$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f08386f8-f68b-3c26-b827-f059de699ee2.roa File: f08386f8-f68b-3c26-b827-f059de699ee2.roa (raw, json) Hash identifier: fXIVzsd4P0yyMMYiVNSibbBBsmyLVAey7dgHOyulTuA= Subject key identifier: 5A:9B:54:49:D3:59:13:A8:F7:89:22:A6:9C:3E:F5:FD:A3:45:6A:68 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D11853BB2B9FDA6EAF0DA0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f08386f8-f68b-3c26-b827-f059de699ee2.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 58182 IP address blocks: 204.2.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:18:53:bb:2b:9f:da:6e:af:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=8fed6afc-2308-4ddd-9e19-a37fe570a4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:85:5f:23:02:a7:ce:71:0c:67:7a:34:cf: 27:e3:4d:1a:3f:e8:7f:c1:2f:a7:77:ca:35:79:74: 3b:a0:4b:7a:d2:03:e5:72:0b:1b:14:9c:6b:f8:2d: 8b:2f:60:be:72:85:98:70:1e:1e:01:df:34:18:70: c0:42:56:ce:69:97:dd:36:92:45:7a:45:a2:38:29: 91:c3:a6:66:49:38:f9:38:d6:2c:8d:1b:11:09:86: 85:ee:98:8c:e8:fa:67:e6:93:18:83:db:02:7d:a7: d0:6d:26:5e:c5:6b:c5:3a:ad:9e:d7:ca:bc:2c:d6: e9:4b:0b:22:fa:3c:c4:83:80:f3:1b:8b:a2:36:63: d8:3f:c8:e7:e3:bc:af:23:4d:5d:9e:ac:ce:d9:04: df:66:d3:57:97:31:20:bd:2b:b4:b8:fc:a5:87:26: 4d:fb:68:7f:d5:03:c4:6c:1d:19:e4:d4:a2:4e:c1: 1e:6c:c6:54:3c:6a:1e:bc:25:08:c2:e2:06:1e:bb: 68:4c:b0:20:46:f5:92:a9:07:8d:a7:fa:e6:bb:f8: 45:d1:f9:48:04:0e:40:2b:53:bc:63:10:bf:25:e2: 28:80:9a:77:09:be:96:15:cb:ab:92:70:85:ae:9e: af:ca:4d:56:76:fa:19:62:9c:44:a7:7f:7a:15:23: b0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9B:54:49:D3:59:13:A8:F7:89:22:A6:9C:3E:F5:FD:A3:45:6A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f08386f8-f68b-3c26-b827-f059de699ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:4a:95:5c:2b:36:58:d3:9a:eb:22:95:92:20:35:41:b2:30: 3b:47:60:0e:f3:3c:27:6c:31:4c:9e:ce:b2:90:7e:0b:5e:52: ae:d1:b1:21:72:28:be:e1:b4:90:c7:80:85:09:1d:85:22:0f: 71:4a:3c:33:54:b1:af:9e:96:06:26:9f:44:54:99:08:64:6c: a9:63:08:ef:96:46:5d:14:ac:6a:ec:c6:6b:ce:5e:ff:86:bd: 18:e8:97:d8:39:28:73:31:da:14:53:52:03:3c:14:f5:1e:10: a7:b4:ca:ac:d3:72:69:d4:eb:9a:6c:5c:d1:cb:7d:7f:0e:b7: 25:0b:b6:16:c9:1d:cc:e2:d8:04:07:4d:da:bc:35:19:d2:e9: f4:d2:fa:1e:ed:1c:5a:10:58:87:ee:a4:a8:9d:44:d3:bf:5d: 19:2b:b9:6b:5b:47:8e:76:4e:69:01:d4:d6:bb:c0:b7:88:bc: ad:34:30:07:b4:e5:4d:46:0e:ed:fc:f0:b2:54:02:cb:2b:97: 6e:44:71:4c:3b:15:28:1b:b0:c0:62:db:26:0a:da:0f:b8:5c: 6f:24:74:86:b8:90:f8:ab:39:8d:67:6e:14:4c:2f:ba:7f:1e: 9a:14:c3:1b:da:06:be:76:b5:a0:4f:4f:29:51:ba:f3:e0:4f: 87:72:6f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0RhTuyuf2m6vDaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OGZlZDZhZmMtMjMwOC00ZGRkLTllMTktYTM3ZmU1NzBhNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk+FXyMCp85xDGd6NM8n400aP+h/wS+nd8o1 eXQ7oEt60gPlcgsbFJxr+C2LL2C+coWYcB4eAd80GHDAQlbOaZfdNpJFekWiOCmR w6ZmSTj5ONYsjRsRCYaF7piM6Ppn5pMYg9sCfafQbSZexWvFOq2e18q8LNbpSwsi +jzEg4DzG4uiNmPYP8jn47yvI01dnqzO2QTfZtNXlzEgvSu0uPylhyZN+2h/1QPE bB0Z5NSiTsEebMZUPGoevCUIwuIGHrtoTLAgRvWSqQeNp/rmu/hF0flIBA5AK1O8 YxC/JeIogJp3Cb6WFcurknCFrp6vyk1WdvoZYpxEp396FSOwyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqbVEnTWROo94kippw+9f2jRWpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjA4Mzg2ZjgtZjY4Yi0z YzI2LWI4MjctZjA1OWRlNjk5ZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzALPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpKlVwrNljTmusilZIgNUGyMDtHYA7zPCdsMUyezrKQfgteUq7RsSFy KL7htJDHgIUJHYUiD3FKPDNUsa+elgYmn0RUmQhkbKljCO+WRl0UrGrsxmvOXv+G vRjol9g5KHMx2hRTUgM8FPUeEKe0yqzTcmnU65psXNHLfX8OtyULthbJHczi2AQH Tdq8NRnS6fTS+h7tHFoQWIfupKidRNO/XRkruWtbR452TmkB1Na7wLeIvK00MAe0 5U1GDu388LJUAssrl25EcUw7FSgbsMBi2yYK2g+4XG8kdIa4kPirOY1nbhRML7p/ HpoUwxvaBr52taBPTylRuvPgT4dyb7w= -----END CERTIFICATE-----Generated at Sun Aug 24 01:15:37 2025 by rpki-client