$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3329155e-38f7-3fe9-8293-6884349bc139.roa File: 3329155e-38f7-3fe9-8293-6884349bc139.roa (raw, json) Hash identifier: 0lmpuNRXDVqzUoCtDU+WQpuH5k0BUaeIDvtp+HFMkgg= Subject key identifier: AB:B2:3D:23:23:FE:42:65:86:52:E8:CB:70:B4:A8:79:BD:F1:BC:62 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B0B76D6BF9B05D9ECE5FF1880 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3329155e-38f7-3fe9-8293-6884349bc139.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 7029 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d6:bf:9b:05:d9:ec:e5:ff:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=ff826022-980a-4eba-86cd-322dde16a33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:81:26:0b:32:7a:be:32:0c:e9:7c:83:07:96: d7:94:3b:7b:ad:bc:ad:2e:ca:fa:26:61:37:45:32: b4:57:61:43:dc:06:10:52:07:ad:a1:dc:f9:73:f9: 25:c0:9b:c4:fb:fa:10:d0:d1:0c:0f:5c:25:20:31: c1:71:35:86:4c:be:23:e3:c7:ff:32:e4:01:2a:ec: 97:fe:17:bc:7c:b9:99:7d:98:e1:ca:42:1a:f1:f1: 81:ee:ee:6a:6e:2e:4b:75:55:6c:11:7a:c1:2b:10: fa:cb:d5:49:32:8c:aa:85:a3:1b:62:48:a0:ae:27: 9f:44:c3:e4:8b:c2:ec:2d:ab:8e:2c:6a:ff:29:32: 24:3b:70:3e:64:fe:d7:72:e8:ac:4f:c9:44:f2:91: 47:b5:d0:1c:fc:07:92:a9:3b:4a:e2:36:22:ea:7c: bb:8c:e1:70:24:e3:78:67:70:4a:ef:67:6c:30:b1: c1:df:24:9a:60:4e:06:30:d4:68:10:57:20:70:c3: 9e:43:e7:e9:0c:ac:27:13:8f:9f:2a:6a:67:23:c9: e3:37:b1:1e:39:10:75:fa:3e:97:40:de:40:f9:0c: 7c:1f:3c:79:ef:12:cd:80:74:35:dc:22:24:f7:12: 5f:39:fe:8f:97:da:1c:f7:b5:ea:64:8e:b5:d8:72: 68:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B2:3D:23:23:FE:42:65:86:52:E8:CB:70:B4:A8:79:BD:F1:BC:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3329155e-38f7-3fe9-8293-6884349bc139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:d8:7f:4d:c8:f1:f1:9f:d5:5c:29:fc:ec:66:8c:aa:18:06: 29:86:d0:1d:15:ae:c0:6d:c3:46:89:93:b3:f5:57:df:e4:0b: 77:0b:89:49:d5:5a:7f:2e:1d:67:09:95:66:18:9d:04:47:da: 40:9a:bc:90:e1:96:9b:d3:c7:f6:c8:a4:e5:5e:ee:e0:fc:45: f6:c5:e7:08:5c:7a:96:ab:de:60:a2:90:25:6c:51:a6:c9:c0: 18:ca:90:5b:7e:72:89:09:18:42:33:1a:13:a1:f4:cd:69:94: 3d:98:d2:67:3a:96:8d:56:4e:05:70:13:92:d6:e9:97:f7:10: f9:0c:8c:53:6a:16:7b:4e:a0:ea:16:98:ca:0e:c8:14:ea:89: 07:7e:f8:86:1b:e3:90:20:7b:20:2f:0b:2e:07:b7:3b:3e:38: 88:6a:af:eb:3b:79:d9:2c:ca:c8:62:f0:24:ff:c0:4c:89:4b: 79:90:46:ff:0f:84:4d:aa:e9:3e:bb:5b:c3:b4:d4:13:37:68: 5d:3f:e9:06:a7:ae:ba:1b:24:9a:bc:3f:52:d2:86:40:80:75: a9:9e:4d:ba:7d:d7:37:9b:9c:b4:ba:97:f2:7e:6f:47:7e:4e: 70:83:74:d5:8e:2c:41:47:27:c4:52:cf:21:9f:cb:72:fa:41: 16:e8:a5:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdta/mwXZ7OX/GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZmY4MjYwMjItOTgwYS00ZWJhLTg2Y2QtMzIyZGRlMTZhMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IEmCzJ6vjIM6XyDB5bXlDt7rbytLsr6JmE3 RTK0V2FD3AYQUgetodz5c/klwJvE+/oQ0NEMD1wlIDHBcTWGTL4j48f/MuQBKuyX /he8fLmZfZjhykIa8fGB7u5qbi5LdVVsEXrBKxD6y9VJMoyqhaMbYkigriefRMPk i8LsLauOLGr/KTIkO3A+ZP7XcuisT8lE8pFHtdAc/AeSqTtK4jYi6ny7jOFwJON4 Z3BK72dsMLHB3ySaYE4GMNRoEFcgcMOeQ+fpDKwnE4+fKmpnI8njN7EeORB1+j6X QN5A+Qx8Hzx57xLNgHQ13CIk9xJfOf6Pl9oc97XqZI612HJoYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuyPSMj/kJlhlLoy3C0qHm98bxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzMyOTE1NWUtMzhmNy0z ZmU5LTgyOTMtNjg4NDM0OWJjMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLYf03I8fGf1Vwp/OxmjKoYBimG0B0VrsBtw0aJk7P1V9/kC3cLiUnV Wn8uHWcJlWYYnQRH2kCavJDhlpvTx/bIpOVe7uD8RfbF5whcepar3mCikCVsUabJ wBjKkFt+cokJGEIzGhOh9M1plD2Y0mc6lo1WTgVwE5LW6Zf3EPkMjFNqFntOoOoW mMoOyBTqiQd++IYb45AgeyAvCy4Htzs+OIhqr+s7edksyshi8CT/wEyJS3mQRv8P hE2q6T67W8O01BM3aF0/6QanrrobJJq8P1LShkCAdameTbp91zebnLS6l/J+b0d+ TnCDdNWOLEFHJ8RSzyGfy3L6QRbopRA= -----END CERTIFICATE-----Generated at Sun Oct 19 18:39:04 2025 by rpki-client