$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf31cae4-6293-38b8-ab84-725a6bd7bc95.roa File: bf31cae4-6293-38b8-ab84-725a6bd7bc95.roa (raw, json) Hash identifier: oqOKUylSvjewlRXW8oikVusHxImbpDKrlWa2qjro/74= Subject key identifier: AF:B4:D1:1B:48:16:D4:D5:81:37:7D:E5:FB:17:AC:A5:7B:CA:22:77 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D1247937BE64405CEC2E10 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf31cae4-6293-38b8-ab84-725a6bd7bc95.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 168.143.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:24:79:37:be:64:40:5c:ec:2e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=cdb70e16-bdd7-4444-8320-bb0efe1d0cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:dd:5b:f4:0b:3f:ae:dd:98:2c:9d:bb:9d: 1f:f5:9a:82:0f:f6:4f:a6:26:6e:f2:73:d1:62:28: 33:6f:8f:4e:51:7d:6e:f8:e9:ff:a3:f1:4f:a4:4d: 3f:bc:75:ab:64:db:6a:d4:20:f8:75:6e:4f:3b:f6: 68:d4:74:8a:0f:5d:60:f8:0d:e7:f4:83:cd:b6:33: 21:d2:45:87:78:a6:5f:a4:2e:a6:d9:de:de:73:e8: 73:c3:ee:37:3c:c2:e1:be:55:97:68:ec:82:0e:7a: c5:cf:eb:5f:d0:0e:4d:17:76:8e:36:71:66:96:db: 09:52:7e:d3:6e:50:bf:f1:08:04:7b:f3:06:b2:1b: 35:0d:b3:48:8d:6d:05:a5:c0:8b:fd:51:0a:6f:90: b5:78:78:d4:8a:ed:2b:ce:91:a7:74:72:23:67:68: cc:3a:35:f5:97:14:46:ff:fb:92:2e:9c:a0:e5:a2: d2:4b:96:ef:e6:c8:e8:91:fd:97:1f:4d:c6:de:d7: 50:cb:9a:2e:8f:c0:6e:dc:6a:9c:46:1d:08:d1:8c: 98:d3:eb:f8:99:0d:15:bd:d5:3d:56:39:35:e6:6d: 2f:06:45:0c:98:82:89:c9:45:97:bd:1b:80:ff:00: 6d:bd:ef:2c:70:0c:b2:4a:da:38:f9:61:fa:6f:dd: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B4:D1:1B:48:16:D4:D5:81:37:7D:E5:FB:17:AC:A5:7B:CA:22:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf31cae4-6293-38b8-ab84-725a6bd7bc95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:bf:36:b6:24:f8:dc:bb:e9:25:92:1f:ae:e5:91:5d:5f:32: d2:a9:6d:79:21:2e:6c:ba:db:5b:23:7c:63:80:ba:ad:d1:be: 68:16:ed:9c:11:08:cf:af:16:27:d4:da:83:b1:8a:22:ab:16: 60:3d:56:1f:65:4e:aa:ab:cb:9c:aa:80:d7:78:f9:3f:d5:f1: 26:e2:4f:df:44:51:38:bf:8f:8d:e1:ca:b7:34:77:0f:81:a3: d6:9c:d4:c4:6d:d5:6b:1b:f6:c3:27:a5:bc:b9:99:22:b2:97: 14:39:15:9b:7c:2a:0d:96:1f:f6:fb:5f:f5:78:c8:49:e9:70: 3f:be:2d:87:3c:22:de:22:48:2f:ff:57:ac:d1:93:cf:57:d2: dd:f9:28:2d:e4:6d:84:4e:1c:f2:e3:37:74:e5:fa:52:c2:41: e2:c5:09:82:05:87:f6:b9:07:05:64:3d:c2:17:b3:db:1a:0c: 01:a4:c3:c6:a3:bf:6a:2a:5d:55:7c:18:37:0b:f8:d6:1a:3e: 54:48:72:1a:2b:36:0e:63:b1:5f:7b:c0:be:f5:77:0d:c4:63: dc:80:5b:49:a9:82:8b:c1:af:9b:ad:d0:7d:db:d3:29:2f:12: f1:5b:a3:04:e2:f0:2b:b4:25:1b:d2:7a:df:09:64:21:50:6b: dc:71:15:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SR5N75kQFzsLhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk Y2RiNzBlMTYtYmRkNy00NDQ0LTgzMjAtYmIwZWZlMWQwY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzibdW/QLP67dmCydu50f9ZqCD/ZPpiZu8nPR Yigzb49OUX1u+On/o/FPpE0/vHWrZNtq1CD4dW5PO/Zo1HSKD11g+A3n9IPNtjMh 0kWHeKZfpC6m2d7ec+hzw+43PMLhvlWXaOyCDnrFz+tf0A5NF3aONnFmltsJUn7T blC/8QgEe/MGshs1DbNIjW0FpcCL/VEKb5C1eHjUiu0rzpGndHIjZ2jMOjX1lxRG //uSLpyg5aLSS5bv5sjokf2XH03G3tdQy5ouj8Bu3GqcRh0I0YyY0+v4mQ0VvdU9 Vjk15m0vBkUMmIKJyUWXvRuA/wBtve8scAyySto4+WH6b92dyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+00RtIFtTVgTd95fsXrKV7yiJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmYzMWNhZTQtNjI5My0z OGI4LWFiODQtNzI1YTZiZDdiYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqI/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq/NrYk+Ny76SWSH67lkV1fMtKpbXkhLmy621sjfGOAuq3RvmgW7ZwR CM+vFifU2oOxiiKrFmA9Vh9lTqqry5yqgNd4+T/V8SbiT99EUTi/j43hyrc0dw+B o9ac1MRt1Wsb9sMnpby5mSKylxQ5FZt8Kg2WH/b7X/V4yEnpcD++LYc8It4iSC// V6zRk89X0t35KC3kbYROHPLjN3Tl+lLCQeLFCYIFh/a5BwVkPcIXs9saDAGkw8aj v2oqXVV8GDcL+NYaPlRIchorNg5jsV97wL71dw3EY9yAW0mpgovBr5ut0H3b0ykv EvFbowTi8Cu0JRvSet8JZCFQa9xxFV4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:24:35 2025 by rpki-client