$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ca0129b-3659-32e7-8ff5-df4b02f1ce9a.roa File: 0ca0129b-3659-32e7-8ff5-df4b02f1ce9a.roa (raw, json) Hash identifier: Os6rdu7ihr48Q8Lf7xm/BtvNAo3hmP2xHpxljkFcInE= Subject key identifier: 8D:9E:87:C0:68:A7:29:A1:3D:4D:B5:D2:61:40:80:95:6B:D6:CE:B0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AA42B8D1819F4B5BE5F63B000 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ca0129b-3659-32e7-8ff5-df4b02f1ce9a.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 32787 IP address blocks: 204.141.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:8d:18:19:f4:b5:be:5f:63:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=d8b0e90d-7acb-49a2-8728-0347345a6c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b2:63:14:1a:ec:86:be:ea:0f:c7:c3:51:e7: d4:72:ee:ea:37:7c:7d:3f:1e:f2:02:70:2b:3d:6d: 05:a3:ba:49:0d:5f:b4:30:e6:9d:60:12:e3:4c:2f: 85:d5:d1:44:73:0a:ff:9d:5a:d0:0c:75:a8:72:58: 04:b8:b1:e8:3c:47:4c:db:0d:ec:37:4f:7b:78:47: c3:6f:45:d1:eb:84:d8:35:af:41:8b:e5:32:8c:de: a3:8a:a5:08:b0:b2:9b:63:71:75:59:be:58:60:ea: 84:2e:d3:f3:ac:f1:4b:f9:3a:90:77:87:1e:1d:2b: 90:0b:74:fe:b2:cb:d0:e1:6f:d6:7f:8e:a8:73:3a: e5:a7:6c:82:5b:97:68:64:b2:83:0f:42:84:c1:e1: bf:43:b7:b2:79:44:14:82:17:d6:f8:68:b8:ad:ab: 1e:a1:a1:7a:21:5d:dc:ee:24:0b:d9:7b:c2:28:e5: d5:00:42:87:b2:89:4a:3a:cb:17:ea:ec:59:ab:a3: 68:28:f5:01:f3:a3:4d:90:da:34:98:6d:a0:00:bc: c9:e7:5f:f2:e3:78:00:64:7f:f9:72:bc:98:63:81: 6d:26:7d:58:5b:31:ac:14:f5:a1:59:81:3a:5f:e9: b2:ac:5d:db:0c:0f:10:76:ba:0e:f6:68:2f:6c:b2: 10:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9E:87:C0:68:A7:29:A1:3D:4D:B5:D2:61:40:80:95:6B:D6:CE:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ca0129b-3659-32e7-8ff5-df4b02f1ce9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d4:a5:14:70:72:62:c7:f3:8d:ab:fc:19:83:51:84:ee:8c: 56:6a:9c:8d:a0:90:39:80:4e:0c:9f:b1:65:65:61:39:49:9c: e5:2c:55:b1:2e:e8:80:5d:b7:b7:75:9c:9b:69:26:f9:14:01: 69:2b:9b:54:1b:a8:b7:60:ac:fa:ea:f5:59:b9:25:20:09:1f: dd:37:f7:1b:4b:a2:e8:a8:69:58:19:55:63:f8:4f:15:ce:8c: 2e:b9:ab:79:ae:e4:fd:4e:69:ca:6d:08:4f:8f:c1:9d:00:45: 0a:23:b7:d3:69:f1:82:6f:9e:87:13:f9:58:2c:af:6f:52:12: 74:1f:94:0e:ee:40:f6:a8:fc:1f:1b:56:93:e3:3a:13:ee:34: ed:08:50:9e:76:58:a9:27:7a:b9:e4:4a:2b:b9:14:0d:0d:0e: c8:dd:dd:7d:74:13:6f:0f:6c:f8:d8:de:4a:43:7a:6f:59:95: 34:47:95:1c:dd:be:02:36:c1:7d:91:1f:42:c5:d3:80:2a:ed: 33:89:8e:93:66:77:00:29:fb:15:4c:a7:ed:e1:b9:0f:f4:67: 2b:a3:80:9b:f3:be:b4:7f:04:c9:bc:9e:96:87:aa:fd:0b:a2: e8:3d:2b:e0:1f:f8:68:f5:25:6e:9d:bc:1f:b5:ff:c4:ed:ee: 8d:7e:85:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK40YGfS1vl9jsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDhiMGU5MGQtN2FjYi00OWEyLTg3MjgtMDM0NzM0NWE2YzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibJjFBrshr7qD8fDUefUcu7qN3x9Px7yAnAr PW0Fo7pJDV+0MOadYBLjTC+F1dFEcwr/nVrQDHWoclgEuLHoPEdM2w3sN097eEfD b0XR64TYNa9Bi+UyjN6jiqUIsLKbY3F1Wb5YYOqELtPzrPFL+TqQd4ceHSuQC3T+ ssvQ4W/Wf46oczrlp2yCW5doZLKDD0KEweG/Q7eyeUQUghfW+Gi4raseoaF6IV3c 7iQL2XvCKOXVAEKHsolKOssX6uxZq6NoKPUB86NNkNo0mG2gALzJ51/y43gAZH/5 cryYY4FtJn1YWzGsFPWhWYE6X+myrF3bDA8QdroO9mgvbLIQcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2eh8BopymhPU210mFAgJVr1s6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGNhMDEyOWItMzY1OS0z MmU3LThmZjUtZGY0YjAyZjFjZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzI2sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXUpRRwcmLH842r/BmDUYTujFZqnI2gkDmATgyfsWVlYTlJnOUsVbEu 6IBdt7d1nJtpJvkUAWkrm1QbqLdgrPrq9Vm5JSAJH9039xtLouioaVgZVWP4TxXO jC65q3mu5P1OacptCE+PwZ0ARQojt9Np8YJvnocT+Vgsr29SEnQflA7uQPao/B8b VpPjOhPuNO0IUJ52WKknernkSiu5FA0NDsjd3X10E28PbPjY3kpDem9ZlTRHlRzd vgI2wX2RH0LF04Aq7TOJjpNmdwAp+xVMp+3huQ/0ZyujgJvzvrR/BMm8npaHqv0L oug9K+Af+Gj1JW6dvB+1/8Tt7o1+hTg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:44 2025 by rpki-client