$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/533c307d-190d-313d-9dc9-d26717cac75d.roa File: 533c307d-190d-313d-9dc9-d26717cac75d.roa (raw, json) Hash identifier: fWAtweZ3s3/l0KV6P/Pc/wF3XtxkDKUmir+/aEKYizg= Subject key identifier: CB:1E:8E:BE:56:F2:A7:C4:3E:FA:FE:9B:02:67:94:09:20:44:65:4F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E66DA139BFA639EF086D66580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/533c307d-190d-313d-9dc9-d26717cac75d.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 399469 IP address blocks: 165.254.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:13:9b:fa:63:9e:f0:86:d6:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=ef52e0e5-59c7-4ff1-a497-efc065026b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:17:a4:12:63:42:55:e4:cb:b1:71:31:06: a2:00:8d:b1:e7:78:d7:1d:ff:0a:4e:19:66:5a:c3: de:6c:0b:13:ad:5d:13:c6:af:8e:6d:c4:14:bb:71: f1:81:28:03:5e:ee:73:d2:6a:2f:d5:00:11:4e:a4: 7f:eb:d0:43:be:76:30:ca:41:8a:1c:9c:11:8b:ec: 20:da:eb:48:83:7e:6b:b0:a1:8a:aa:f2:3f:31:c6: 8d:a4:73:de:9d:0b:6b:cf:f2:ec:40:23:b7:dc:63: 6a:c3:5f:cd:dd:d8:3f:e0:6d:1e:39:5a:ee:21:be: 74:6c:dd:b1:b8:c0:bb:34:81:09:03:58:cf:d8:3f: c6:62:12:42:7a:62:6f:9b:b3:a5:ea:c3:d0:ee:4c: c7:a4:f3:df:d1:28:dc:1d:b1:18:11:76:32:88:83: f9:dc:97:07:90:b1:76:b8:b5:22:5f:01:87:27:cb: 81:b0:dd:67:ca:89:cb:63:ff:b3:00:8c:8e:d9:20: 8c:e4:2f:b2:b1:ad:35:46:f7:7a:f0:ca:1d:58:69: af:95:0b:53:98:b7:0d:90:9a:e3:34:83:48:69:86: dd:a6:57:7b:7e:74:d2:a2:ca:e5:33:1f:92:ef:91: 70:7b:68:d7:20:39:85:36:ab:97:a0:5d:d2:be:dc: 6e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1E:8E:BE:56:F2:A7:C4:3E:FA:FE:9B:02:67:94:09:20:44:65:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/533c307d-190d-313d-9dc9-d26717cac75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:52:13:bb:53:6c:5f:67:76:7d:ca:58:2a:9a:83:65:85:c7: ae:04:32:1b:52:8a:47:d3:53:b3:10:86:73:0a:de:97:b3:9a: 10:2c:30:12:a4:c5:47:5a:bb:5a:d7:92:21:5a:60:ca:8b:dc: 23:76:cc:dc:59:3a:68:9d:f6:cb:c1:ad:dd:4b:e9:74:4f:bf: a9:c0:bd:93:ae:8e:99:61:a2:57:6a:1e:af:65:87:7b:a1:4a: 71:43:52:e0:fb:89:e9:0d:46:f8:45:98:df:dd:d7:3c:10:8f: 5a:0c:68:41:37:b3:c4:0b:27:91:67:fd:bd:b3:1b:00:4a:16: c6:3d:83:5b:b0:7d:61:2e:41:72:80:27:f3:ba:31:40:fe:b2: f6:9e:16:0e:41:4e:52:97:fe:3f:2d:fc:a7:bd:2c:d8:8c:1c: 9d:ef:2e:6e:0a:7a:58:02:7c:77:0a:52:51:cb:54:a8:6d:db: 40:c2:8d:3a:9a:63:03:f7:16:bd:a2:90:75:0f:51:aa:89:b1: df:4d:1a:89:ca:83:de:cd:58:48:0d:64:e8:f7:de:b2:05:9d: bd:77:f0:30:ce:4b:ca:cc:45:51:39:1e:05:76:28:0a:a7:2d: e0:51:8f:98:d8:98:72:fa:4f:46:ac:bb:be:47:a7:1d:be:89: 20:32:ac:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hOb+mOe8IbWZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ZWY1MmUwZTUtNTljNy00ZmYxLWE0OTctZWZjMDY1MDI2YjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdMXpBJjQlXky7FxMQaiAI2x53jXHf8KThlm WsPebAsTrV0Txq+ObcQUu3HxgSgDXu5z0mov1QARTqR/69BDvnYwykGKHJwRi+wg 2utIg35rsKGKqvI/McaNpHPenQtrz/LsQCO33GNqw1/N3dg/4G0eOVruIb50bN2x uMC7NIEJA1jP2D/GYhJCemJvm7Ol6sPQ7kzHpPPf0SjcHbEYEXYyiIP53JcHkLF2 uLUiXwGHJ8uBsN1nyonLY/+zAIyO2SCM5C+ysa01Rvd68ModWGmvlQtTmLcNkJrj NINIaYbdpld7fnTSosrlMx+S75Fwe2jXIDmFNquXoF3SvtxuiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsejr5W8qfEPvr+mwJnlAkgRGVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTMzYzMwN2QtMTkwZC0z MTNkLTlkYzktZDI2NzE3Y2FjNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpf5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxSE7tTbF9ndn3KWCqag2WFx64EMhtSikfTU7MQhnMK3pezmhAsMBKk xUdau1rXkiFaYMqL3CN2zNxZOmid9svBrd1L6XRPv6nAvZOujplholdqHq9lh3uh SnFDUuD7iekNRvhFmN/d1zwQj1oMaEE3s8QLJ5Fn/b2zGwBKFsY9g1uwfWEuQXKA J/O6MUD+svaeFg5BTlKX/j8t/Ke9LNiMHJ3vLm4KelgCfHcKUlHLVKht20DCjTqa YwP3Fr2ikHUPUaqJsd9NGonKg97NWEgNZOj33rIFnb138DDOS8rMRVE5HgV2KAqn LeBRj5jYmHL6T0asu75Hpx2+iSAyrBU= -----END CERTIFICATE-----Generated at Thu Jul 23 21:51:21 2026 by rpki-client