$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c9d8579-e319-330e-9e32-13f6183bb8c1.roa File: 3c9d8579-e319-330e-9e32-13f6183bb8c1.roa (raw, json) Hash identifier: gNvbe/dYs2Un2li8YzUvB4gbFDiNcABDQtwOTXf0U2M= Subject key identifier: AF:53:D5:4F:9F:50:69:EE:D5:AE:25:FB:39:E6:E4:82:67:BD:BA:76 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A8C70C46A37E4144D8E9D0480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c9d8579-e319-330e-9e32-13f6183bb8c1.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 2914 IP address blocks: 204.141.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:c4:6a:37:e4:14:4d:8e:9d:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=3ea16bb4-96c3-4e05-aeee-a45313d4986b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f6:51:28:44:8b:d1:2f:70:ad:b5:3e:06:15: 22:51:58:19:45:1a:66:91:8c:62:61:4b:60:60:e9: d9:cd:37:54:53:b9:fc:95:be:8d:16:02:33:6f:28: 17:28:41:ed:ef:6e:6f:bf:2f:b2:c7:b0:a5:4d:c8: 37:c7:a4:ce:74:eb:d5:09:c7:9a:d6:f6:7a:b2:34: c4:45:c4:79:b1:fd:01:29:71:a5:8a:8f:0b:ba:16: 44:cd:34:b9:f8:d1:0d:3c:c1:4f:b0:d7:40:87:c6: c7:3c:bc:e9:5d:cd:d9:28:b6:c9:82:c8:03:af:2c: 64:a3:a1:43:2c:e3:92:46:95:77:e5:12:a7:fc:5e: aa:96:8a:07:b7:90:f4:0c:78:41:ea:59:3b:db:18: f9:a9:ef:76:41:a6:c2:c8:ab:fc:82:94:81:7c:f4: 9a:89:55:54:5e:29:3f:f7:3e:28:97:a4:6c:f5:5d: e3:be:f2:b8:47:27:10:50:f1:41:e3:a6:11:dc:62: a6:8b:96:ae:cd:1e:79:2d:aa:6e:9f:a9:96:23:29: ee:21:18:4b:60:85:c5:a8:3d:13:90:86:16:81:f0: e1:f7:50:33:cf:45:1a:ac:eb:c8:e1:3f:ad:51:06: bf:aa:19:7a:b3:87:61:4e:b7:db:c8:e4:a2:af:ff: 91:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:53:D5:4F:9F:50:69:EE:D5:AE:25:FB:39:E6:E4:82:67:BD:BA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c9d8579-e319-330e-9e32-13f6183bb8c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:67:82:5e:8a:73:f4:09:e6:e8:6e:4b:77:ba:3e:5e:f9:42: 23:13:0f:1f:8c:80:d3:6d:48:01:af:81:60:71:02:f0:4d:51: 09:32:99:dc:d0:2f:15:4f:5e:c8:79:cd:83:27:20:ad:a5:9c: 60:90:16:0f:5c:8b:9d:ea:60:cf:10:68:21:e1:5c:72:d0:7d: 3a:ed:7e:1d:8b:11:cf:fb:d4:29:9c:c3:36:c8:19:6f:75:c2: 36:ad:04:cc:e4:26:7a:2c:51:c3:af:50:b6:7d:32:7d:f6:a3: b7:0e:7a:53:6b:8e:9c:cb:c2:75:fc:df:62:5c:73:e4:be:57: a6:4d:7f:c9:f0:95:29:21:70:4d:9a:36:23:6c:bf:4d:c5:c1: ce:69:f7:de:55:3d:6f:04:39:19:34:d4:1c:ba:12:af:1e:16: 47:c7:8c:a0:6f:d4:f3:a3:5f:bc:56:18:8e:14:1e:d0:30:fd: 4a:d7:ca:db:0d:bc:6a:41:f2:a2:30:5d:f9:e0:0c:c1:92:2a: e5:46:8c:e4:c2:fa:7f:b3:4d:11:ee:a6:94:40:fd:41:92:33: 2e:b4:23:16:e5:17:c3:94:15:fb:7d:0f:cb:79:e2:43:e4:7b: f3:d6:39:1b:2f:a3:3a:ba:35:d9:1a:f0:81:bd:c4:c4:08:f6: 10:bf:b7:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcMRqN+QUTY6dBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk M2VhMTZiYjQtOTZjMy00ZTA1LWFlZWUtYTQ1MzEzZDQ5ODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfZRKESL0S9wrbU+BhUiUVgZRRpmkYxiYUtg YOnZzTdUU7n8lb6NFgIzbygXKEHt725vvy+yx7ClTcg3x6TOdOvVCcea1vZ6sjTE RcR5sf0BKXGlio8LuhZEzTS5+NENPMFPsNdAh8bHPLzpXc3ZKLbJgsgDryxko6FD LOOSRpV35RKn/F6qlooHt5D0DHhB6lk72xj5qe92QabCyKv8gpSBfPSaiVVUXik/ 9z4ol6Rs9V3jvvK4RycQUPFB46YR3GKmi5auzR55Lapun6mWIynuIRhLYIXFqD0T kIYWgfDh91Azz0UarOvI4T+tUQa/qhl6s4dhTrfbyOSir/+RuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9T1U+fUGnu1a4l+znm5IJnvbp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2M5ZDg1NzktZTMxOS0z MzBlLTllMzItMTNmNjE4M2JiOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzI0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhngl6Kc/QJ5uhuS3e6Pl75QiMTDx+MgNNtSAGvgWBxAvBNUQkymdzQ LxVPXsh5zYMnIK2lnGCQFg9ci53qYM8QaCHhXHLQfTrtfh2LEc/71CmcwzbIGW91 wjatBMzkJnosUcOvULZ9Mn32o7cOelNrjpzLwnX832Jcc+S+V6ZNf8nwlSkhcE2a NiNsv03Fwc5p995VPW8EORk01By6Eq8eFkfHjKBv1POjX7xWGI4UHtAw/UrXytsN vGpB8qIwXfngDMGSKuVGjOTC+n+zTRHuppRA/UGSMy60IxblF8OUFft9D8t54kPk e/PWORsvozq6Ndka8IG9xMQI9hC/txo= -----END CERTIFICATE-----Generated at Thu Jul 31 02:04:01 2025 by rpki-client