1e:eb: 67:10:a8:79:0e:82:4c:86:72:ba:81:00:22:8f:08: 70:75:36:c7:df:71:45:ef:44:e2:1c:ad:87:8e:8e: fc:99:0c:70:d5:95:5c:ac:f9:a2:f9:7a:a6:87:34: 3c:d8:5a:52:08:87:d9:88:45:16:a6:cf:2f:8d:5c: a1:19:48:d0:b7:1f:fc:c7:8f:50:0d:fa:5d:8d:ba: cd:95:4a:22:49:47:e1:0e:da:61:7a:0d:89:0c:f3: 7d:6d:fd:f6:9e:0b:e1:91:f9:c6:b9:3a:7d:54:35: 0d:b5:78:12:36:6d:75:d6:24:80:9d:51:3a:a7:7c: 31:34:b5:74:6e:dd:e0:fa:97:b8:d3:ad:d4:1e:a0: 30:48:38:26:d6:67:c8:29:2c:c2:18:ae:9f:3d:06: e8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:76:1C:B5:FC:10:0C:3D:5D:65:8F:C5:CE:0F:E9:B9:D0:73:F1:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9617c6b9-4be1-3809-a3a7-4ff0291a730f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 157.238.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:34:9f:ec:bd:22:66:ec:c8:fb:cc:98:db:28:40:2b:6c:5c: ba:bf:ac:87:32:0f:1f:de:54:43:e4:95:71:8b:db:9d:b1:e2: 52:dc:42:6e:b5:6a:a3:d6:e9:82:a6:89:27:0e:12:4b:c3:b4: 23:96:16:db:74:a9:a7:a1:70:d2:26:17:a3:18:fe:eb:5a:c5: be:30:e2:1c:56:ca:ea:a7:b2:11:21:84:fc:8d:f6:04:72:cf: 4a:dc:a2:cd:d9:b8:6c:01:08:02:02:72:da:21:7e:ef:6a:cc: 7e:0f:f8:a5:29:a3:c2:39:30:c9:19:ba:92:fb:67:16:35:f4: fd:c2:67:32:95:7f:7a:e1:5e:05:d4:12:82:ca:58:2b:57:04: ff:55:20:3d:ed:2f:6c:f3:5f:72:df:41:05:c3:34:20:5a:d2: 73:9a:58:0d:b4:84:c4:08:70:de:7e:31:bb:e8:40:cd:79:90: 84:20:b9:ef:8a:cf:a1:11:de:6a:b3:21:a8:84:03:72:23:f5: 35:45:c8:76:14:92:7f:bb:2f:10:12:09:03:23:87:ab:f6:b7: de:c2:13:9a:25:f8:a9:a2:e8:8f:86:b2:58:17:c7:08:8a:b5: b6:81:b8:a1:71:41:0c:48:b9:4d:82:3d:6f:cf:10:de:ba:47: e5:ac:cf:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SUeluAzFO4YCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZjczMTdhOTUtY2E2OC00ZjhjLWJjNzUtNTU0MTZiYmI2ZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9CM8fQyo5vo8YFFFirPule9XnuFYWUusQSN 7qfwarlIdpW0ELyVwkmULuWhSIjT7z+OLXC+tGQFx2o7Cx0ee+P/ax8VNkd1kpR0 z9vALB8gMxON3AdkMjKOZsydl8UZZJjDjmP7HutnEKh5DoJMhnK6gQAijwhwdTbH 33FF70TiHK2Hjo78mQxw1ZVcrPmi+XqmhzQ82FpSCIfZiEUWps8vjVyhGUjQtx/8 x49QDfpdjbrNlUoiSUfhDtpheg2JDPN9bf32ngvhkfnGuTp9VDUNtXgSNm111iSA nVE6p3wxNLV0bt3g+pe4063UHqAwSDgm1mfIKSzCGK6fPQbomwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG92HLX8EAw9XWWPxc4P6bnQc/EAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTYxN2M2YjktNGJlMS0z ODA5LWEzYTctNGZmMDI5MWE3MzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE0n+y9ImbsyPvMmNsoQCtsXLq/rIcyDx/eVEPklXGL252x4lLcQm61 aqPW6YKmiScOEkvDtCOWFtt0qaehcNImF6MY/utaxb4w4hxWyuqnshEhhPyN9gRy z0rcos3ZuGwBCAICctohfu9qzH4P+KUpo8I5MMkZupL7ZxY19P3CZzKVf3rhXgXU EoLKWCtXBP9VID3tL2zzX3LfQQXDNCBa0nOaWA20hMQIcN5+MbvoQM15kIQgue+K z6ER3mqzIaiEA3Ij9TVFyHYUkn+7LxASCQMjh6v2t97CE5ol+Kmi6I+GslgXxwiK tbaBuKFxQQxIuU2CPW/PEN66R+Wsz8I= -----END CERTIFICATE-----Generated at Sat Aug 23 16:54:49 2025 by rpki-client