$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa File: c0815d17-83a5-3543-8437-c33f765a2be5.roa (raw, json) Hash identifier: Ar+tuDA56cafr8r3KRg2fJB0lnb3NvkiDSIDNhrZEtQ= Subject key identifier: E6:E6:1D:BE:C1:0D:C7:A7:D0:55:CA:48:A5:59:A3:1E:F8:9C:BC:61 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D1237CA0629F1B7D5FC880 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 1225 IP address blocks: 198.64.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:23:7c:a0:62:9f:1b:7d:5f:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=a635a422-c6b5-4564-b8b4-afd4638bfcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:50:21:b0:b7:32:5d:32:87:36:45:9c:09:9b: dc:a2:b9:c5:8f:94:0b:a7:83:c9:dc:e7:50:f6:d5: 4a:7e:db:9a:4b:32:dc:65:fe:50:0d:c5:12:c6:16: 9d:32:10:e5:04:c9:eb:6a:75:71:18:1c:e1:94:db: db:30:03:1e:67:58:08:a7:88:64:dc:6f:2b:e7:8a: 67:37:6f:c2:4e:b5:71:de:f0:09:a2:90:b8:f9:c8: 61:86:63:14:46:d7:9a:71:83:88:6f:86:34:b3:95: 29:56:79:0c:0a:8b:22:00:15:c2:80:16:d5:61:e9: ea:76:5e:10:d4:0d:28:06:81:ca:00:db:ab:fd:25: f1:f4:89:2a:c4:a3:94:b0:00:5f:4d:b8:6d:e7:64: bd:8e:2f:10:84:af:3b:fa:aa:f2:b0:96:95:f8:34: f7:ab:74:be:a9:f1:3d:99:e7:74:36:4e:92:8d:29: 1f:15:78:63:52:1b:41:59:a3:67:1a:51:81:fd:b0: a8:ab:c7:c5:f1:80:5b:e3:24:21:b5:2f:8a:74:16: 0f:77:f2:30:52:d6:4e:58:0f:dc:02:eb:20:33:cf: fe:6c:6b:f5:4d:8e:77:5f:7e:f0:49:a1:29:26:f1: d8:d7:8e:db:9f:e6:89:d6:f1:a2:fe:18:87:c3:3a: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E6:1D:BE:C1:0D:C7:A7:D0:55:CA:48:A5:59:A3:1E:F8:9C:BC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.64.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:2e:96:b1:ba:de:18:af:a0:41:99:d3:08:0e:df:82:b2:20: ce:d2:0a:78:be:36:07:70:c1:01:4c:f6:8c:f4:9b:56:4a:6e: 84:53:af:9c:76:6c:c9:2c:b5:b2:9f:82:43:8c:c6:c1:f9:3a: 43:95:e1:55:86:5d:fd:b9:c2:fc:60:30:a3:17:14:69:f6:c7: 8c:db:83:1b:ac:31:ea:d6:5d:6a:0b:e0:d3:eb:45:72:ae:df: c8:ab:d6:c7:63:2a:0a:93:7a:4d:a3:f8:35:0c:cd:d0:2c:3e: 7c:89:dd:2d:5c:be:fb:56:4d:cb:5c:d3:60:f1:62:79:e8:ac: 15:fe:76:29:6f:1f:78:82:ee:80:46:e4:e5:29:17:90:26:af: bf:37:02:db:bf:45:21:6c:f7:40:32:b6:5f:b1:c3:06:f3:1e: 89:4c:cf:4d:60:58:39:67:19:06:2a:b1:4d:3e:ed:7e:97:62: 29:91:13:5c:8a:43:07:fe:46:e9:e1:e5:12:06:70:2e:07:00: 45:28:ea:b6:07:f4:6c:92:e7:6f:e9:2b:55:d8:90:27:62:20: d5:c4:31:52:08:cf:7e:9c:1e:65:dc:7a:f6:b8:b4:2b:26:ca: 1a:a8:6a:09:35:ef:61:32:86:b9:0a:99:1d:e6:13:cb:a2:28: 4b:0d:11:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SN8oGKfG31fyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YTYzNWE0MjItYzZiNS00NTY0LWI4YjQtYWZkNDYzOGJmY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1AhsLcyXTKHNkWcCZvcornFj5QLp4PJ3OdQ 9tVKftuaSzLcZf5QDcUSxhadMhDlBMnranVxGBzhlNvbMAMeZ1gIp4hk3G8r54pn N2/CTrVx3vAJopC4+chhhmMURteacYOIb4Y0s5UpVnkMCosiABXCgBbVYenqdl4Q 1A0oBoHKANur/SXx9IkqxKOUsABfTbht52S9ji8QhK87+qrysJaV+DT3q3S+qfE9 med0Nk6SjSkfFXhjUhtBWaNnGlGB/bCoq8fF8YBb4yQhtS+KdBYPd/IwUtZOWA/c AusgM8/+bGv1TY53X37wSaEpJvHY147bn+aJ1vGi/hiHwzo46QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObmHb7BDcen0FXKSKVZox74nLxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzA4MTVkMTctODNhNS0z NTQzLTg0MzctYzMzZjc2NWEyYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxkAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQulrG63hivoEGZ0wgO34KyIM7SCni+NgdwwQFM9oz0m1ZKboRTr5x2 bMkstbKfgkOMxsH5OkOV4VWGXf25wvxgMKMXFGn2x4zbgxusMerWXWoL4NPrRXKu 38ir1sdjKgqTek2j+DUMzdAsPnyJ3S1cvvtWTctc02DxYnnorBX+dilvH3iC7oBG 5OUpF5Amr783Atu/RSFs90Aytl+xwwbzHolMz01gWDlnGQYqsU0+7X6XYimRE1yK Qwf+Runh5RIGcC4HAEUo6rYH9GyS52/pK1XYkCdiINXEMVIIz36cHmXceva4tCsm yhqoagk172EyhrkKmR3mE8uiKEsNEXM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:56:16 2025 by rpki-client