$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a8f7721c-c3da-35ff-aeaf-0713728b19b1.roa File: a8f7721c-c3da-35ff-aeaf-0713728b19b1.roa (raw, json) Hash identifier: g7YY4lB1uivfRN0np14jXIGLSKqWOLOd9R9xAnMM4Qc= Subject key identifier: E3:C7:DC:D4:BF:7C:26:0A:72:B1:8C:94:F5:FE:2E:58:0C:7A:12:62 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B3C51B4AF0C9B69C8EE72BC00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a8f7721c-c3da-35ff-aeaf-0713728b19b1.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 400427 IP address blocks: 204.1.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b4:af:0c:9b:69:c8:ee:72:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=2ff21ca3-bd46-4c24-96c0-9f7a5bb1e79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ae:56:a5:eb:16:35:85:cd:26:60:f7:7a:4e: ba:b7:5d:af:ba:17:69:2f:31:14:6b:37:3d:e3:df: 01:db:62:35:3e:5d:d9:6f:bd:f2:46:61:ca:fb:51: 53:35:be:e5:90:27:4c:f9:63:90:7f:b6:3b:0f:91: 46:82:3c:0d:66:46:04:d9:1d:a0:8e:d2:6a:5a:ce: c8:8c:95:11:0a:8c:28:c9:ef:3f:90:39:8a:34:c7: f4:be:6e:3d:29:af:c2:56:d0:c0:cc:2f:f3:9a:9e: e8:f7:96:2f:11:b3:92:8c:cb:b7:fd:22:10:1a:c0: 40:25:52:00:d3:39:2a:e6:6a:af:1a:64:72:42:d3: 26:ed:67:e4:42:9a:b2:69:b7:be:c8:af:1c:15:92: f8:32:52:b3:b2:af:4d:12:b8:78:c9:a6:8a:a1:d5: 4d:7e:95:28:ff:cd:1f:00:84:00:28:5a:38:b5:57: ed:27:14:2e:df:f1:d7:3c:f9:92:d2:f7:78:55:0e: 40:d3:a7:7c:00:54:b7:cd:d7:2a:3b:02:d7:da:55: 77:0e:8c:b3:30:9a:ec:cf:f7:96:fd:a7:fb:17:ea: db:22:06:49:38:bf:a0:2a:08:ac:64:88:52:03:28: 43:0b:91:62:08:a7:0d:ad:27:65:2a:0a:e3:e7:0e: 74:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C7:DC:D4:BF:7C:26:0A:72:B1:8C:94:F5:FE:2E:58:0C:7A:12:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a8f7721c-c3da-35ff-aeaf-0713728b19b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.1.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b9:98:21:50:2c:06:8e:e6:31:93:0c:0c:4f:6d:c0:ae:0a: 09:d0:1c:5d:4b:08:13:2b:7f:38:56:37:52:c0:28:ae:60:4b: d9:0f:a7:80:be:d0:2b:7d:51:bd:3d:f0:c4:8b:54:74:13:80: 63:ec:00:5f:b4:d0:72:21:8e:68:38:e2:b4:53:e5:13:a5:9f: 4b:22:fd:81:7d:26:d4:9a:af:41:a6:7e:09:91:39:f0:24:39: c9:6e:b7:80:51:23:3d:a5:4c:65:0d:6d:eb:1c:51:2d:08:d6: 38:74:18:4c:3a:4b:81:b3:b9:8e:6a:5a:be:2d:20:a5:64:3e: d6:e0:8d:c0:75:40:c3:5e:a8:be:5c:e4:00:25:ce:30:1c:0c: db:2d:97:6c:c4:63:24:cd:70:cf:4d:82:ff:10:3e:80:65:fe: c8:00:32:42:ce:54:03:9f:d1:6d:7a:11:cb:b4:8b:d9:7e:2d: 8c:64:06:de:9b:39:7d:e3:ac:05:91:4e:d3:f3:6e:2e:de:ec: ff:87:90:e4:37:24:1d:9a:51:dc:8f:c1:7f:ac:3d:d0:df:4b: 8d:8f:93:86:20:59:4d:e3:37:ad:9e:ee:e3:98:90:92:56:03: 69:8a:e9:e0:58:7f:9b:2e:f0:18:6d:13:fd:5d:72:52:2e:e3: b0:ca:3e:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbSvDJtpyO5yvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk MmZmMjFjYTMtYmQ0Ni00YzI0LTk2YzAtOWY3YTViYjFlNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q5WpesWNYXNJmD3ek66t12vuhdpLzEUazc9 498B22I1Pl3Zb73yRmHK+1FTNb7lkCdM+WOQf7Y7D5FGgjwNZkYE2R2gjtJqWs7I jJURCowoye8/kDmKNMf0vm49Ka/CVtDAzC/zmp7o95YvEbOSjMu3/SIQGsBAJVIA 0zkq5mqvGmRyQtMm7WfkQpqyabe+yK8cFZL4MlKzsq9NErh4yaaKodVNfpUo/80f AIQAKFo4tVftJxQu3/HXPPmS0vd4VQ5A06d8AFS3zdcqOwLX2lV3DoyzMJrsz/eW /af7F+rbIgZJOL+gKgisZIhSAyhDC5FiCKcNrSdlKgrj5w50twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPH3NS/fCYKcrGMlPX+LlgMehJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYThmNzcyMWMtYzNkYS0z NWZmLWFlYWYtMDcxMzcyOGIxOWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzAEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS5mCFQLAaO5jGTDAxPbcCuCgnQHF1LCBMrfzhWN1LAKK5gS9kPp4C+ 0Ct9Ub098MSLVHQTgGPsAF+00HIhjmg44rRT5ROln0si/YF9JtSar0GmfgmROfAk Oclut4BRIz2lTGUNbescUS0I1jh0GEw6S4GzuY5qWr4tIKVkPtbgjcB1QMNeqL5c 5AAlzjAcDNstl2zEYyTNcM9Ngv8QPoBl/sgAMkLOVAOf0W16Ecu0i9l+LYxkBt6b OX3jrAWRTtPzbi7e7P+HkOQ3JB2aUdyPwX+sPdDfS42Pk4YgWU3jN62e7uOYkJJW A2mK6eBYf5su8BhtE/1dclIu47DKPv4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:50:53 2025 by rpki-client