$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7f8e8354-2acd-337f-b4e9-f444cc01e04d.roa File: 7f8e8354-2acd-337f-b4e9-f444cc01e04d.roa (raw, json) Hash identifier: AWZO0bmHcb7YWaBobV4mKDV4etpzXhiz9WXCO+Qf2Ys= Subject key identifier: 72:5E:07:9C:78:12:B2:C7:45:B7:37:47:95:14:82:88:C6:40:90:B7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A8575EC2F5A03E296A74E35D8 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7f8e8354-2acd-337f-b4e9-f444cc01e04d.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 18683 IP address blocks: 204.141.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:ec:2f:5a:03:e2:96:a7:4e:35:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=532b9e65-02ba-4cb7-9db5-28d9eaa8c871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:29:c2:14:bb:81:d5:3b:9c:09:e8:e6:91:3b: ce:f1:0e:01:68:6f:9d:99:5a:f3:4f:ec:29:53:aa: 75:1d:d9:b6:bd:fe:26:cb:b7:38:e2:74:6c:05:39: 19:f7:3f:da:87:2c:c2:22:e7:53:b3:10:26:0a:90: 2d:dd:17:16:e8:fb:6e:56:81:0c:d8:b6:6e:13:90: 42:25:74:2d:ac:12:8e:63:89:8a:d6:99:58:17:fc: c9:b4:06:fe:e5:c2:fd:9d:1b:07:a5:80:8c:c0:1f: 47:0c:7f:00:93:0c:d6:fa:9e:e6:54:47:5c:73:ee: f2:80:3b:99:b9:88:98:c2:25:48:e5:06:82:b4:07: 08:70:f8:6c:c9:16:d5:53:63:81:d9:e6:5a:e8:bb: 3f:19:f7:a7:23:1c:62:0a:53:bf:b1:67:b0:24:65: 48:ca:3d:e5:32:39:05:9b:c5:d1:1f:f0:84:a0:9a: 72:38:19:eb:fd:bb:c0:9c:89:56:98:b9:42:b8:0d: 0e:9f:88:1f:a8:26:e3:be:60:e7:e7:06:fc:49:a9: e8:5d:65:ae:ee:1b:ae:3e:fa:8f:c9:61:81:45:5a: 86:57:98:c0:ce:08:c5:27:16:c3:c2:a3:30:d9:b4: 62:f2:27:7d:1d:2a:e8:d9:60:53:59:5e:69:f7:ed: c3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5E:07:9C:78:12:B2:C7:45:B7:37:47:95:14:82:88:C6:40:90:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7f8e8354-2acd-337f-b4e9-f444cc01e04d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ee:c8:1e:a2:c9:d2:d9:c0:ed:61:ee:5a:59:e7:21:03:9c: cc:4f:f2:75:17:48:68:3d:2d:79:56:cc:b3:75:56:6d:b9:4d: b9:9e:b6:8f:21:b0:27:71:0d:e2:1e:0f:07:81:3f:c1:2b:56: 70:f5:53:5a:db:db:5e:19:9d:61:37:1d:18:d9:b9:7c:6c:8c: 6f:20:4e:c4:62:c6:aa:9d:32:79:58:85:38:21:08:1f:12:5c: 24:59:62:4c:03:ac:bc:f8:3e:f9:50:02:fa:74:d5:6e:d8:d7: 9d:c9:34:a7:33:de:e1:fe:67:73:5b:d6:3b:07:6d:f9:4d:64: dd:e2:03:4e:f4:67:9d:95:1c:3e:66:0f:b1:a8:fa:8a:f8:ad: fc:0f:63:31:89:0a:95:4b:bc:ec:87:e4:da:a8:21:35:78:68: 0f:1e:f9:f1:8d:8a:c8:cb:d5:75:ea:b3:ed:fd:23:e6:7b:19: 3d:59:8f:75:ec:4c:f3:74:96:f5:ed:b3:3f:c4:a9:a5:d5:34: 26:a0:e8:59:29:fa:00:ae:c6:f5:59:08:38:2d:71:28:c9:e5: 45:61:07:06:b2:47:fa:05:98:63:d6:f5:29:43:11:d2:45:11: 05:77:51:ae:d1:ac:6b:02:47:99:ef:54:e4:40:64:6f:d6:29: c5:83:5e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdewvWgPilqdONdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk NTMyYjllNjUtMDJiYS00Y2I3LTlkYjUtMjhkOWVhYThjODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAginCFLuB1TucCejmkTvO8Q4BaG+dmVrzT+wp U6p1Hdm2vf4my7c44nRsBTkZ9z/ahyzCIudTsxAmCpAt3RcW6PtuVoEM2LZuE5BC JXQtrBKOY4mK1plYF/zJtAb+5cL9nRsHpYCMwB9HDH8AkwzW+p7mVEdcc+7ygDuZ uYiYwiVI5QaCtAcIcPhsyRbVU2OB2eZa6Ls/GfenIxxiClO/sWewJGVIyj3lMjkF m8XRH/CEoJpyOBnr/bvAnIlWmLlCuA0On4gfqCbjvmDn5wb8SanoXWWu7huuPvqP yWGBRVqGV5jAzgjFJxbDwqMw2bRi8id9HSro2WBTWV5p9+3D0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJeB5x4ErLHRbc3R5UUgojGQJC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvN2Y4ZTgzNTQtMmFjZC0z MzdmLWI0ZTktZjQ0NGNjMDFlMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzI0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHuyB6iydLZwO1h7lpZ5yEDnMxP8nUXSGg9LXlWzLN1Vm25Tbmeto8h sCdxDeIeDweBP8ErVnD1U1rb214ZnWE3HRjZuXxsjG8gTsRixqqdMnlYhTghCB8S XCRZYkwDrLz4PvlQAvp01W7Y153JNKcz3uH+Z3Nb1jsHbflNZN3iA070Z52VHD5m D7Go+or4rfwPYzGJCpVLvOyH5NqoITV4aA8e+fGNisjL1XXqs+39I+Z7GT1Zj3Xs TPN0lvXtsz/EqaXVNCag6Fkp+gCuxvVZCDgtcSjJ5UVhBwayR/oFmGPW9SlDEdJF EQV3Ua7RrGsCR5nvVORAZG/WKcWDXpc= -----END CERTIFICATE-----Generated at Tue Aug 5 23:02:04 2025 by rpki-client