$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b4810e65-775f-35f5-af61-c99976b9e521.roa File: b4810e65-775f-35f5-af61-c99976b9e521.roa (raw, json) Hash identifier: lD2XDtFtMRarQdN0S/sQ/+vkJy6aoPA0S+bit8g6F2U= Subject key identifier: 64:4F:A9:3A:B4:A4:BE:E0:B3:9E:9A:B5:10:66:DA:95:BE:97:D5:DF Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B18A4C9832E216E4E8BCC4E80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b4810e65-775f-35f5-af61-c99976b9e521.roa Signing time: Fri 05 Sep 2025 18:19:08 +0000 ROA not before: Fri 05 Sep 2025 18:19:08 +0000 ROA not after: Thu 04 Dec 2025 19:19:08 +0000 asID: 266044 IP address blocks: 200.15.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:a4:c9:83:2e:21:6e:4e:8b:cc:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 5 18:19:08 2025 GMT Not After : Dec 4 19:19:08 2025 GMT Subject: CN=c42ad2fe-25d3-4172-9d66-332ca4d47704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dc:74:4c:ce:e8:2a:d0:db:48:fe:c9:d1:af: fc:20:95:aa:90:3f:dd:4b:63:62:70:86:08:14:c9: 8f:6e:ff:02:56:79:12:cd:43:5e:1a:73:11:f3:0a: 9f:27:70:6e:00:63:b0:53:55:42:c2:6d:ee:14:c9: b5:cf:05:fc:87:02:65:83:5d:5f:65:ae:d6:ae:2a: 5a:e8:ab:e9:0d:74:49:ca:4c:73:a5:74:bc:3e:26: e7:d8:91:d3:57:ed:0c:20:53:cb:8b:d8:fb:c2:76: c4:cb:a8:94:b5:34:70:0a:2d:b4:d2:1f:47:2e:88: 08:04:88:5a:42:7d:38:7c:07:43:f8:03:e9:b8:bc: 36:6a:00:54:49:fe:8c:45:86:50:a9:f4:8b:d0:bf: 2f:81:ba:ef:c7:aa:43:8f:92:fb:f5:3e:f6:70:97: 24:a2:cd:bb:bd:84:fb:4f:dc:96:5f:22:de:d3:ef: 78:1e:40:0d:d7:92:66:9f:9c:2d:79:5b:6b:49:54: 5b:77:c1:3c:e8:96:2e:2b:f5:5f:fc:ae:d5:93:3b: 64:4a:48:50:07:d4:c0:1b:09:e2:52:f2:e5:ce:44: 55:84:f6:bb:00:08:b2:d6:6e:7d:7d:0e:f1:02:d2: 30:1b:d5:e5:69:23:7b:97:37:4a:1c:7e:b9:80:98: e5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4F:A9:3A:B4:A4:BE:E0:B3:9E:9A:B5:10:66:DA:95:BE:97:D5:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b4810e65-775f-35f5-af61-c99976b9e521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 200.15.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:db:fa:b0:fc:c9:2a:aa:36:ff:b5:c2:db:3c:d0:0d:75:b0: be:b9:e6:85:7a:13:c0:ba:b3:7d:c6:38:85:61:05:40:24:e2: 9d:6e:05:64:d3:e9:d6:c4:b6:a6:01:fe:a3:45:f1:fb:21:36: 22:3b:24:2d:ea:6f:1f:a1:89:fc:85:92:f0:c7:d5:88:1f:d6: ab:c0:5b:b8:19:8d:83:f5:e1:d1:0a:ef:48:5c:68:16:80:ed: 37:4d:33:b4:82:7e:c0:fa:dd:27:0e:d3:b3:ce:28:b7:5b:cb: f9:48:09:05:7f:b3:b8:68:fe:7f:ea:5f:74:2d:ad:5b:d5:c5: fa:7e:de:4f:b4:5d:ac:8c:a1:6b:5a:4a:55:55:31:5e:bf:6e: e8:27:0d:75:9b:9d:23:d5:14:e5:8f:39:30:70:bf:ba:65:2e: 48:06:08:0b:c8:36:95:dd:36:e3:a4:5e:3c:d6:aa:81:51:6d: 5f:80:49:fd:3e:9d:6a:0a:95:42:1a:9f:f6:6c:1c:5f:df:5a: 7a:92:d2:30:79:28:48:40:c2:ca:a5:9b:f9:ad:fa:e5:cb:12: 3f:77:a4:f6:0b:b3:a7:e6:17:1c:f6:fb:f0:0d:1d:30:05:90: 63:19:ef:f6:43:ec:8e:8f:52:04:34:40:81:71:00:8b:2b:e3: 36:0f:59:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYpMmDLiFuTovMToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkwNTE4MTkwOFoXDTI1MTIwNDE5MTkwOFowLzEtMCsGA1UEAxMk YzQyYWQyZmUtMjVkMy00MTcyLTlkNjYtMzMyY2E0ZDQ3NzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9x0TM7oKtDbSP7J0a/8IJWqkD/dS2NicIYI FMmPbv8CVnkSzUNeGnMR8wqfJ3BuAGOwU1VCwm3uFMm1zwX8hwJlg11fZa7Wripa 6KvpDXRJykxzpXS8Pibn2JHTV+0MIFPLi9j7wnbEy6iUtTRwCi200h9HLogIBIha Qn04fAdD+APpuLw2agBUSf6MRYZQqfSL0L8vgbrvx6pDj5L79T72cJckos27vYT7 T9yWXyLe0+94HkAN15Jmn5wteVtrSVRbd8E86JYuK/Vf/K7VkztkSkhQB9TAGwni UvLlzkRVhPa7AAiy1m59fQ7xAtIwG9XlaSN7lzdKHH65gJjlTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRPqTq0pL7gs56atRBm2pW+l9XfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjQ4MTBlNjUtNzc1Zi0z NWY1LWFmNjEtYzk5OTc2YjllNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyA8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALb+rD8ySqqNv+1wts80A11sL655oV6E8C6s33GOIVhBUAk4p1uBWTT 6dbEtqYB/qNF8fshNiI7JC3qbx+hifyFkvDH1Ygf1qvAW7gZjYP14dEK70hcaBaA 7TdNM7SCfsD63ScO07POKLdby/lICQV/s7ho/n/qX3QtrVvVxfp+3k+0XayMoWta SlVVMV6/bugnDXWbnSPVFOWPOTBwv7plLkgGCAvINpXdNuOkXjzWqoFRbV+ASf0+ nWoKlUIan/ZsHF/fWnqS0jB5KEhAwsqlm/mt+uXLEj93pPYLs6fmFxz2+/ANHTAF kGMZ7/ZD7I6PUgQ0QIFxAIsr4zYPWXM= -----END CERTIFICATE-----Generated at Thu Sep 18 23:55:28 2025 by rpki-client