$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e89a162-ec07-3fce-9bb8-b47052e1dbe6.roa File: 2e89a162-ec07-3fce-9bb8-b47052e1dbe6.roa (raw, json) Hash identifier: xQ8dXi6IISyUtu+R/4FDkKbFjTnajXgQ8YfjtkjdcdQ= Subject key identifier: C0:55:E7:DA:7B:42:44:FE:1C:D3:F8:3B:86:0B:17:6C:EE:C6:7A:E5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584ADD667D4BDC7C6605626CD960 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e89a162-ec07-3fce-9bb8-b47052e1dbe6.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 165.254.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:7d:4b:dc:7c:66:05:62:6c:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=8eb51f9c-86de-46c2-8282-11b14aefdc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:72:9c:81:a8:8a:ff:02:42:d9:10:5d:2d: 17:d5:45:0f:23:30:57:23:af:3a:28:6f:95:87:ad: c9:9f:0d:8a:8e:f4:d2:85:0d:b2:f3:7e:8b:41:fc: a0:1e:4d:a9:be:4b:29:09:22:30:15:ee:6b:3f:b0: e9:41:0e:25:8d:87:30:31:89:67:8d:58:79:65:71: b4:1c:28:79:95:f2:b7:1c:22:b4:34:0c:5e:20:b2: 58:2f:18:af:39:cd:56:31:4c:c2:16:3a:7b:d9:64: da:08:e7:03:0c:9b:7a:b2:78:58:b9:00:70:96:da: ca:2b:83:1a:7e:5e:e4:e7:3f:07:72:d2:34:64:e7: 50:62:78:12:f3:65:89:68:f9:ef:a3:32:02:5d:29: bc:d4:40:ed:c5:49:e8:14:39:c5:59:d7:e5:db:d4: c8:19:de:53:83:34:a0:5b:13:d8:6b:22:19:10:74: c3:50:ce:ff:11:9f:1d:0f:aa:da:cb:27:e0:cf:4d: 76:a1:33:1e:2b:d3:ed:4c:30:9c:a2:ab:93:1d:b4: 65:f3:b3:e5:62:44:ad:83:68:47:ff:98:a1:59:35: 49:f9:cf:3a:47:2b:12:d2:98:e4:2e:2a:77:7f:2d: 8e:14:bb:2a:1b:58:52:ef:cf:d6:e4:77:18:14:8b: bc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:55:E7:DA:7B:42:44:FE:1C:D3:F8:3B:86:0B:17:6C:EE:C6:7A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e89a162-ec07-3fce-9bb8-b47052e1dbe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:dd:fc:93:b2:5d:7d:38:81:44:35:66:33:2f:57:5e:83:ec: b4:68:c2:86:f4:02:0f:ce:39:4e:6e:20:70:dd:93:8c:b3:ad: 95:9f:89:39:25:c7:c2:1e:ea:ce:b8:d2:3f:bb:3b:b1:be:82: a3:02:b7:dc:35:b2:e6:8f:7d:bc:6e:5d:80:fb:98:88:c9:de: 29:20:8c:ee:bf:e6:f7:6c:82:56:4c:e1:e8:6c:0f:83:d2:c2: 25:34:e6:73:0c:34:ba:b5:d5:91:69:78:8d:3d:b2:ec:d2:8b: 4b:62:ff:17:93:ad:49:c2:5a:87:1b:9f:1c:cd:e5:ab:dc:6d: 45:d1:c2:ac:fe:c4:8d:e3:a8:91:60:f1:a8:65:af:6a:2e:80: 4a:0e:f1:62:7b:69:c8:eb:37:b8:c4:11:08:97:ee:33:82:7a: 7a:f8:ba:ee:b5:44:70:c8:6d:20:fd:29:c5:39:77:9d:55:62: 76:5e:6f:f4:16:61:b8:c1:ac:e2:a2:f2:43:90:f0:59:56:cf: 19:c0:4a:b1:c9:63:28:e0:6c:7b:55:19:7a:ad:57:30:a9:ab: 21:93:df:eb:28:8f:a4:5a:c2:8e:68:11:92:9f:02:99:c6:52: 0e:6e:95:0e:cf:4a:3b:6d:23:06:2a:6e:33:e1:de:d3:47:e9: 6e:7c:da:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZn1L3HxmBWJs2WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk OGViNTFmOWMtODZkZS00NmMyLTgyODItMTFiMTRhZWZkYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7hynIGoiv8CQtkQXS0X1UUPIzBXI686KG+V h63Jnw2KjvTShQ2y836LQfygHk2pvkspCSIwFe5rP7DpQQ4ljYcwMYlnjVh5ZXG0 HCh5lfK3HCK0NAxeILJYLxivOc1WMUzCFjp72WTaCOcDDJt6snhYuQBwltrKK4Ma fl7k5z8HctI0ZOdQYngS82WJaPnvozICXSm81EDtxUnoFDnFWdfl29TIGd5TgzSg WxPYayIZEHTDUM7/EZ8dD6rayyfgz012oTMeK9PtTDCcoquTHbRl87PlYkStg2hH /5ihWTVJ+c86RysS0pjkLip3fy2OFLsqG1hS78/W5HcYFIu8OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBV59p7QkT+HNP4O4YLF2zuxnrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmU4OWExNjItZWMwNy0z ZmNlLTliYjgtYjQ3MDUyZTFkYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHd/JOyXX04gUQ1ZjMvV16D7LRowob0Ag/OOU5uIHDdk4yzrZWfiTkl x8Ie6s640j+7O7G+gqMCt9w1suaPfbxuXYD7mIjJ3ikgjO6/5vdsglZM4ehsD4PS wiU05nMMNLq11ZFpeI09suzSi0ti/xeTrUnCWocbnxzN5avcbUXRwqz+xI3jqJFg 8ahlr2ougEoO8WJ7acjrN7jEEQiX7jOCenr4uu61RHDIbSD9KcU5d51VYnZeb/QW YbjBrOKi8kOQ8FlWzxnASrHJYyjgbHtVGXqtVzCpqyGT3+soj6Rawo5oEZKfApnG Ug5ulQ7PSjttIwYqbjPh3tNH6W582s0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:02:26 2025 by rpki-client