$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/70eafad2-3e9f-33ea-b240-6b9111e477c7.roa File: 70eafad2-3e9f-33ea-b240-6b9111e477c7.roa (raw, json) Hash identifier: On4fIvCNmI5fhfC7RGzjG4Wl0Plxr2eCGt1KYCmFzoY= Subject key identifier: 5A:07:81:95:21:95:0D:C1:91:74:CE:FF:67:B1:77:77:21:3E:98:58 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B64CCA60028DB9A6DEE757100 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/70eafad2-3e9f-33ea-b240-6b9111e477c7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 2914 IP address blocks: 165.254.6.0/24 maxlen: 30 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:a6:00:28:db:9a:6d:ee:75:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=cd95d3d0-7185-425b-91c9-fdce7a56b72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2f:d6:dc:43:63:22:e2:15:ad:73:db:d7:08: 24:f1:6b:9e:73:3d:ff:1b:68:49:71:9d:75:78:70: 07:cb:a1:4b:cb:bb:fc:1c:b2:cd:56:ed:10:99:c9: cd:24:fc:47:27:ad:ed:f7:5f:13:f1:89:ef:b8:4c: 93:96:5b:53:0c:56:f1:92:b2:7e:d6:e4:a3:c9:14: 8e:fd:2b:0d:07:77:4a:5c:5b:59:5b:a7:7c:75:56: 09:1d:03:2c:16:c3:25:03:a3:d9:45:83:7b:80:1f: 3a:db:b3:89:8e:46:e7:21:d8:2b:fe:24:58:e7:5f: 74:78:09:c7:94:3e:54:2f:b8:46:2d:2d:74:b1:42: 27:e0:5d:9d:63:83:aa:9e:ba:ad:38:36:00:64:42: ed:a6:8c:3f:90:b7:af:c3:56:59:30:a6:e0:14:8d: 88:b7:c8:9e:d7:8e:b1:60:46:8e:43:e5:30:af:51: 05:98:e0:23:69:bc:9f:21:22:b9:e6:2a:72:58:28: d3:89:74:9f:4c:ad:c8:ac:50:73:4b:4d:32:03:80: d5:10:b7:0a:4d:0b:67:de:30:4c:01:0b:06:bf:58: ad:1e:2c:9f:ce:56:f0:75:5d:55:b6:eb:7c:15:28: 80:27:dc:0e:b1:20:0f:71:e6:23:ae:9f:86:7f:c3: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:07:81:95:21:95:0D:C1:91:74:CE:FF:67:B1:77:77:21:3E:98:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/70eafad2-3e9f-33ea-b240-6b9111e477c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a7:fb:02:a0:64:fd:85:b5:0c:53:b3:04:65:a2:10:66:35: 68:60:e1:a7:65:57:eb:3e:39:33:ca:bb:d8:e6:4a:d2:4e:45: ff:ff:5e:0c:61:12:05:4a:2f:17:75:a3:73:d0:53:a7:28:91: 77:ec:81:00:9b:b8:f3:4a:60:93:90:70:1e:2f:2b:4f:69:ce: c3:1a:b6:53:19:04:bd:e1:65:bc:08:02:e9:c9:9b:e6:f2:eb: 53:83:ab:01:de:f5:d3:3d:a0:02:77:20:b2:a3:17:6e:8e:c7: da:8f:ff:05:84:1c:4d:3d:1e:b2:35:7d:5a:a0:a4:4e:a0:7e: a1:0b:a6:a2:ce:0e:31:4b:e9:b5:60:26:a3:a0:81:fa:fb:00: f4:7e:28:a4:f2:04:10:b9:1e:ab:0d:8a:a3:0e:ad:2b:db:34: e9:98:37:6d:78:78:44:3f:8c:1f:d8:d2:be:21:95:56:d7:10: 9d:bd:0a:16:fd:a8:ca:bf:91:d8:87:0e:22:0c:7c:0a:7e:fc: 2d:df:52:a7:8c:12:ab:e5:5d:9a:e4:07:c8:a2:dc:a7:97:c4: 47:f2:d2:38:b3:40:e6:b3:28:3d:aa:61:af:8c:96:c4:d9:80: c4:5e:e9:3f:cf:fa:c4:1c:49:2d:9b:34:54:e7:a9:ee:24:9a: 99:21:38:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzKYAKNuabe51cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2Q5NWQzZDAtNzE4NS00MjViLTkxYzktZmRjZTdhNTZiNzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii/W3ENjIuIVrXPb1wgk8Wuecz3/G2hJcZ11 eHAHy6FLy7v8HLLNVu0QmcnNJPxHJ63t918T8YnvuEyTlltTDFbxkrJ+1uSjyRSO /SsNB3dKXFtZW6d8dVYJHQMsFsMlA6PZRYN7gB8627OJjkbnIdgr/iRY5190eAnH lD5UL7hGLS10sUIn4F2dY4OqnrqtODYAZELtpow/kLevw1ZZMKbgFI2It8ie146x YEaOQ+Uwr1EFmOAjabyfISK55ipyWCjTiXSfTK3IrFBzS00yA4DVELcKTQtn3jBM AQsGv1itHiyfzlbwdV1Vtut8FSiAJ9wOsSAPceYjrp+Gf8O8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoHgZUhlQ3BkXTO/2exd3chPphYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzBlYWZhZDItM2U5Zi0z M2VhLWIyNDAtNmI5MTExZTQ3N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf4GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFin+wKgZP2FtQxTswRlohBmNWhg4adlV+s+OTPKu9jmStJORf//Xgxh EgVKLxd1o3PQU6cokXfsgQCbuPNKYJOQcB4vK09pzsMatlMZBL3hZbwIAunJm+by 61ODqwHe9dM9oAJ3ILKjF26Ox9qP/wWEHE09HrI1fVqgpE6gfqELpqLODjFL6bVg JqOggfr7APR+KKTyBBC5HqsNiqMOrSvbNOmYN214eEQ/jB/Y0r4hlVbXEJ29Chb9 qMq/kdiHDiIMfAp+/C3fUqeMEqvlXZrkB8ii3KeXxEfy0jizQOazKD2qYa+MlsTZ gMRe6T/P+sQcSS2bNFTnqe4kmpkhOHc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:41 2025 by rpki-client