$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa File: da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa (raw, json) Hash identifier: JMdKhlzik/HoyObunxbb5cAqrs/NoU3WA2LiGYVJwcU= Subject key identifier: 10:B9:BF:71:30:67:C9:C2:87:F0:B4:AE:4C:C0:00:F4:C4:14:3C:76 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD9365F033B3A1C2A0412A780 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 397601 IP address blocks: 204.2.56.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5f:03:3b:3a:1c:2a:04:12:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=14c1d537-4823-4e27-8197-c75fe36112c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:96:16:1d:49:c5:3e:42:1f:8e:99:84:e7:84: 63:5f:d9:70:ef:b7:fa:0a:f2:fc:49:6d:f8:52:81: cc:ba:7e:85:a1:ad:a1:49:7f:6b:04:8a:72:be:30: 62:ee:41:fb:f1:36:db:eb:f0:62:4a:ce:6e:88:9c: 04:66:16:88:3c:f8:ad:7a:69:1f:8d:45:ae:f9:42: 24:4b:7a:c7:e8:dd:ce:48:6a:cc:8f:6f:bb:71:dd: 8e:28:2f:33:4e:29:ea:6c:c2:15:d9:d6:d4:6b:b8: e8:39:fc:8b:a6:6c:4b:fc:a1:73:3f:ff:45:fc:4c: c4:a1:4e:cc:82:15:63:50:05:77:2c:ee:cd:31:f3: 16:8f:88:73:fc:97:fd:6d:27:9d:5f:65:99:7c:48: 6a:9d:17:a2:57:25:0c:2a:24:d4:ba:cc:c3:86:3f: fb:01:a4:7c:3d:7e:c2:32:37:69:73:62:1b:90:f6: 42:c0:3f:ea:86:70:a0:26:ee:55:62:56:b3:d3:ce: c9:3f:5d:f3:75:8f:a4:c2:ed:bd:1a:2b:4b:90:22: 7e:f4:88:98:d5:24:39:70:0e:28:53:8a:00:1d:19: ba:f7:0f:71:b3:03:42:01:29:67:ad:15:87:cb:04: 6b:fa:98:35:4b:c6:c3:8a:5c:47:cb:40:f4:84:0b: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B9:BF:71:30:67:C9:C2:87:F0:B4:AE:4C:C0:00:F4:C4:14:3C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.56.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:51:a2:6e:ea:be:bd:14:ef:45:87:fa:e2:72:d3:57:cc:e3: 60:44:4b:85:86:ed:a9:40:f9:2f:85:df:b6:83:02:fa:2a:84: 0a:9e:8f:bd:74:c9:a5:1b:e3:b3:05:14:a2:be:ff:08:ab:be: 31:45:5c:86:11:85:39:ad:90:5e:71:24:76:ee:40:7c:4e:5e: cf:3f:ae:6a:9a:3a:e6:ba:6d:4e:82:77:ca:90:88:10:33:68: e5:c0:c8:b4:9a:24:ca:50:d2:12:b7:18:d3:2f:4a:33:c2:c2: a6:a5:42:cd:1d:0a:6b:41:14:35:2e:6f:c9:fd:71:2f:ce:47: 1b:45:49:32:94:02:7a:76:ef:11:09:b9:10:fa:73:38:72:03: a9:85:f7:4c:2a:6f:fc:5c:d7:22:fa:8d:f4:3d:38:50:c3:12: a5:57:32:14:03:bf:d7:cc:f3:d5:ca:fe:f5:e3:0f:d8:4c:f1: ca:f7:c1:53:10:de:1f:54:d0:3e:c1:6e:97:2a:57:79:4f:79: ad:c3:f1:f6:f0:fb:3e:a3:77:e5:4c:e4:4c:5d:e3:c5:20:5e: 3c:50:50:4c:da:ab:9a:01:69:5c:9a:0f:69:5c:90:59:fa:0a: 7f:25:66:62:c4:0d:d7:58:ec:5c:c6:c0:6c:eb:2d:24:a9:5c: a8:ae:18:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErZNl8DOzocKgQSp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MTRjMWQ1MzctNDgyMy00ZTI3LTgxOTctYzc1ZmUzNjExMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5YWHUnFPkIfjpmE54RjX9lw77f6CvL8SW34 UoHMun6Foa2hSX9rBIpyvjBi7kH78Tbb6/BiSs5uiJwEZhaIPPitemkfjUWu+UIk S3rH6N3OSGrMj2+7cd2OKC8zTinqbMIV2dbUa7joOfyLpmxL/KFzP/9F/EzEoU7M ghVjUAV3LO7NMfMWj4hz/Jf9bSedX2WZfEhqnReiVyUMKiTUuszDhj/7AaR8PX7C Mjdpc2IbkPZCwD/qhnCgJu5VYlaz087JP13zdY+kwu29GitLkCJ+9IiY1SQ5cA4o U4oAHRm69w9xswNCASlnrRWHywRr+pg1S8bDilxHy0D0hAtYqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBC5v3EwZ8nCh/C0rkzAAPTEFDx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGExY2M1ZjQtMGE5ZC0z ZTA3LTk0NDMtODUzMmNjZmE2NDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAI4gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDIUaJu6r69FO9Fh/rictNXzONgREuFhu2pQPkvhd+2gwL6KoQKno+9 dMmlG+OzBRSivv8Iq74xRVyGEYU5rZBecSR27kB8Tl7PP65qmjrmum1OgnfKkIgQ M2jlwMi0miTKUNIStxjTL0ozwsKmpULNHQprQRQ1Lm/J/XEvzkcbRUkylAJ6du8R CbkQ+nM4cgOphfdMKm/8XNci+o30PThQwxKlVzIUA7/XzPPVyv714w/YTPHK98FT EN4fVNA+wW6XKld5T3mtw/H28Ps+o3flTORMXePFIF48UFBM2quaAWlcmg9pXJBZ +gp/JWZixA3XWOxcxsBs6y0kqVyorhgY -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:27 2025 by rpki-client