$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e0f0657-8ac0-366b-bb37-8cf2aaa8eca7.roa File: 1e0f0657-8ac0-366b-bb37-8cf2aaa8eca7.roa (raw, json) Hash identifier: VLCTt/yBEZaTd4L27aYUnZPr1GlmI/ZBe+7ysqwVYGA= Subject key identifier: B9:22:E6:A7:00:1E:C0:86:26:9C:4A:8A:34:31:D4:AC:79:A1:E0:CE Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E5A4A03C4D5B4AE93CAB7E680 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e0f0657-8ac0-366b-bb37-8cf2aaa8eca7.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 1225 IP address blocks: 165.254.42.160/27 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:03:c4:d5:b4:ae:93:ca:b7:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=c95532a4-caed-42d5-8d12-7f7ca202495a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:b5:62:30:e0:29:e0:3c:a1:9f:b2:83:fb: b9:d2:44:09:e1:ab:e7:27:83:ad:70:44:93:92:ed: 1b:99:39:3f:8b:da:66:99:dc:ef:4b:45:36:81:48: b4:c8:5f:b5:37:9d:d1:63:03:66:b9:0b:fc:f2:5e: b3:d8:c6:d9:4b:e3:0d:96:47:e3:19:3f:51:25:5c: c2:2d:5f:5e:e7:18:63:75:4c:29:7c:e6:81:ac:6b: ba:92:78:8f:a4:96:fb:69:7d:8e:37:16:7d:94:d7: f7:6d:58:20:5a:4f:b4:da:ee:89:8f:d5:59:66:16: f2:73:fb:1b:17:78:8a:69:ac:ff:20:3a:e5:25:6f: 1a:32:00:ea:7b:6e:88:cd:6d:f4:b8:49:84:a0:b5: 43:75:6f:bb:5a:b6:a3:3d:32:6e:99:04:2c:6a:a3: 25:5c:03:4c:0d:12:fa:6f:ae:72:b7:53:50:2d:95: 0f:2c:34:b6:aa:48:1d:cc:f9:9d:a5:0a:49:86:24: df:5b:48:ba:38:32:77:2e:e2:8d:ca:19:f2:8b:7f: b7:d2:b8:54:20:9a:2d:51:44:66:0e:ff:d8:34:4a: 06:ec:b0:7c:da:10:5f:b6:79:d0:a9:b0:46:aa:3a: 49:db:f1:e4:f6:ae:7d:9c:8c:96:02:24:5d:83:29: 3d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:22:E6:A7:00:1E:C0:86:26:9C:4A:8A:34:31:D4:AC:79:A1:E0:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e0f0657-8ac0-366b-bb37-8cf2aaa8eca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.42.160/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:4f:d5:2b:f7:04:17:4a:04:96:72:e4:76:13:0a:04:ef:dd: 5e:45:52:e4:16:55:34:12:db:59:01:26:de:19:cd:a7:e7:96: cf:63:f8:80:12:36:74:1e:1e:db:ec:35:17:fc:b3:cf:56:83: fe:a5:1e:6c:78:a9:29:4f:ce:8f:96:90:36:8f:c0:7a:78:82: b0:cb:cb:8b:51:24:43:ac:d4:b4:ab:79:5b:e4:e1:79:f6:7a: 0c:dc:3d:b3:69:ec:d5:47:6e:d2:72:ae:f8:a9:70:4d:49:50: 84:1c:28:6c:32:58:59:4f:9b:08:05:57:fa:7b:b6:76:93:3b: 7b:e0:96:2d:20:7b:8a:23:ca:5b:6c:4c:4c:99:84:94:a2:60: d8:7d:c8:51:6d:72:68:03:70:4d:90:bd:19:dd:f3:77:5f:d4: 20:cf:7c:13:51:f9:0c:f6:04:97:09:fc:97:4a:1b:8b:c4:0a: 6b:6a:2b:bc:64:07:08:64:b6:8f:15:24:1a:5e:2f:1b:be:1e: cb:dc:aa:2b:8a:59:13:2b:93:a7:9f:57:f8:fe:8b:ba:49:fb: 25:33:f8:5e:70:10:98:78:e6:ee:d4:12:4c:71:bc:4e:82:2d: 7f:a4:eb:a2:d6:72:0c:29:13:49:6d:91:9f:2e:b8:8d:0f:7e: 05:0d:22:2d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5aSgPE1bSuk8q35oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk Yzk1NTMyYTQtY2FlZC00MmQ1LThkMTItN2Y3Y2EyMDI0OTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMe1YjDgKeA8oZ+yg/u50kQJ4avnJ4OtcEST ku0bmTk/i9pmmdzvS0U2gUi0yF+1N53RYwNmuQv88l6z2MbZS+MNlkfjGT9RJVzC LV9e5xhjdUwpfOaBrGu6kniPpJb7aX2ONxZ9lNf3bVggWk+02u6Jj9VZZhbyc/sb F3iKaaz/IDrlJW8aMgDqe26IzW30uEmEoLVDdW+7WrajPTJumQQsaqMlXANMDRL6 b65yt1NQLZUPLDS2qkgdzPmdpQpJhiTfW0i6ODJ3LuKNyhnyi3+30rhUIJotUURm Dv/YNEoG7LB82hBftnnQqbBGqjpJ2/Hk9q59nIyWAiRdgyk9sQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLki5qcAHsCGJpxKijQx1Kx5oeDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWUwZjA2NTctOGFjMC0z NjZiLWJiMzctOGNmMmFhYThlY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFpf4qoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALT9Ur9wQXSgSWcuR2EwoE791eRVLkFlU0EttZASbeGc2n55bPY/iA EjZ0Hh7b7DUX/LPPVoP+pR5seKkpT86PlpA2j8B6eIKwy8uLUSRDrNS0q3lb5OF5 9noM3D2zaezVR27Scq74qXBNSVCEHChsMlhZT5sIBVf6e7Z2kzt74JYtIHuKI8pb bExMmYSUomDYfchRbXJoA3BNkL0Z3fN3X9Qgz3wTUfkM9gSXCfyXShuLxApraiu8 ZAcIZLaPFSQaXi8bvh7L3KorilkTK5Onn1f4/ou6SfslM/hecBCYeObu1BJMcbxO gi1/pOui1nIMKRNJbZGfLriND34FDSIt -----END CERTIFICATE-----Generated at Fri Jul 24 00:25:18 2026 by rpki-client