$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4a8389c0-05b5-3cc9-9a47-2f2467400b31.roa File: 4a8389c0-05b5-3cc9-9a47-2f2467400b31.roa (raw, json) Hash identifier: CiqRyo4sHD5LdKAXwjd89RNrxozzGiXAbZpu/Pr1ZH0= Subject key identifier: 66:77:D7:65:00:BA:F4:3C:54:19:F9:6F:3C:26:B2:B5:67:A1:00:5D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E66DA13A7E1FB33128F16C800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4a8389c0-05b5-3cc9-9a47-2f2467400b31.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 399469 IP address blocks: 165.254.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:13:a7:e1:fb:33:12:8f:16:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=870e1a53-0961-4cd6-8d76-ebdc4ef42893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6f:ef:83:13:f6:f2:18:ad:65:b1:f5:43:cb: e5:bb:65:45:01:9c:fe:2a:79:bd:47:dd:70:06:39: fc:ca:22:00:82:f6:46:f2:87:54:8e:7d:78:b3:cb: eb:7d:d0:e1:ee:b6:65:11:3a:4d:19:a7:6b:fb:4b: 8e:75:d9:1f:d4:6f:00:1e:a8:69:bb:c7:74:1e:d9: 9c:ba:90:29:cd:e2:9f:3d:11:be:ee:6d:b7:ac:ed: 9e:02:49:31:8c:30:f7:e9:62:51:92:ca:7a:50:1a: 21:0a:c4:3d:dd:ed:1d:89:a0:a9:ab:bd:13:de:5c: 6b:cf:10:02:09:91:e0:c2:18:23:48:16:d0:7d:85: ee:df:bd:4b:84:df:86:e8:cc:6f:cb:db:95:07:97: 05:d6:1c:0e:1b:69:ba:2b:79:df:ce:22:5f:e7:fe: 07:5f:cf:35:dd:1f:44:2c:bd:eb:15:67:53:ef:7b: 25:4d:2f:f6:1e:3d:5b:c6:85:9b:de:0b:9b:78:d6: cc:4f:4d:ad:6b:4b:3f:a6:03:05:09:ca:9a:10:68: 9f:42:ee:06:8a:1c:ee:cc:00:5a:74:cd:39:ff:6c: c8:90:7b:1b:c1:24:2d:55:30:f9:e6:66:f8:b8:79: dd:5a:d0:f3:2c:23:56:3c:20:f6:0d:8f:1a:a8:86: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:77:D7:65:00:BA:F4:3C:54:19:F9:6F:3C:26:B2:B5:67:A1:00:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4a8389c0-05b5-3cc9-9a47-2f2467400b31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:44:42:0b:9f:af:4a:54:a7:46:af:ab:bf:c0:b9:42:8d:d5: 57:6e:89:6e:83:0d:0c:44:d9:b0:2a:07:80:cd:91:0e:80:d8: 6b:0c:ac:33:58:94:33:f0:6c:9a:1b:01:e1:b6:62:ac:47:ae: cd:1c:b4:49:93:af:ce:91:7a:3e:18:d1:69:a5:60:12:72:09: 65:46:c3:8d:2d:f5:eb:84:f4:d8:3a:93:f1:e7:30:e5:ee:70: 19:8c:3b:57:a8:31:ad:d7:e1:b4:29:35:1f:85:7b:ee:9c:da: 5e:18:4a:f4:6f:12:42:9f:b3:73:12:24:8b:ac:64:22:59:a4: f3:df:5d:70:47:4a:72:e7:5b:9c:f1:b2:80:da:31:6d:14:8b: 12:3a:20:8b:9e:41:8e:49:18:78:64:dc:2f:ab:7f:8c:3a:53: 86:f9:6f:3d:99:9a:a0:1d:2c:2d:83:55:4b:d5:f0:16:a9:75: d0:5f:17:a1:1f:0c:07:65:25:1f:7a:d8:1a:c4:71:0f:20:7d: 41:a7:78:03:20:c9:e2:0f:34:d4:12:57:64:7d:ba:0e:4a:6c: 05:dc:26:c7:cf:d7:a0:f8:a2:9a:2f:57:5f:0f:23:8f:fe:1b: 7a:42:f8:9d:68:d0:05:38:98:d7:86:9e:a7:fa:04:cf:6c:e5: 20:ce:53:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hOn4fszEo8WyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ODcwZTFhNTMtMDk2MS00Y2Q2LThkNzYtZWJkYzRlZjQyODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm/vgxP28hitZbH1Q8vlu2VFAZz+Knm9R91w Bjn8yiIAgvZG8odUjn14s8vrfdDh7rZlETpNGadr+0uOddkf1G8AHqhpu8d0Htmc upApzeKfPRG+7m23rO2eAkkxjDD36WJRksp6UBohCsQ93e0diaCpq70T3lxrzxAC CZHgwhgjSBbQfYXu371LhN+G6Mxvy9uVB5cF1hwOG2m6K3nfziJf5/4HX8813R9E LL3rFWdT73slTS/2Hj1bxoWb3gubeNbMT02ta0s/pgMFCcqaEGifQu4GihzuzABa dM05/2zIkHsbwSQtVTD55mb4uHndWtDzLCNWPCD2DY8aqIa0qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZ312UAuvQ8VBn5bzwmsrVnoQBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGE4Mzg5YzAtMDViNS0z Y2M5LTlhNDctMmYyNDY3NDAwYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhEQgufr0pUp0avq7/AuUKN1VduiW6DDQxE2bAqB4DNkQ6A2GsMrDNY lDPwbJobAeG2YqxHrs0ctEmTr86Rej4Y0WmlYBJyCWVGw40t9euE9Ng6k/HnMOXu cBmMO1eoMa3X4bQpNR+Fe+6c2l4YSvRvEkKfs3MSJIusZCJZpPPfXXBHSnLnW5zx soDaMW0UixI6IIueQY5JGHhk3C+rf4w6U4b5bz2ZmqAdLC2DVUvV8BapddBfF6Ef DAdlJR962BrEcQ8gfUGneAMgyeIPNNQSV2R9ug5KbAXcJsfP16D4opovV18PI4/+ G3pC+J1o0AU4mNeGnqf6BM9s5SDOU9E= -----END CERTIFICATE-----Generated at Thu Jul 23 23:18:46 2026 by rpki-client