$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b400e87e-018c-3e74-a61d-6416c06baf20.roa File: b400e87e-018c-3e74-a61d-6416c06baf20.roa (raw, json) Hash identifier: HXpfXdaQMCm6TlNoxAGCInTI/WTHS25hxqfqgo0NGFU= Subject key identifier: B7:FA:FA:79:F4:DC:F0:45:CB:6C:42:D8:F0:72:EB:C9:0D:6A:53:C5 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584AE9F667E3FA66D4D3D69494C0 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b400e87e-018c-3e74-a61d-6416c06baf20.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 395963 IP address blocks: 205.213.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:67:e3:fa:66:d4:d3:d6:94:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=af574398-7bcb-4967-a828-6e7942a899b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:18:df:eb:e2:77:d7:5d:04:c3:5a:62:dc:f5: c7:0d:ac:f6:1c:12:e7:18:c1:c7:39:f4:b2:e3:26: f3:48:e1:42:5d:73:a2:5c:b1:2f:22:98:f6:0f:94: 5b:b2:60:e6:f7:a1:00:55:19:52:13:66:d4:ce:3c: bd:cd:8a:11:7a:41:f0:9a:21:20:77:c5:46:38:49: 3f:3f:26:b5:1b:e0:2a:e2:7e:94:f7:23:c6:d0:ab: 50:d8:bb:ff:bb:33:c1:b4:fc:03:e3:e1:97:17:21: fc:76:41:1b:f8:65:3e:06:3c:4d:5c:aa:4e:27:ce: 5d:f7:a1:91:2b:fa:78:bf:75:20:40:03:f0:02:2f: 3e:6d:81:06:50:e7:c4:90:aa:b8:97:90:21:17:d6: ff:e9:51:e8:84:5f:09:38:80:3e:cd:28:2a:1a:ef: 9b:1f:98:45:21:2c:de:bc:04:a1:6d:c4:16:d0:3e: 1b:ac:fd:de:f4:b9:43:ef:bb:62:71:9f:2c:ef:82: b7:de:e3:e7:74:28:74:47:92:b8:26:71:02:b9:56: 79:a9:41:5c:4f:24:12:3d:ee:97:44:5a:16:21:65: b1:85:b4:92:a7:d5:4f:db:15:7b:ce:0c:5d:88:b0: 02:2b:84:55:1a:87:7e:6f:9c:00:7d:a9:3a:ef:50: 63:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FA:FA:79:F4:DC:F0:45:CB:6C:42:D8:F0:72:EB:C9:0D:6A:53:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b400e87e-018c-3e74-a61d-6416c06baf20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 205.213.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:08:11:b1:87:e7:4e:97:e7:09:ef:fa:62:7c:ea:cf:c1:a0: 24:1a:d8:f5:34:00:bf:0b:77:1c:63:0a:20:75:9e:17:91:15: 6c:86:8c:61:8d:80:be:77:0d:83:94:f1:5f:f9:76:7c:4f:f5: fd:7c:0b:28:b9:79:fb:ad:6d:f6:da:4b:ad:e4:5f:1d:3d:ac: 6e:97:55:64:9e:f0:30:df:99:06:89:38:0c:dd:f6:9a:7b:d9: 04:d9:2d:e1:7e:80:ad:8f:10:8d:b3:ab:77:d2:4f:67:8b:47: 10:8b:7c:5f:be:45:8e:ff:b3:ef:fd:e9:33:1f:ed:88:89:96: 71:14:9f:bc:a8:2a:ae:97:f1:2b:7c:5c:4c:49:63:2d:23:e1: 10:ac:71:50:cc:9e:af:f5:aa:79:7e:c8:41:a0:74:12:8f:1e: 83:26:11:6c:0c:2a:d7:22:0e:fb:36:eb:4c:8f:6d:f3:ef:79: 36:d6:b5:02:84:3a:84:75:1f:3c:e4:e0:24:b3:d8:53:95:93: 61:72:81:7d:62:d4:fc:99:6a:d6:97:b5:65:1e:6f:28:7d:34: c6:27:a1:2e:24:b9:cd:01:c8:22:83:b2:1b:48:b9:c3:60:1a: 15:34:58:46:87:ba:c5:4d:d5:96:50:40:3a:36:a6:b2:42:8a: 21:50:3f:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9mfj+mbU09aUlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk YWY1NzQzOTgtN2JjYi00OTY3LWE4MjgtNmU3OTQyYTg5OWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohjf6+J3110Ew1pi3PXHDaz2HBLnGMHHOfSy 4ybzSOFCXXOiXLEvIpj2D5RbsmDm96EAVRlSE2bUzjy9zYoRekHwmiEgd8VGOEk/ Pya1G+Aq4n6U9yPG0KtQ2Lv/uzPBtPwD4+GXFyH8dkEb+GU+BjxNXKpOJ85d96GR K/p4v3UgQAPwAi8+bYEGUOfEkKq4l5AhF9b/6VHohF8JOIA+zSgqGu+bH5hFISze vAShbcQW0D4brP3e9LlD77ticZ8s74K33uPndCh0R5K4JnECuVZ5qUFcTyQSPe6X RFoWIWWxhbSSp9VP2xV7zgxdiLACK4RVGod+b5wAfak671BjLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLf6+nn03PBFy2xC2PBy68kNalPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvYjQwMGU4N2UtMDE4Yy0z ZTc0LWE2MWQtNjQxNmMwNmJhZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzdUDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAIEbGH506X5wnv+mJ86s/BoCQa2PU0AL8LdxxjCiB1nheRFWyGjGGN gL53DYOU8V/5dnxP9f18Cyi5efutbfbaS63kXx09rG6XVWSe8DDfmQaJOAzd9pp7 2QTZLeF+gK2PEI2zq3fST2eLRxCLfF++RY7/s+/96TMf7YiJlnEUn7yoKq6X8St8 XExJYy0j4RCscVDMnq/1qnl+yEGgdBKPHoMmEWwMKtciDvs260yPbfPveTbWtQKE OoR1Hzzk4CSz2FOVk2FygX1i1PyZataXtWUebyh9NMYnoS4kuc0ByCKDshtIucNg GhU0WEaHusVN1ZZQQDo2prJCiiFQP3o= -----END CERTIFICATE-----Generated at Wed Nov 5 22:32:18 2025 by rpki-client