$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b251e85-1f51-3588-9b84-3b4131b63e80.roa File: 6b251e85-1f51-3588-9b84-3b4131b63e80.roa (raw, json) Hash identifier: fGixjs2Edsb7SDNGjvWMkr976UdD3cyQ3SoEPI95xO4= Subject key identifier: 6D:BF:FE:4E:3D:F4:6E:E9:36:50:D6:45:B0:AE:6A:54:02:C6:F0:10 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B16A1585D6FCF75B6C1A4CF00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b251e85-1f51-3588-9b84-3b4131b63e80.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 25645 IP address blocks: 204.2.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:58:5d:6f:cf:75:b6:c1:a4:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=d7daa167-e608-4e03-a85f-5cced12f8392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:3f:7d:ab:41:be:13:ed:09:7c:71:57:76: a0:01:41:44:87:0f:91:86:43:fa:b9:d1:09:32:b4: 07:35:45:00:83:ab:0b:b9:2b:80:02:c6:34:b0:aa: ee:b1:1a:b6:0e:fe:b7:f0:a7:a2:ce:6a:30:08:e7: 29:45:84:ac:a1:5e:35:61:59:a5:3f:26:44:c3:72: c9:54:c1:b2:2e:43:e2:e2:21:89:57:92:78:79:db: f7:21:4e:24:ad:8e:52:d0:10:42:89:8b:08:e0:5a: 13:92:be:c5:13:93:94:07:3b:c4:48:3f:06:3f:38: d0:27:05:fe:25:cb:86:03:e1:7d:47:e8:3b:eb:dc: d0:c9:41:66:e7:a2:b2:ce:08:33:8a:1a:2c:ce:ba: 0e:8e:7e:84:ec:7c:f7:16:fd:de:03:16:2e:0e:b5: 72:bb:eb:b0:e3:fb:db:a9:f0:f9:a9:4d:6a:38:44: b0:ec:f4:ff:bf:88:44:1f:b0:6f:62:de:a5:c1:cc: ef:c7:3d:b8:25:f6:6a:5f:8b:94:d4:83:33:48:97: 28:f5:38:30:70:51:23:17:22:cb:aa:25:cc:5c:21: 81:bd:0b:24:6c:fe:c1:20:47:35:6a:fb:8e:01:04: b9:f6:c6:d0:fe:42:a9:e3:ed:4a:cd:2a:77:dd:54: fb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BF:FE:4E:3D:F4:6E:E9:36:50:D6:45:B0:AE:6A:54:02:C6:F0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b251e85-1f51-3588-9b84-3b4131b63e80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e1:5a:ec:57:f7:de:e4:62:2d:52:c2:77:cf:e9:f3:23:1d: 70:e5:06:2d:4e:7a:3a:1c:b7:56:7e:8a:09:3c:94:41:53:da: 44:e0:3c:74:9d:ed:c0:fd:52:b2:f7:1d:3e:ba:e0:8f:51:ac: 05:0c:5c:7d:6e:26:e4:7a:e9:34:49:57:45:df:8e:d1:02:20: 28:96:96:d9:d0:0d:3f:08:03:27:30:fe:d5:aa:d0:71:9f:12: 36:e5:22:db:c2:b7:e7:c5:43:75:af:1a:9f:25:b8:a8:0f:1f: 84:4b:70:dd:6f:6d:f2:0e:9f:63:9b:c5:61:b5:b3:a6:8c:23: d3:6c:88:c5:36:60:67:fd:b7:e9:a2:a7:02:32:e8:66:9a:43: 21:4a:02:5f:b9:3f:62:2b:01:ce:ac:cb:16:14:0d:d9:15:07: 96:af:5a:60:d0:ca:c0:72:d0:9e:e7:ba:06:1a:09:46:53:1f: 04:9b:e0:0e:41:a4:3b:7e:f7:a3:64:a1:29:10:19:15:38:bf: 00:40:a9:06:dd:c5:47:75:a2:a0:c9:8c:15:2c:7d:db:50:50: 70:6d:c5:2d:b0:55:d3:7e:c5:c9:ec:c7:2c:16:f9:65:f8:fe: 7b:81:d9:30:ea:b5:0f:24:e6:f4:37:66:75:38:ad:58:b9:b3: f2:85:49:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoVhdb891tsGkzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDdkYWExNjctZTYwOC00ZTAzLWE4NWYtNWNjZWQxMmY4MzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfg/fatBvhPtCXxxV3agAUFEhw+RhkP6udEJ MrQHNUUAg6sLuSuAAsY0sKrusRq2Dv638KeizmowCOcpRYSsoV41YVmlPyZEw3LJ VMGyLkPi4iGJV5J4edv3IU4krY5S0BBCiYsI4FoTkr7FE5OUBzvESD8GPzjQJwX+ JcuGA+F9R+g769zQyUFm56KyzggzihoszroOjn6E7Hz3Fv3eAxYuDrVyu+uw4/vb qfD5qU1qOESw7PT/v4hEH7BvYt6lwczvxz24JfZqX4uU1IMzSJco9TgwcFEjFyLL qiXMXCGBvQskbP7BIEc1avuOAQS59sbQ/kKp4+1KzSp33VT73wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2//k499G7pNlDWRbCualQCxvAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNmIyNTFlODUtMWY1MS0z NTg4LTliODQtM2I0MTMxYjYzZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXhWuxX997kYi1SwnfP6fMjHXDlBi1Oejoct1Z+igk8lEFT2kTgPHSd 7cD9UrL3HT664I9RrAUMXH1uJuR66TRJV0XfjtECICiWltnQDT8IAycw/tWq0HGf EjblItvCt+fFQ3WvGp8luKgPH4RLcN1vbfIOn2ObxWG1s6aMI9NsiMU2YGf9t+mi pwIy6GaaQyFKAl+5P2IrAc6syxYUDdkVB5avWmDQysBy0J7nugYaCUZTHwSb4A5B pDt+96NkoSkQGRU4vwBAqQbdxUd1oqDJjBUsfdtQUHBtxS2wVdN+xcnsxywW+WX4 /nuB2TDqtQ8k5vQ3ZnU4rVi5s/KFScs= -----END CERTIFICATE-----Generated at Thu Sep 18 22:32:03 2025 by rpki-client