$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/08d94185-ad52-3fcc-85c6-05879b3a374e.roa File: 08d94185-ad52-3fcc-85c6-05879b3a374e.roa (raw, json) Hash identifier: M9rtHJvfwzz8u3HDH0kwLpFxa0pS+7Zkrt2b5hNApIM= Subject key identifier: 3A:AB:F4:53:3E:08:BE:AB:8F:65:AA:55:F9:99:D3:1B:08:CD:E5:0F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B2FC1B9058D57725E01DA90C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/08d94185-ad52-3fcc-85c6-05879b3a374e.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 3949 IP address blocks: 157.238.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:b9:05:8d:57:72:5e:01:da:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=65fbf675-dd4c-4014-ad8c-95b386c573ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:b1:01:95:36:62:f2:2a:3c:84:04:61:d9: 77:3e:12:ac:4f:94:d3:f6:fc:fd:05:78:76:56:61: 52:35:e1:21:44:71:46:fc:59:19:35:68:02:3a:ef: 74:84:6b:14:c0:a0:fe:ab:ad:48:88:14:0b:59:78: 5f:b9:e2:4a:e3:71:f0:55:d5:90:04:e8:d2:6e:72: 50:c6:66:8e:34:5c:7c:1c:89:0b:fa:c5:e8:38:cb: d3:79:a7:52:a8:46:6f:ed:aa:b8:5a:98:26:f4:49: 54:34:f1:f7:b8:db:46:55:d0:d7:23:ca:e1:3f:b7: c4:d7:9d:3a:ab:e3:80:ed:7e:00:d5:0e:e5:54:72: 2c:b0:04:64:55:30:d0:8d:89:24:41:5e:8c:82:4a: 6e:12:6a:18:36:a3:1d:a3:08:70:97:2e:ac:dd:dd: ee:b3:72:68:20:14:3d:69:8a:8c:40:8e:a4:c1:2a: 29:47:68:28:e5:44:aa:36:c1:0b:d4:84:fb:39:50: 96:a1:47:25:5a:95:49:51:d7:9b:5d:9f:5f:ab:f1: 8b:8e:31:1d:9a:64:9c:ad:bb:c2:a2:71:c7:c0:64: 4c:c6:a4:d5:b5:6c:7d:a6:9c:a2:f4:b0:b5:75:75: 05:51:69:01:d4:6b:8f:97:04:f7:f6:bd:68:59:4c: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AB:F4:53:3E:08:BE:AB:8F:65:AA:55:F9:99:D3:1B:08:CD:E5:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/08d94185-ad52-3fcc-85c6-05879b3a374e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 157.238.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:1e:ea:78:75:63:16:96:69:a9:2b:3f:bd:e2:59:f6:03:89: 3f:d9:24:f1:f2:ab:e6:d3:15:c7:e0:dc:cb:8f:b6:70:50:dc: 47:26:66:14:e5:e3:d2:6f:9a:33:bd:00:4b:6e:92:10:c7:7f: 36:b6:ff:a6:57:2a:92:45:88:e3:0f:10:7a:f9:95:e9:f3:5f: f5:e8:04:15:39:bb:5f:7d:41:9d:45:a7:70:fe:6d:49:c9:b4: 90:22:2a:7a:7f:79:d7:87:1d:ca:2d:ce:71:d8:14:ed:a3:a6: 6e:8b:99:ec:70:71:ad:85:a8:06:cd:06:5a:ac:fd:cd:d9:e3: 56:21:76:2d:37:22:11:3e:6a:b8:1e:21:29:a1:82:9b:b6:ad: 9e:9e:aa:85:ea:9e:1f:a5:cf:04:79:81:e5:66:52:9e:3f:cf: 27:b0:bb:7b:12:df:ac:f7:09:f6:f1:29:9c:51:6e:a8:c7:5d: 3c:f3:5b:b5:b6:06:fb:1c:52:c7:e5:cf:68:87:b2:bb:4b:7d: 44:33:e6:32:1b:3e:bc:22:ff:22:90:47:f1:52:00:e1:23:9b: ec:ed:58:66:be:26:7f:38:c8:a0:00:a3:6c:4d:a2:8f:d2:b7: b8:83:6a:a1:76:24:ff:91:a1:fb:a1:93:6c:32:5a:e8:7e:1e: af:16:ba:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbkFjVdyXgHakMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NjVmYmY2NzUtZGQ0Yy00MDE0LWFkOGMtOTViMzg2YzU3M2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0qxAZU2YvIqPIQEYdl3PhKsT5TT9vz9BXh2 VmFSNeEhRHFG/FkZNWgCOu90hGsUwKD+q61IiBQLWXhfueJK43HwVdWQBOjSbnJQ xmaONFx8HIkL+sXoOMvTeadSqEZv7aq4Wpgm9ElUNPH3uNtGVdDXI8rhP7fE1506 q+OA7X4A1Q7lVHIssARkVTDQjYkkQV6MgkpuEmoYNqMdowhwly6s3d3us3JoIBQ9 aYqMQI6kwSopR2go5USqNsEL1IT7OVCWoUclWpVJUdebXZ9fq/GLjjEdmmScrbvC onHHwGRMxqTVtWx9ppyi9LC1dXUFUWkB1GuPlwT39r1oWUwIIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqr9FM+CL6rj2WqVfmZ0xsIzeUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDhkOTQxODUtYWQ1Mi0z ZmNjLTg1YzYtMDU4NzliM2EzNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCne60MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEge6nh1YxaWaakrP73iWfYDiT/ZJPHyq+bTFcfg3MuPtnBQ3EcmZhTl 49JvmjO9AEtukhDHfza2/6ZXKpJFiOMPEHr5lenzX/XoBBU5u199QZ1Fp3D+bUnJ tJAiKnp/edeHHcotznHYFO2jpm6Lmexwca2FqAbNBlqs/c3Z41Yhdi03IhE+arge ISmhgpu2rZ6eqoXqnh+lzwR5geVmUp4/zyewu3sS36z3CfbxKZxRbqjHXTzzW7W2 BvscUsflz2iHsrtLfUQz5jIbPrwi/yKQR/FSAOEjm+ztWGa+Jn84yKAAo2xNoo/S t7iDaqF2JP+Rofuhk2wyWuh+Hq8WumM= -----END CERTIFICATE-----Generated at Tue Oct 14 10:49:16 2025 by rpki-client