$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd8ca1c3-476e-30e3-8ddf-9863dab53845.roa File: cd8ca1c3-476e-30e3-8ddf-9863dab53845.roa (raw, json) Hash identifier: L7/2PKcUUWEUUH/sYtBi2hXNFAWSvCNtFzvdJc6wPaM= Subject key identifier: 73:1A:19:0A:37:FC:6E:7F:93:69:A7:CC:43:30:AB:36:74:A8:5C:79 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584ADD667EF67C066AD4888FFBB0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd8ca1c3-476e-30e3-8ddf-9863dab53845.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 198.173.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:7e:f6:7c:06:6a:d4:88:8f:fb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=f194ab8d-3c16-402c-be92-bb0659e3a9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:72:ce:06:4c:9f:57:eb:18:80:26:97:94: 92:81:3d:31:0a:34:c2:13:20:36:48:1a:d9:f4:a3: 21:e2:3b:16:9c:59:83:0f:60:f8:bb:f8:ee:bd:aa: 05:8d:29:84:b9:7f:47:bd:f8:7e:80:1a:c8:11:17: 75:dc:c8:12:8a:d4:4e:e7:b3:dd:d1:51:fc:c6:20: a2:a3:e0:98:9e:aa:a9:47:cd:91:17:7b:78:ba:af: 02:e3:18:21:19:b3:a0:88:7c:a6:95:61:d0:d0:b3: 24:ac:98:d7:73:85:fa:13:a8:5d:de:80:03:ec:05: f3:59:3d:9b:63:4f:8f:05:c4:a1:95:b0:d9:f5:a5: 80:08:99:18:c4:27:e5:9c:71:a2:58:23:da:4d:7f: 07:90:c9:d2:25:af:a9:f6:ba:39:92:e1:19:56:dd: 4b:1f:81:bd:f9:54:80:06:15:45:87:42:bb:e8:c4: 41:04:78:cb:3e:5f:0b:56:26:88:4b:ab:48:63:2c: 49:93:5c:a3:57:23:23:62:f5:a9:98:fb:ba:2f:0a: 15:f8:cc:71:5d:b2:88:a7:3e:8c:7f:3f:44:1d:87: ff:1e:b5:f4:23:3a:08:3b:91:84:2b:22:62:b6:25: 35:c2:9c:4d:d7:b2:64:79:bf:b9:9a:cc:17:33:d5: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1A:19:0A:37:FC:6E:7F:93:69:A7:CC:43:30:AB:36:74:A8:5C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd8ca1c3-476e-30e3-8ddf-9863dab53845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.173.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e2:dc:07:af:b3:e7:eb:af:c2:67:6b:c3:05:c5:c0:50:a0: d6:db:12:7a:a1:d8:b0:d8:4e:b5:2a:72:cd:6c:20:da:fb:70: 97:6f:aa:8c:23:c3:67:33:fd:bd:96:5f:5e:5f:71:15:c2:45: 7a:1b:cd:65:34:5d:6f:ed:10:8b:ec:77:23:d9:24:0e:dd:bb: 0c:35:01:ca:95:51:05:1f:43:52:6f:9d:f6:97:9e:20:34:8c: e5:93:22:32:d2:a5:74:29:cb:d2:2b:06:69:ce:8c:1c:94:fa: 0e:ee:89:10:42:71:c3:d0:06:10:45:85:b7:c0:30:c3:12:a2: b6:82:ba:47:f7:90:94:bf:c9:52:6d:d7:73:e1:5f:10:9c:66: a5:01:8b:7b:d9:26:b0:40:29:18:1a:b9:4c:5e:a8:ca:18:1c: 9d:20:7f:58:af:db:3a:a0:c3:59:88:5e:1e:4c:f7:80:74:fe: 8c:19:b5:6e:9e:b4:1b:bc:73:56:92:b5:4d:ef:7b:4c:bf:05: 0c:66:35:95:50:7f:4b:79:e8:87:b4:54:25:42:ee:ce:97:12: 1e:fa:00:f9:01:fe:b7:d2:17:fb:a2:34:d8:8e:64:ee:b0:25: 77:f2:bb:45:d8:16:05:9a:b2:ee:0b:47:55:fb:8a:81:97:20: b6:12:9a:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZn72fAZq1IiP+7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ZjE5NGFiOGQtM2MxNi00MDJjLWJlOTItYmIwNjU5ZTNhOWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdlyzgZMn1frGIAml5SSgT0xCjTCEyA2SBrZ 9KMh4jsWnFmDD2D4u/juvaoFjSmEuX9Hvfh+gBrIERd13MgSitRO57Pd0VH8xiCi o+CYnqqpR82RF3t4uq8C4xghGbOgiHymlWHQ0LMkrJjXc4X6E6hd3oAD7AXzWT2b Y0+PBcShlbDZ9aWACJkYxCflnHGiWCPaTX8HkMnSJa+p9ro5kuEZVt1LH4G9+VSA BhVFh0K76MRBBHjLPl8LViaIS6tIYyxJk1yjVyMjYvWpmPu6LwoV+MxxXbKIpz6M fz9EHYf/HrX0IzoIO5GEKyJitiU1wpxN17Jkeb+5mswXM9WI1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMaGQo3/G5/k2mnzEMwqzZ0qFx5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2Q4Y2ExYzMtNDc2ZS0z MGUzLThkZGYtOTg2M2RhYjUzODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxq2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLi3Aevs+frr8Jna8MFxcBQoNbbEnqh2LDYTrUqcs1sINr7cJdvqowj w2cz/b2WX15fcRXCRXobzWU0XW/tEIvsdyPZJA7duww1AcqVUQUfQ1JvnfaXniA0 jOWTIjLSpXQpy9IrBmnOjByU+g7uiRBCccPQBhBFhbfAMMMSoraCukf3kJS/yVJt 13PhXxCcZqUBi3vZJrBAKRgauUxeqMoYHJ0gf1iv2zqgw1mIXh5M94B0/owZtW6e tBu8c1aStU3ve0y/BQxmNZVQf0t56Ie0VCVC7s6XEh76APkB/rfSF/uiNNiOZO6w JXfyu0XYFgWasu4LR1X7ioGXILYSmuo= -----END CERTIFICATE-----Generated at Sat Aug 23 19:50:41 2025 by rpki-client