$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c8541fa-205d-3cd8-8dc1-690536b9e84d.roa File: 5c8541fa-205d-3cd8-8dc1-690536b9e84d.roa (raw, json) Hash identifier: pH2+RDG9XiIB8NrP/pQD0w5m2cNXBtODg5427Bt5iao= Subject key identifier: B1:59:FF:3D:20:02:43:FF:1E:ED:46:47:26:33:DD:09:EB:A8:51:E8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F348268721B3FB45F36151A00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c8541fa-205d-3cd8-8dc1-690536b9e84d.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 3949 IP address blocks: 165.254.239.128/28 maxlen: 28 165.254.239.144/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:68:72:1b:3f:b4:5f:36:15:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=887438e4-ba06-4d6e-b9ca-ba1dac80e221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cf:d9:2a:7c:03:07:9d:6c:ff:3d:ee:22:7f: c3:b0:23:de:23:e7:8b:e5:bf:b9:ae:31:56:49:90: fe:ed:46:80:d5:a4:3d:1e:ce:20:0f:ce:c4:22:db: d5:a3:cd:50:ca:d2:85:87:4b:d7:d5:cc:d3:d0:d4: 5b:e0:c8:2a:b0:c9:be:71:ee:86:48:78:7f:f3:9c: 56:0f:11:1d:1a:f5:95:05:65:26:d4:0d:d6:8d:c9: b4:a6:be:4c:a4:61:5d:73:0e:51:a1:09:85:f6:f9: 19:4a:68:2d:ce:d3:02:57:b7:dc:6f:44:80:04:b1: a7:37:65:72:05:f5:6f:85:a3:5a:d4:34:c7:15:fe: dd:fd:19:b4:67:5b:e2:fa:62:60:75:4d:bc:d3:96: 84:06:bc:68:53:d3:6d:b7:da:dc:32:7f:71:28:2d: 28:57:59:a6:db:67:c8:72:57:2d:5c:6d:4c:23:a3: 24:b3:ac:12:1c:b0:d6:3a:c1:b6:ca:c2:ea:17:52: 9e:e1:25:3a:06:ae:80:6c:09:fd:cf:06:25:d6:62: 08:92:e3:d4:6b:78:46:b1:c3:fd:75:2f:ec:98:e6: 56:e3:97:07:4f:c4:fa:22:ea:1d:a2:80:6a:0b:6c: 19:2b:5c:15:bc:94:63:dd:06:5a:a5:bc:ab:83:c1: e5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:59:FF:3D:20:02:43:FF:1E:ED:46:47:26:33:DD:09:EB:A8:51:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c8541fa-205d-3cd8-8dc1-690536b9e84d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.239.128/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:02:84:3c:f0:7d:f6:ac:77:65:77:0f:08:92:23:8e:06:77: b7:3e:c4:1c:cf:7d:93:5b:06:cd:2b:21:61:72:3d:6e:db:2a: ad:d6:1a:4a:c1:1e:a6:95:26:a9:ad:15:86:fd:be:2c:16:ae: ca:8f:0a:b4:56:9b:cb:0d:f6:75:19:55:53:a0:4d:01:7c:b3: 5a:a7:85:5f:59:bb:c8:2c:0a:ef:b1:a2:29:f7:65:55:38:7e: c3:26:84:11:41:12:9d:40:22:60:4c:1d:ee:4c:ee:4f:65:ac: ee:a2:90:12:80:0c:07:f2:7d:f0:cd:e8:61:d9:a8:9e:5c:5e: 1b:21:e9:37:d8:ca:ed:18:02:5c:f1:15:73:5b:27:55:7f:01: f6:ae:7f:cc:8e:86:46:51:0a:c9:7f:48:2c:2c:3b:a6:f9:0d: 11:f5:d8:66:d4:89:04:8a:11:31:70:c3:c5:e0:de:f4:3c:fd: ba:d1:8f:8f:50:b6:09:6c:c9:7b:06:3d:ef:c1:4b:6d:01:02: 46:4b:00:9c:76:32:5f:1b:01:15:e1:f2:20:6a:9e:7e:96:e8: c6:c9:76:77:a5:96:c5:cf:8c:7b:fd:dc:e9:05:1b:e2:e2:11: 71:88:e3:6f:3b:60:e8:59:c4:58:64:4b:8c:b4:61:80:37:b9: e6:07:d6:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE80gmhyGz+0XzYVGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk ODg3NDM4ZTQtYmEwNi00ZDZlLWI5Y2EtYmExZGFjODBlMjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c/ZKnwDB51s/z3uIn/DsCPeI+eL5b+5rjFW SZD+7UaA1aQ9Hs4gD87EItvVo81QytKFh0vX1czT0NRb4MgqsMm+ce6GSHh/85xW DxEdGvWVBWUm1A3Wjcm0pr5MpGFdcw5RoQmF9vkZSmgtztMCV7fcb0SABLGnN2Vy BfVvhaNa1DTHFf7d/Rm0Z1vi+mJgdU2805aEBrxoU9Ntt9rcMn9xKC0oV1mm22fI clctXG1MI6Mks6wSHLDWOsG2ysLqF1Ke4SU6Bq6AbAn9zwYl1mIIkuPUa3hGscP9 dS/smOZW45cHT8T6IuodooBqC2wZK1wVvJRj3QZapbyrg8HlHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLFZ/z0gAkP/Hu1GRyYz3QnrqFHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWM4NTQxZmEtMjA1ZC0z Y2Q4LThkYzEtNjkwNTM2YjllODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFpf7vgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAEAoQ88H32rHdldw8IkiOOBne3PsQcz32TWwbNKyFhcj1u2yqt1hpK wR6mlSaprRWG/b4sFq7Kjwq0VpvLDfZ1GVVToE0BfLNap4VfWbvILArvsaIp92VV OH7DJoQRQRKdQCJgTB3uTO5PZazuopASgAwH8n3wzehh2aieXF4bIek32MrtGAJc 8RVzWydVfwH2rn/MjoZGUQrJf0gsLDum+Q0R9dhm1IkEihExcMPF4N70PP260Y+P ULYJbMl7Bj3vwUttAQJGSwCcdjJfGwEV4fIgap5+lujGyXZ3pZbFz4x7/dzpBRvi 4hFxiONvO2DoWcRYZEuMtGGAN7nmB9Zz -----END CERTIFICATE-----Generated at Wed Sep 23 00:17:36 2026 by rpki-client