$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/b53ac133-8c37-36a8-a00a-6e1693d86389.roa File: b53ac133-8c37-36a8-a00a-6e1693d86389.roa (raw, json) Hash identifier: XvCaN15oNn3Bo/dNrgZLEAUeNQzAOChF3tX5erbxSH0= Subject key identifier: 1C:78:FC:D3:B4:8D:2A:1E:F4:8C:25:3E:26:2C:F6:CF:45:15:9B:9B Certificate issuer: /CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Certificate serial: 010D0C9F4328584AF2567CB8429785FAABE72D80 Authority key identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/b53ac133-8c37-36a8-a00a-6e1693d86389.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 22446 IP address blocks: 205.233.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7c:b8:42:97:85:fa:ab:e7:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=375a7fc7-70ed-4282-a16c-2b4a82caca4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:f1:11:da:58:00:c9:2c:e0:0e:7d:f5:29: 08:83:5d:21:6a:f9:90:b9:e4:d6:5e:b9:5d:81:4c: e7:db:cc:3e:56:6a:19:b4:7d:67:89:89:3d:7e:0e: 36:e6:3a:d7:d3:d8:0b:9a:f0:ed:5c:ef:02:dd:61: f1:a7:a9:24:b9:cd:c6:14:c5:7e:30:03:d9:ea:01: 3c:4b:be:aa:8d:2b:0d:38:4f:91:34:74:43:4d:4b: f0:f7:13:81:d7:8a:5f:8f:89:6b:16:8b:da:8d:84: bc:79:fe:77:a0:12:ca:3a:25:25:f8:b4:fb:e3:49: eb:e1:97:d9:0e:da:cc:74:5e:1c:26:e0:6f:cc:12: b7:11:49:27:5f:af:79:b8:15:cf:40:83:71:65:b5: 0d:58:4a:04:2f:1e:4a:b9:94:e7:7b:85:5e:a9:d9: 8d:7f:cc:a0:6c:62:f1:27:c2:9d:89:16:cf:fb:c2: c7:e6:77:4d:ce:30:06:e9:d1:18:ba:94:00:00:9c: 6c:9a:4d:39:b8:e1:71:aa:b0:ed:ea:41:52:73:4b: 3b:8a:7d:0c:b9:ed:89:da:da:67:f8:d4:5f:45:d9: 8b:41:6f:ad:8e:87:e4:e0:4f:04:fc:f7:b5:dd:52: 4e:de:d6:29:4f:66:61:a5:46:0a:8f:a2:67:a8:82: 7a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:78:FC:D3:B4:8D:2A:1E:F4:8C:25:3E:26:2C:F6:CF:45:15:9B:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/b53ac133-8c37-36a8-a00a-6e1693d86389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl X509v3 Authority Key Identifier: keyid:13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer sbgp-ipAddrBlock: critical IPv4: 205.233.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e1:67:a8:9f:48:81:c7:2d:e5:dd:19:6d:ee:2d:86:fd:3b: 33:6d:35:ea:d7:71:e4:85:e4:0c:73:d0:60:31:ad:14:c0:e3: c6:39:54:25:26:ca:e4:0a:26:66:cc:07:95:80:11:bd:6f:0f: 30:88:e0:97:ac:2d:25:51:ef:04:61:f3:97:c3:36:32:d9:a5: 8b:d1:a4:fe:45:09:7c:78:25:1e:51:87:26:64:af:1f:8e:0e: d9:93:4d:b4:95:89:fb:c0:eb:3b:0c:57:4a:66:ba:34:9a:f7: e1:1a:af:35:40:6f:fd:71:40:2f:07:f7:34:db:99:43:93:88: ed:d3:4c:bd:df:d6:95:a1:ce:0b:66:93:c1:5c:b7:7d:26:20: a6:3e:cd:ca:48:c6:73:1a:d9:85:cf:66:5d:87:05:05:39:46: 47:e2:7f:4f:2e:99:d4:7b:32:4f:33:3a:fb:fc:ed:b7:40:fa: 7d:26:f1:11:8f:12:90:e2:8c:d0:53:0b:03:d3:0e:ab:99:fb: 78:88:57:9a:21:c0:0e:dc:67:bd:68:85:3f:9f:88:10:a5:ad: 73:30:4b:a9:c4:91:fc:67:bb:29:57:b7:9d:e1:4a:0e:82:c3: af:a2:2b:f4:9a:58:ea:d3:5e:71:2c:fa:7e:a4:aa:57:ee:40: 11:1d:98:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVny4QpeF+qvnLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVhMDg0OTItYjNiMS00YWExLWI1NmQtMDFhOThmN2Qw OTE5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk Mzc1YTdmYzctNzBlZC00MjgyLWExNmMtMmI0YTgyY2FjYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllPxEdpYAMks4A599SkIg10havmQueTWXrld gUzn28w+VmoZtH1niYk9fg425jrX09gLmvDtXO8C3WHxp6kkuc3GFMV+MAPZ6gE8 S76qjSsNOE+RNHRDTUvw9xOB14pfj4lrFovajYS8ef53oBLKOiUl+LT740nr4ZfZ DtrMdF4cJuBvzBK3EUknX695uBXPQINxZbUNWEoELx5KuZTne4VeqdmNf8ygbGLx J8KdiRbP+8LH5ndNzjAG6dEYupQAAJxsmk05uOFxqrDt6kFSc0s7in0Mue2J2tpn +NRfRdmLQW+tjofk4E8E/Pe13VJO3tYpT2ZhpUYKj6JnqIJ6/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBx4/NO0jSoe9IwlPiYs9s9FFZubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEw ODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5OGY3ZDA5MTkvYjUzYWMxMzMtOGMzNy0z NmE4LWEwMGEtNmUxNjkzZDg2Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjVhMDg0OTItYjNiMS00YWExLWI1 NmQtMDFhOThmN2QwOTE5LzI1YTA4NDkyLWIzYjEtNGFhMS1iNTZkLTAxYTk4Zjdk MDkxOS5jcmwwHwYDVR0jBBgwFoAUEwn6IXzXjp6k3qQG3jOvyyTaawYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEwODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5 OGY3ZDA5MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzen0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnhZ6ifSIHHLeXdGW3uLYb9OzNtNerXceSF5Axz0GAxrRTA48Y5VCUm yuQKJmbMB5WAEb1vDzCI4JesLSVR7wRh85fDNjLZpYvRpP5FCXx4JR5RhyZkrx+O DtmTTbSVifvA6zsMV0pmujSa9+EarzVAb/1xQC8H9zTbmUOTiO3TTL3f1pWhzgtm k8Fct30mIKY+zcpIxnMa2YXPZl2HBQU5Rkfif08umdR7Mk8zOvv87bdA+n0m8RGP EpDijNBTCwPTDquZ+3iIV5ohwA7cZ71ohT+fiBClrXMwS6nEkfxnuylXt53hSg6C w6+iK/SaWOrTXnEs+n6kqlfuQBEdmEw= -----END CERTIFICATE-----Generated at Mon Aug 25 06:12:00 2025 by rpki-client