$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa File: 0eddf336-ce40-3272-ba3f-78607f29de84.roa (raw, json) Hash identifier: +Em0pVdG5p9R5wZKWxUPeoyyN/eIGiVahlMoMOOEMRc= Subject key identifier: 99:C9:68:F5:B7:AA:2A:BE:D6:83:1F:F2:9E:6A:5C:FA:A6:AC:92:F6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD9365DA589E384B65AB9CC80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 165.254.23.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5d:a5:89:e3:84:b6:5a:b9:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=bd2fbab9-27c7-4a1b-b51d-cf937226e841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1c:9c:b5:cb:ad:78:d2:b4:fe:59:7a:0c:87: 79:7c:c7:f2:1c:e1:57:2e:1b:2f:ed:82:6f:bc:c8: 79:5a:8c:d4:3f:31:36:1e:b5:45:23:bf:ce:e2:d6: fd:93:a0:93:fd:c0:f5:2c:94:02:4f:50:88:32:45: 36:97:6b:97:99:5d:64:81:ed:2b:9d:fd:68:68:8d: 24:1b:43:d0:40:53:71:bf:66:b8:7e:ec:be:28:69: 3c:fd:06:d9:21:9d:79:c6:4c:d4:49:9b:fe:e0:11: dc:04:c9:1c:e7:4e:b0:db:fd:76:f0:06:57:a6:55: 97:57:0b:65:f3:63:8c:88:8e:d2:d6:4f:7d:09:c1: 1d:7d:58:91:c5:6d:2d:c4:65:6d:8d:fa:f5:b4:36: 83:29:92:54:ee:df:cf:2d:4c:87:12:ea:b8:ee:9a: 5c:6d:59:42:5c:82:27:db:35:55:8d:f6:e4:86:23: df:ff:7c:04:a0:02:a4:ee:a4:e8:47:a9:64:42:72: 0d:cf:f7:55:27:fa:83:64:bd:9a:5d:df:9c:52:94: a7:38:a0:c2:44:8b:9b:18:1f:f3:ee:92:77:3a:f2: 92:7e:a9:1d:37:21:61:1b:cf:7e:d4:6f:f4:1a:02: 3b:ac:e2:7f:2b:57:f3:10:a5:38:4a:4e:33:0f:a7: 99:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C9:68:F5:B7:AA:2A:BE:D6:83:1F:F2:9E:6A:5C:FA:A6:AC:92:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.23.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:bd:76:1a:6b:e4:aa:34:f0:60:15:7c:b0:ff:c8:97:4e:0b: d5:a0:cc:5e:b7:e1:a4:0c:a9:16:23:2e:ab:87:9a:b7:05:1b: ee:ec:13:49:d9:fa:f4:bc:d5:b1:4c:6f:d1:c1:12:90:27:5c: 44:79:1e:0d:b0:af:44:fa:da:8c:dd:71:ed:30:45:31:ad:74: b7:57:62:33:5f:e0:75:10:8f:22:c3:a2:2e:b0:a4:4a:95:6c: b1:04:de:24:08:91:df:6d:3b:83:e1:89:d6:ad:4c:23:a7:b3: 16:e5:03:4c:aa:94:fb:30:fe:23:d1:a1:f7:84:b8:6b:ab:dc: 35:fe:1d:82:2f:f7:e5:a0:0e:f9:29:d6:10:2e:2c:23:50:12: 25:90:5a:af:b2:53:2e:a1:97:c3:4e:83:47:6e:9b:78:98:7b: d5:41:85:66:f7:9b:93:59:1c:f3:38:93:43:90:4e:ed:a4:45: 18:70:98:af:bd:e0:b1:13:4e:30:90:ac:c1:1f:3b:df:8d:40: c8:1a:15:fe:d8:20:de:68:85:27:75:16:52:12:c3:7f:9c:39: 48:5e:f7:58:f4:f5:92:50:7e:1c:28:3a:31:b1:ff:65:fc:a0: a0:a9:e1:0a:33:9d:98:42:5d:c9:d1:bc:b3:87:b7:c0:77:31: 72:f7:48:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErZNl2lieOEtlq5zIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YmQyZmJhYjktMjdjNy00YTFiLWI1MWQtY2Y5MzcyMjZlODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhyctcuteNK0/ll6DId5fMfyHOFXLhsv7YJv vMh5WozUPzE2HrVFI7/O4tb9k6CT/cD1LJQCT1CIMkU2l2uXmV1kge0rnf1oaI0k G0PQQFNxv2a4fuy+KGk8/QbZIZ15xkzUSZv+4BHcBMkc506w2/128AZXplWXVwtl 82OMiI7S1k99CcEdfViRxW0txGVtjfr1tDaDKZJU7t/PLUyHEuq47ppcbVlCXIIn 2zVVjfbkhiPf/3wEoAKk7qToR6lkQnINz/dVJ/qDZL2aXd+cUpSnOKDCRIubGB/z 7pJ3OvKSfqkdNyFhG89+1G/0GgI7rOJ/K1fzEKU4Sk4zD6eZ8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJnJaPW3qiq+1oMf8p5qXPqmrJL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGVkZGYzMzYtY2U0MC0z MjcyLWJhM2YtNzg2MDdmMjlkZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf4XADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0vXYaa+SqNPBgFXyw/8iXTgvVoMxet+GkDKkWIy6rh5q3BRvu7BNJ 2fr0vNWxTG/RwRKQJ1xEeR4NsK9E+tqM3XHtMEUxrXS3V2IzX+B1EI8iw6IusKRK lWyxBN4kCJHfbTuD4YnWrUwjp7MW5QNMqpT7MP4j0aH3hLhrq9w1/h2CL/floA75 KdYQLiwjUBIlkFqvslMuoZfDToNHbpt4mHvVQYVm95uTWRzzOJNDkE7tpEUYcJiv veCxE04wkKzBHzvfjUDIGhX+2CDeaIUndRZSEsN/nDlIXvdY9PWSUH4cKDoxsf9l /KCgqeEKM52YQl3J0byzh7fAdzFy90hI -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:53 2025 by rpki-client