$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa File: 66cb728c-d2d4-30fc-9ad1-2039318ab524.roa (raw, json) Hash identifier: VWx7gr83aJYj3gjk357Gg3PjuNtfYyZ0StqNwxfk4xk= Subject key identifier: C6:07:A3:AB:BD:AD:8F:80:2C:8A:FA:3D:D9:05:58:6C:80:CC:4A:6E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584ADD667EBBFAA97A06AF3B7900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 165.254.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:7e:bb:fa:a9:7a:06:af:3b:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=aa2d5541-3eba-4fb7-8e43-16d4602d5c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:30:27:c2:fa:60:1a:99:3f:6b:f1:66:7b: 35:65:e5:ae:7a:aa:ad:fb:68:28:20:bf:89:3d:74: de:e8:33:36:52:2a:2b:43:ef:05:ac:b1:7e:dd:71: ae:00:92:b4:1d:d3:d0:e7:aa:cc:7d:e9:24:b8:35: 22:d6:8c:9d:e2:c3:97:26:06:8a:dd:6e:6c:60:12: e1:ae:54:1a:bb:c9:e6:d8:33:50:1d:88:ec:44:61: 5b:6c:9e:b4:67:42:56:70:d7:dc:33:27:f1:86:75: a3:80:c4:23:ca:97:07:b6:aa:71:d8:53:2c:2e:2f: d8:ca:f9:e8:cc:c2:ee:fa:9a:12:71:0c:f8:17:0a: b1:c0:7b:f9:5d:89:8f:1c:c2:90:7a:41:12:11:98: 88:db:6f:4c:ac:8e:fd:91:94:61:a5:a1:13:6e:06: c6:87:ed:2f:af:7d:1b:88:16:9b:2a:77:fd:ff:2d: cd:a3:b3:0b:2f:79:e2:89:4b:9a:26:27:4f:9c:6a: 90:e6:de:f7:ec:38:c8:73:79:cc:93:c9:43:02:56: d9:a1:7a:43:76:50:19:15:1b:ae:aa:a7:86:05:e6: 57:84:b5:94:ea:27:70:a2:f3:c5:e3:fd:54:57:91: d0:35:09:60:78:18:ba:e7:09:c7:5b:fb:b2:43:d7: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:07:A3:AB:BD:AD:8F:80:2C:8A:FA:3D:D9:05:58:6C:80:CC:4A:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4f:d2:b6:83:ed:20:3c:96:e9:06:2a:df:82:59:28:9a:ea: af:a7:a1:2c:6a:8f:33:22:a6:94:94:b8:80:cd:35:a3:79:0f: ba:d3:6c:60:e0:d2:db:ce:b0:c2:6b:9a:ee:aa:1e:d3:56:6d: c6:10:d5:81:44:21:cc:64:a3:68:02:f8:76:e5:ae:9d:40:65: 99:0b:12:d4:3b:b2:43:ef:ae:87:2e:d7:fe:5c:bd:9d:aa:39: c6:9e:4a:0c:c9:0a:be:da:f3:4b:0b:b4:d6:87:d1:a3:fd:ea: 19:48:61:85:33:ad:01:ac:94:3b:3b:a7:1a:a6:58:05:ab:30: 94:9d:3a:c8:ad:4b:75:99:1b:68:6e:0c:38:4a:20:47:ac:e8: 8b:40:c3:f4:37:93:75:92:ca:ed:f4:c8:f1:e8:8a:37:33:fa: 5c:25:87:12:ff:8e:f8:54:43:fe:4a:b1:8b:1b:87:f2:07:38: 6e:ec:0a:b9:9c:5e:4d:23:50:6b:82:ef:04:c6:7b:9e:a9:70: f0:1f:45:9d:d0:ba:ac:ca:48:10:3a:7d:16:e9:3f:25:0d:c6: 93:64:0d:92:d8:54:ca:86:4d:9f:f6:84:d2:fe:54:31:43:08: 07:b0:31:8c:3b:82:5f:a1:d3:28:61:7e:f9:79:eb:d2:68:58: 98:c1:7d:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZn67+ql6Bq87eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YWEyZDU1NDEtM2ViYS00ZmI3LThlNDMtMTZkNDYwMmQ1YzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke0wJ8L6YBqZP2vxZns1ZeWueqqt+2goIL+J PXTe6DM2UiorQ+8FrLF+3XGuAJK0HdPQ56rMfekkuDUi1oyd4sOXJgaK3W5sYBLh rlQau8nm2DNQHYjsRGFbbJ60Z0JWcNfcMyfxhnWjgMQjypcHtqpx2FMsLi/Yyvno zMLu+poScQz4FwqxwHv5XYmPHMKQekESEZiI229MrI79kZRhpaETbgbGh+0vr30b iBabKnf9/y3No7MLL3niiUuaJidPnGqQ5t737DjIc3nMk8lDAlbZoXpDdlAZFRuu qqeGBeZXhLWU6idwovPF4/1UV5HQNQlgeBi65wnHW/uyQ9f65QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYHo6u9rY+ALIr6PdkFWGyAzEpuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjZjYjcyOGMtZDJkNC0z MGZjLTlhZDEtMjAzOTMxOGFiNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5P0raD7SA8lukGKt+CWSia6q+noSxqjzMippSUuIDNNaN5D7rTbGDg 0tvOsMJrmu6qHtNWbcYQ1YFEIcxko2gC+Hblrp1AZZkLEtQ7skPvrocu1/5cvZ2q OcaeSgzJCr7a80sLtNaH0aP96hlIYYUzrQGslDs7pxqmWAWrMJSdOsitS3WZG2hu DDhKIEes6ItAw/Q3k3WSyu30yPHoijcz+lwlhxL/jvhUQ/5KsYsbh/IHOG7sCrmc Xk0jUGuC7wTGe56pcPAfRZ3QuqzKSBA6fRbpPyUNxpNkDZLYVMqGTZ/2hNL+VDFD CAewMYw7gl+h0yhhfvl569JoWJjBfWA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:06 2025 by rpki-client