$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4234588-1140-311f-b4ce-5a6285415779.roa File: d4234588-1140-311f-b4ce-5a6285415779.roa (raw, json) Hash identifier: xC5NE/cs/3QKPY2/5Lyqxrbj5cRLIiC2FobGxrqmtv0= Subject key identifier: 38:85:76:E8:B6:F2:D7:6D:A7:94:A5:B8:F4:51:29:88:F1:B8:D9:2F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D1509DE07DA50566757400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4234588-1140-311f-b4ce-5a6285415779.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 22691 IP address blocks: 204.141.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:50:9d:e0:7d:a5:05:66:75:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=8052330b-c9f5-4749-8b68-2618672fc360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:7c:d7:1e:0b:19:40:d0:3d:bd:4a:d9:bc: 7c:99:52:3a:49:2d:53:02:aa:9b:d0:8b:63:aa:3a: c7:5c:d3:9c:e6:82:ce:e2:05:35:cc:be:18:64:eb: 53:bb:da:ff:52:74:a7:40:0a:92:e9:e5:eb:0e:f4: 82:1b:1a:95:71:95:e5:c0:ea:40:41:59:8d:94:22: 0a:74:b8:e0:89:80:b1:29:7e:a2:aa:c3:a7:91:bc: d5:61:3e:2d:3e:21:e2:ed:e8:eb:39:0b:0f:32:b1: 25:3d:eb:31:4a:0c:c7:42:85:42:ab:46:61:75:aa: cd:60:75:fd:34:66:85:77:78:56:bb:ae:e0:a6:45: d0:2e:d4:52:cd:e3:06:8f:14:ea:6f:66:59:fe:0e: 2b:79:05:79:6d:a4:22:9f:e0:9c:b5:d8:59:01:b0: c0:58:d4:cf:41:43:a9:eb:a7:a1:2b:66:f7:20:6e: b7:b5:42:12:97:93:29:a2:7e:78:9a:33:cc:c1:c5: b3:bd:f8:c9:bb:26:c3:ee:ae:91:5f:e7:62:c7:40: 3b:eb:d3:9e:b7:a6:f1:95:87:1e:de:82:f5:4d:c8: 20:9b:ff:35:62:11:6e:ba:6a:e9:ca:42:e7:21:25: b6:55:e3:96:2f:99:d5:15:83:44:5c:e6:c7:7c:77: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:85:76:E8:B6:F2:D7:6D:A7:94:A5:B8:F4:51:29:88:F1:B8:D9:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4234588-1140-311f-b4ce-5a6285415779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:ca:d3:a0:7c:a0:51:10:4d:3c:44:71:34:82:e2:42:c8:3e: 71:6a:41:cd:40:e3:52:ac:5a:85:be:e6:4a:f0:f5:a4:15:c7: 33:8a:03:fa:94:7e:d5:35:1a:eb:a9:58:49:84:cb:29:7e:f0: d1:0a:9f:42:c9:ef:ee:1f:d6:29:d2:bc:a0:43:25:5c:e1:5c: b6:12:10:3e:e0:d1:c1:f7:c6:d9:7f:77:b9:9c:b8:5c:bc:d0: 32:9f:f8:cb:0b:ad:67:8e:82:27:24:6b:22:60:f4:ec:19:d6: 9f:24:98:96:65:33:e4:07:79:aa:d7:61:26:4a:da:85:8c:75: 4d:4a:65:48:9d:38:28:8e:03:e4:9d:c4:b0:62:b2:eb:cc:47: 4a:7f:e4:01:eb:bb:ca:93:1f:90:ae:f7:10:ce:e1:23:2a:48: 2b:17:dd:5a:28:96:e4:df:0b:0f:63:5b:f2:37:5c:f8:35:48: 6e:61:07:69:87:2f:f8:05:aa:79:ac:c1:9e:b2:b1:94:5f:cb: b7:1e:9f:6b:b1:cd:37:02:1d:50:d7:85:51:df:33:de:b0:89: 95:6c:56:9b:13:34:c6:b0:83:0d:c8:94:67:6b:6f:9c:1f:3d: 7f:43:30:f1:e6:9c:4c:90:69:fd:0a:dc:cb:31:84:8a:24:6a: d6:da:84:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0VCd4H2lBWZ1dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ODA1MjMzMGItYzlmNS00NzQ5LThiNjgtMjYxODY3MmZjMzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaJ81x4LGUDQPb1K2bx8mVI6SS1TAqqb0Itj qjrHXNOc5oLO4gU1zL4YZOtTu9r/UnSnQAqS6eXrDvSCGxqVcZXlwOpAQVmNlCIK dLjgiYCxKX6iqsOnkbzVYT4tPiHi7ejrOQsPMrElPesxSgzHQoVCq0ZhdarNYHX9 NGaFd3hWu67gpkXQLtRSzeMGjxTqb2ZZ/g4reQV5baQin+CctdhZAbDAWNTPQUOp 66ehK2b3IG63tUISl5Mpon54mjPMwcWzvfjJuybD7q6RX+dix0A769Oet6bxlYce 3oL1Tcggm/81YhFuumrpykLnISW2VeOWL5nVFYNEXObHfHeM+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiFdui28tdtp5SluPRRKYjxuNkvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDQyMzQ1ODgtMTE0MC0z MTFmLWI0Y2UtNWE2Mjg1NDE1Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzI0jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTK06B8oFEQTTxEcTSC4kLIPnFqQc1A41KsWoW+5krw9aQVxzOKA/qU ftU1GuupWEmEyyl+8NEKn0LJ7+4f1inSvKBDJVzhXLYSED7g0cH3xtl/d7mcuFy8 0DKf+MsLrWeOgickayJg9OwZ1p8kmJZlM+QHearXYSZK2oWMdU1KZUidOCiOA+Sd xLBisuvMR0p/5AHru8qTH5Cu9xDO4SMqSCsX3VooluTfCw9jW/I3XPg1SG5hB2mH L/gFqnmswZ6ysZRfy7cen2uxzTcCHVDXhVHfM96wiZVsVpsTNMawgw3IlGdrb5wf PX9DMPHmnEyQaf0K3MsxhIokatbahGk= -----END CERTIFICATE-----Generated at Sat Aug 23 20:18:24 2025 by rpki-client