$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d21d7c4-3716-32d4-8b69-65aecb294268.roa File: 1d21d7c4-3716-32d4-8b69-65aecb294268.roa (raw, json) Hash identifier: RLd1aROS0Kb1oC/LCddRKgdZ8B1NnXeXMPkO+KNTtYA= Subject key identifier: A8:48:6E:48:F0:6E:D8:A7:87:C7:CE:E2:A8:73:E7:64:0D:57:50:1F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B0B76D6AD215CC457717CCDE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d21d7c4-3716-32d4-8b69-65aecb294268.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 3257 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d6:ad:21:5c:c4:57:71:7c:cd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=fc2ff9b6-9d4e-4b2d-b9ac-7ae81d3dabf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:87:bd:17:e4:05:1b:01:0e:8c:f3:e1:2e:29: 44:5f:6b:15:92:b6:da:04:ea:30:81:4e:47:bb:24: 6d:f9:31:31:3d:fb:34:94:39:43:98:df:5a:70:51: 25:14:6e:1b:98:c8:fd:b8:a2:e5:9c:b9:99:09:d2: a1:7c:05:21:7d:98:5c:62:c8:20:a2:13:c1:b0:23: 0a:fa:7f:17:41:20:7f:80:82:c7:e3:94:ed:e1:9e: 9f:19:20:40:d8:f1:4b:09:0f:3b:42:8b:cc:79:1b: a7:d9:2e:c3:8e:c5:1b:cc:f7:e5:2c:eb:63:22:35: 15:ba:d9:8b:05:0e:e2:12:a9:b4:cb:dc:1c:27:06: 74:5f:bc:7e:25:37:49:86:ef:93:b1:d1:da:77:58: d5:db:a3:b6:71:62:65:8a:eb:7c:ef:06:11:db:22: 23:4f:7e:52:06:23:60:5a:d8:42:52:c0:fb:40:32: 98:c4:68:22:a3:40:25:38:cb:6c:aa:92:78:86:da: 01:2e:00:4d:10:9a:60:5b:8c:42:28:35:ed:28:ca: f8:bd:86:44:1f:c0:59:04:84:92:48:b1:30:59:9c: b2:44:46:f9:c2:77:a4:57:ba:df:88:be:a3:91:27: ca:31:f4:b3:6e:30:aa:03:15:e7:e2:f5:e4:d5:af: 1c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:48:6E:48:F0:6E:D8:A7:87:C7:CE:E2:A8:73:E7:64:0D:57:50:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d21d7c4-3716-32d4-8b69-65aecb294268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:eb:e5:92:a3:1c:af:26:8e:ac:05:11:9c:43:15:08:fd:f4: 1e:f4:93:ca:c8:0f:89:af:1b:aa:9a:05:62:01:8f:db:ff:0f: 49:0d:6e:9d:bc:b4:9f:10:5f:49:34:91:6a:b3:f0:9b:40:e5: ff:f7:1d:ac:49:38:07:e6:0e:2e:44:d6:72:92:3f:eb:4d:bc: 06:e7:c9:fd:2b:97:bb:35:d9:d1:80:42:98:9d:5b:7a:3a:33: b2:80:bb:60:b7:be:6b:7c:99:6a:94:cc:6f:d1:8e:e7:8c:87: d6:a5:52:82:e0:47:b0:da:10:ae:bd:23:40:e2:fb:02:6a:ec: cb:97:21:c0:e4:1f:8a:99:77:2c:98:ee:5d:dd:df:ed:fc:e9: 62:b5:19:57:d6:45:b1:84:10:0e:b6:e7:7b:03:fb:dd:32:1f: c3:d4:d0:d1:41:e5:f7:2a:8d:b4:32:b2:10:f6:f4:f0:c6:e2: 97:66:3d:77:01:54:a1:d3:9e:3e:a6:cd:dc:f2:51:67:2f:6b: 10:0e:67:6c:92:6e:b6:eb:1a:61:31:66:96:41:8a:0f:c4:8c: f9:d9:b0:ff:8b:d9:e3:ea:2f:01:11:79:e2:9d:9f:10:9e:67: 1f:6c:08:40:6c:f9:bb:a7:9e:5a:32:8d:3a:f9:8a:36:fb:ef: 00:1a:bb:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtatIVzEV3F8zeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZmMyZmY5YjYtOWQ0ZS00YjJkLWI5YWMtN2FlODFkM2RhYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4e9F+QFGwEOjPPhLilEX2sVkrbaBOowgU5H uyRt+TExPfs0lDlDmN9acFElFG4bmMj9uKLlnLmZCdKhfAUhfZhcYsggohPBsCMK +n8XQSB/gILH45Tt4Z6fGSBA2PFLCQ87QovMeRun2S7DjsUbzPflLOtjIjUVutmL BQ7iEqm0y9wcJwZ0X7x+JTdJhu+TsdHad1jV26O2cWJliut87wYR2yIjT35SBiNg WthCUsD7QDKYxGgio0AlOMtsqpJ4htoBLgBNEJpgW4xCKDXtKMr4vYZEH8BZBISS SLEwWZyyREb5wnekV7rfiL6jkSfKMfSzbjCqAxXn4vXk1a8cXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhIbkjwbtinh8fO4qhz52QNV1AfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWQyMWQ3YzQtMzcxNi0z MmQ0LThiNjktNjVhZWNiMjk0MjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3r5ZKjHK8mjqwFEZxDFQj99B70k8rID4mvG6qaBWIBj9v/D0kNbp28 tJ8QX0k0kWqz8JtA5f/3HaxJOAfmDi5E1nKSP+tNvAbnyf0rl7s12dGAQpidW3o6 M7KAu2C3vmt8mWqUzG/RjueMh9alUoLgR7DaEK69I0Di+wJq7MuXIcDkH4qZdyyY 7l3d3+386WK1GVfWRbGEEA6253sD+90yH8PU0NFB5fcqjbQyshD29PDG4pdmPXcB VKHTnj6mzdzyUWcvaxAOZ2ySbrbrGmExZpZBig/EjPnZsP+L2ePqLwEReeKdnxCe Zx9sCEBs+bunnloyjTr5ijb77wAauyI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:52 2025 by rpki-client