$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa File: 2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa (raw, json) Hash identifier: XHpfeThf7v6lcvCR0ZBwnTtfpIdRFK9Bx0+jv7JCNfo= Subject key identifier: 62:35:84:95:EA:88:1D:BE:C1:88:DF:0D:B0:A4:49:D4:07:08:3D:B5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B4081AACA625FDDA6E2BAFFE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 399641 IP address blocks: 165.254.23.224/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:aa:ca:62:5f:dd:a6:e2:ba:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=69e25c9b-794a-49a2-a8c8-b29dc053a4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:62:94:e1:47:e0:47:b0:ac:26:bb:41:a0: 79:1f:b1:e8:bb:2c:0d:ff:46:01:4c:ae:50:48:b2: f7:7f:b9:d3:ef:3c:ba:00:87:00:3a:27:0b:d0:e9: fa:44:53:06:a7:25:fe:33:24:b0:07:13:dd:6b:e3: f1:10:32:35:62:61:c4:35:ed:3b:5c:a7:ca:a0:4d: 6b:96:5b:fd:ca:60:bf:37:ec:8a:f7:88:0b:42:bd: 18:c8:b0:fa:3b:f8:81:07:74:b1:3d:17:ef:d7:04: 85:cc:a2:f6:4d:1d:4d:92:cf:10:46:cc:f2:e5:7d: b7:9f:d8:8f:e3:f6:91:48:51:e0:d4:72:d1:bc:fa: fb:36:7d:90:03:9e:77:dd:dc:63:4c:69:23:77:c3: 3a:c4:cb:ad:96:1f:9b:5e:db:1e:fa:8b:da:b5:51: 84:29:7b:8a:be:3d:fa:02:bb:d1:a2:3e:70:ad:7a: 0f:e6:01:47:21:0c:03:86:c6:a2:60:97:f3:19:a3: a9:7f:09:92:af:f3:c2:5a:74:4f:14:77:75:26:52: d2:ef:28:6c:1f:08:fe:61:db:77:6c:3e:00:d1:6a: 78:f0:a6:e0:b6:03:62:ed:a0:5a:ca:3a:66:c8:d1: 91:d9:bd:c5:76:d6:4b:c3:2b:b1:74:ff:c8:ea:2a: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:35:84:95:EA:88:1D:BE:C1:88:DF:0D:B0:A4:49:D4:07:08:3D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.23.224/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b8:d5:1b:be:75:36:15:c9:4f:44:68:c2:56:38:81:5b:0e: cb:48:e0:07:0a:bb:15:ad:2e:76:7f:0e:76:7c:41:ef:dd:93: 05:a1:33:1f:aa:c9:8c:f5:ad:64:da:59:a1:cf:5a:ae:07:41: cd:de:97:92:d8:13:32:2f:cf:95:c8:5b:83:a3:b4:19:2b:b8: be:65:ef:07:50:c8:30:27:85:ef:bf:4c:bc:cd:41:bd:4c:7c: 4f:cd:76:4b:de:f3:93:5a:0e:bc:55:0c:bd:44:11:f4:24:af: b7:4c:1a:5e:5a:20:ac:16:02:2b:4c:00:11:a6:e3:0d:6c:63: aa:a7:e7:46:39:8a:54:ad:f6:6a:ae:9b:3a:0b:39:fb:b0:23: 65:31:cf:75:fa:62:c3:57:ce:b2:99:87:9b:f0:8c:59:30:81: 5a:07:18:1b:1b:eb:c2:37:8c:a1:e2:2c:e9:6b:a1:09:54:c3: 92:f1:9b:4a:cb:1d:5a:ce:66:ef:8c:02:c1:60:ad:0e:c2:f1: 6e:61:7c:45:b8:5a:30:5d:1c:20:e6:3d:e9:00:87:ca:25:ec: f4:a7:2c:b9:c4:21:26:db:92:95:c6:c7:6b:98:18:54:a2:72: bb:d9:b9:d1:88:e4:45:67:0f:6f:dc:88:de:7e:54:21:80:87: ec:fb:cf:75 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtAgarKYl/dpuK6/+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NjllMjVjOWItNzk0YS00OWEyLWE4YzgtYjI5ZGMwNTNhNGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE5ilOFH4EewrCa7QaB5H7HouywN/0YBTK5Q SLL3f7nT7zy6AIcAOicL0On6RFMGpyX+MySwBxPda+PxEDI1YmHENe07XKfKoE1r llv9ymC/N+yK94gLQr0YyLD6O/iBB3SxPRfv1wSFzKL2TR1Nks8QRszy5X23n9iP 4/aRSFHg1HLRvPr7Nn2QA5533dxjTGkjd8M6xMutlh+bXtse+ovatVGEKXuKvj36 ArvRoj5wrXoP5gFHIQwDhsaiYJfzGaOpfwmSr/PCWnRPFHd1JlLS7yhsHwj+Ydt3 bD4A0Wp48KbgtgNi7aBayjpmyNGR2b3FdtZLwyuxdP/I6ioWzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGI1hJXqiB2+wYjfDbCkSdQHCD21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmZmMGI5OGItYzhiNy0z N2IzLWI2YmItMjdkNzU5OTdkYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEpf4X4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8uNUbvnU2FclPRGjCVjiBWw7LSOAHCrsVrS52fw52fEHv3ZMFoTMf qsmM9a1k2lmhz1quB0HN3peS2BMyL8+VyFuDo7QZK7i+Ze8HUMgwJ4Xvv0y8zUG9 THxPzXZL3vOTWg68VQy9RBH0JK+3TBpeWiCsFgIrTAARpuMNbGOqp+dGOYpUrfZq rps6Czn7sCNlMc91+mLDV86ymYeb8IxZMIFaBxgbG+vCN4yh4izpa6EJVMOS8ZtK yx1azmbvjALBYK0OwvFuYXxFuFowXRwg5j3pAIfKJez0pyy5xCEm25KVxsdrmBhU onK72bnRiORFZw9v3IjeflQhgIfs+891 -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:13 2025 by rpki-client