$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bdd7a0c3-8a48-3726-849e-e52d6551bf12.roa File: bdd7a0c3-8a48-3726-849e-e52d6551bf12.roa (raw, json) Hash identifier: OG+FaZ+TnILlS4/a2s9+zGaWog/4lmYi9L72qQIAQcs= Subject key identifier: DE:05:3A:52:89:0D:8D:2F:28:EA:DC:4C:7B:7C:F1:E9:54:AC:41:14 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A9900B3591554E007E24BC480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bdd7a0c3-8a48-3726-849e-e52d6551bf12.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 213802 IP address blocks: 128.241.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:b3:59:15:54:e0:07:e2:4b:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=7af5e4b0-e5cc-42e5-ac99-1b0b717ee10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:40:96:fd:e6:c8:95:8a:bc:aa:cb:14:1e:67: 09:d3:d4:4f:5e:2c:e9:92:52:6e:67:46:69:e7:5b: d4:25:a1:9d:73:31:29:41:29:9b:18:63:f4:fb:f6: 00:26:e7:11:44:a1:58:77:3f:45:47:5e:50:2d:c7: a0:71:2b:cd:8b:c6:1d:33:7d:5c:55:1c:b4:3b:cb: 46:42:3c:a1:63:28:9b:88:4a:67:e9:c7:b4:dc:e6: fb:a0:11:4b:3d:99:37:58:94:c3:f9:0c:cb:ff:ac: 5a:e6:19:fa:c0:08:41:e1:5d:90:56:33:9b:4a:d0: d5:52:dd:07:1e:b8:e9:7d:2c:66:0b:37:22:8e:1a: 6c:74:04:05:0c:8d:fa:48:e1:28:da:b4:42:5b:7e: da:55:55:17:9c:1e:ce:2c:76:a4:22:2d:30:ec:90: 5d:0b:b1:7d:ed:ff:35:0b:e1:5f:4e:53:67:41:88: 66:5d:83:7d:b5:9d:b2:5c:52:24:4a:48:d9:eb:be: df:07:5f:46:d8:37:66:d4:72:79:0c:4d:aa:06:d4: 4e:63:22:ca:e3:0b:90:82:34:d5:b7:a4:0b:f7:da: 7f:0c:36:90:92:41:24:fc:9a:26:ce:6c:fa:3a:f3: 8f:34:00:21:4b:ec:fa:be:44:87:57:7c:7c:c4:ac: db:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:05:3A:52:89:0D:8D:2F:28:EA:DC:4C:7B:7C:F1:E9:54:AC:41:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bdd7a0c3-8a48-3726-849e-e52d6551bf12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ed:42:0d:cd:ee:34:c3:e8:d7:37:e9:b5:d2:f7:b2:e7:fe: bd:1e:a3:25:9e:6e:96:e6:72:80:3d:76:25:a1:5d:d7:2a:b9: b0:f4:72:67:7f:eb:11:5c:74:d5:c9:0d:c2:c2:3c:1a:81:c6: 9e:c6:a0:7f:54:06:b4:84:14:05:95:20:bb:f0:f5:99:2f:06: 2f:18:03:80:a6:33:85:e1:49:d5:ef:1f:f9:b8:98:db:a0:e1: e2:16:ee:a0:0c:1e:30:80:42:0f:81:15:68:1b:63:ea:cd:a8: 5e:99:60:35:61:24:53:88:66:a4:21:4f:35:40:db:7a:3f:fc: 30:00:44:0f:7f:d1:c7:fd:66:a9:8b:85:85:ee:53:67:07:30: ee:c6:11:c2:6f:6b:b1:dd:e7:fa:04:97:bc:3d:97:7b:12:b1: 5c:33:d4:d9:c9:11:29:47:a4:0a:18:2c:dc:fc:59:ea:4d:a6: f4:f4:bb:0e:1f:1d:08:8f:9b:f4:f8:12:6c:ba:14:18:bb:af: 3d:5c:7b:a6:44:dc:f8:31:50:fa:06:66:3c:13:37:7a:cd:50: b1:a9:7e:88:ea:e4:23:7c:a4:41:de:bc:5d:a4:56:c5:c8:1e: 09:53:39:f0:02:8b:a9:bc:60:e4:30:cc:d9:dc:a9:8a:96:ec: f8:57:28:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALNZFVTgB+JLxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk N2FmNWU0YjAtZTVjYy00MmU1LWFjOTktMWIwYjcxN2VlMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUCW/ebIlYq8qssUHmcJ09RPXizpklJuZ0Zp 51vUJaGdczEpQSmbGGP0+/YAJucRRKFYdz9FR15QLcegcSvNi8YdM31cVRy0O8tG QjyhYyibiEpn6ce03Ob7oBFLPZk3WJTD+QzL/6xa5hn6wAhB4V2QVjObStDVUt0H HrjpfSxmCzcijhpsdAQFDI36SOEo2rRCW37aVVUXnB7OLHakIi0w7JBdC7F97f81 C+FfTlNnQYhmXYN9tZ2yXFIkSkjZ677fB19G2Ddm1HJ5DE2qBtROYyLK4wuQgjTV t6QL99p/DDaQkkEk/Jomzmz6OvOPNAAhS+z6vkSHV3x8xKzbFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4FOlKJDY0vKOrcTHt88elUrEEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmRkN2EwYzMtOGE0OC0z NzI2LTg0OWUtZTUyZDY1NTFiZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgPHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7tQg3N7jTD6Nc36bXS97Ln/r0eoyWebpbmcoA9diWhXdcqubD0cmd/ 6xFcdNXJDcLCPBqBxp7GoH9UBrSEFAWVILvw9ZkvBi8YA4CmM4XhSdXvH/m4mNug 4eIW7qAMHjCAQg+BFWgbY+rNqF6ZYDVhJFOIZqQhTzVA23o//DAARA9/0cf9ZqmL hYXuU2cHMO7GEcJva7Hd5/oEl7w9l3sSsVwz1NnJESlHpAoYLNz8WepNpvT0uw4f HQiPm/T4Emy6FBi7rz1ce6ZE3PgxUPoGZjwTN3rNULGpfojq5CN8pEHevF2kVsXI HglTOfACi6m8YOQwzNncqYqW7PhXKGk= -----END CERTIFICATE-----Generated at Tue Jul 22 11:50:34 2025 by rpki-client