$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/796435f8-998b-3b7c-ae19-5042cd40322a.roa File: 796435f8-998b-3b7c-ae19-5042cd40322a.roa (raw, json) Hash identifier: 6UINYutvny0M/jeRQZ6d7Hg7g2YOAx1s1DOi8iMBDIs= Subject key identifier: 74:C5:27:62:C6:52:06:AC:8A:DD:1E:CA:4A:07:09:31:FB:5C:92:36 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD936520A521B71FFBCA98D80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/796435f8-998b-3b7c-ae19-5042cd40322a.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 18994 IP address blocks: 165.254.203.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:52:0a:52:1b:71:ff:bc:a9:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=f866f8ba-af31-463f-aef4-92920aa97ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:24:78:30:81:70:e6:19:5c:5c:8a:2c:0d: 50:57:bc:a6:e4:89:f8:0f:aa:f4:88:0e:ab:88:2a: c8:59:2b:a6:3e:df:6c:e4:6d:bb:40:82:2e:6b:7f: 54:d5:e3:b3:61:90:59:48:b8:e8:ad:df:0a:0a:9f: 3b:91:ef:82:80:e3:f9:1a:67:7f:14:09:39:b6:44: 61:7a:f1:cc:df:25:e5:55:8d:95:01:ce:d6:93:77: 1c:01:f7:80:87:57:9f:5a:73:71:d4:f0:7c:3d:37: 72:a1:ad:0c:c2:ea:27:1f:4a:20:da:7b:14:7a:99: 67:f8:15:66:cf:9a:9c:bd:d4:4f:53:db:e9:17:49: 20:13:2f:64:6e:d2:a6:fd:82:c0:2a:25:a7:91:e9: fa:5c:f2:da:b4:a9:2f:9d:8d:ac:35:10:64:19:55: 29:10:e6:d6:52:53:6f:f9:a8:a8:c3:c1:8e:50:6a: 3d:aa:2b:8e:72:77:99:92:4e:d2:87:50:2f:0e:0c: 7f:ef:ef:26:4c:2f:96:36:27:8b:e8:ad:bc:e8:55: 2c:35:56:6f:48:3c:7a:6a:00:5b:97:c7:04:d9:bf: da:16:21:4f:91:05:b8:64:ba:8e:1b:ac:0e:dd:0a: 2d:3b:2d:b8:5d:4f:43:5e:fc:eb:e0:ad:37:04:3e: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C5:27:62:C6:52:06:AC:8A:DD:1E:CA:4A:07:09:31:FB:5C:92:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/796435f8-998b-3b7c-ae19-5042cd40322a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.203.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:18:a1:0a:71:bb:43:a2:c6:7c:31:7b:70:e7:9c:00:0e:b4: 36:b9:96:db:bf:a2:64:23:56:c6:9d:33:d0:64:ba:9f:4f:48: cb:e4:56:73:92:eb:aa:4a:4c:cd:96:53:2e:2d:d4:ef:8e:f4: bb:aa:63:ce:21:40:e8:a9:d2:4f:b1:70:a3:7f:52:2c:92:e3: 1d:10:79:94:f4:9f:fa:69:e0:d1:73:d5:0b:ef:25:39:01:b8: 4e:eb:33:d9:ee:e1:7b:73:c1:89:8a:c3:4e:7a:e3:8d:1c:4b: f7:f0:d3:16:ae:1b:15:27:6c:38:df:61:2b:f5:dd:77:8b:ba: 47:92:3d:45:e2:b4:74:59:bc:d0:c5:f4:5e:e8:3e:9a:e1:c5: bb:ad:64:13:c2:4c:43:c7:cf:39:50:2a:6d:84:ab:79:76:33: b7:97:ab:23:e7:25:4b:fe:6b:f8:c1:33:2b:7e:0b:38:fd:79: 7f:1e:a7:f3:1e:f1:f1:6f:09:bc:f5:b9:2b:ff:49:a2:d4:d4: a8:e7:b7:ac:2c:16:e4:62:b5:4f:e6:9e:12:59:77:a0:8c:3b: a7:65:83:03:f6:ff:af:08:aa:75:21:c0:1e:9e:c1:ba:6c:31: cf:92:7a:a1:0e:ba:e9:40:2f:1b:8d:ce:ec:9d:f0:8e:8c:9a: c9:84:cd:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErZNlIKUhtx/7ypjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk Zjg2NmY4YmEtYWYzMS00NjNmLWFlZjQtOTI5MjBhYTk3YWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb8keDCBcOYZXFyKLA1QV7ym5In4D6r0iA6r iCrIWSumPt9s5G27QIIua39U1eOzYZBZSLjord8KCp87ke+CgOP5Gmd/FAk5tkRh evHM3yXlVY2VAc7Wk3ccAfeAh1efWnNx1PB8PTdyoa0MwuonH0og2nsUepln+BVm z5qcvdRPU9vpF0kgEy9kbtKm/YLAKiWnken6XPLatKkvnY2sNRBkGVUpEObWUlNv +aiow8GOUGo9qiuOcneZkk7Sh1AvDgx/7+8mTC+WNieL6K286FUsNVZvSDx6agBb l8cE2b/aFiFPkQW4ZLqOG6wO3QotOy24XU9DXvzr4K03BD4vFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHTFJ2LGUgasit0eykoHCTH7XJI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzk2NDM1ZjgtOTk4Yi0z YjdjLWFlMTktNTA0MmNkNDAzMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEpf7LgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCzGKEKcbtDosZ8MXtw55wADrQ2uZbbv6JkI1bGnTPQZLqfT0jL5FZz kuuqSkzNllMuLdTvjvS7qmPOIUDoqdJPsXCjf1IskuMdEHmU9J/6aeDRc9UL7yU5 AbhO6zPZ7uF7c8GJisNOeuONHEv38NMWrhsVJ2w432Er9d13i7pHkj1F4rR0WbzQ xfRe6D6a4cW7rWQTwkxDx885UCpthKt5djO3l6sj5yVL/mv4wTMrfgs4/Xl/Hqfz HvHxbwm89bkr/0mi1NSo57esLBbkYrVP5p4SWXegjDunZYMD9v+vCKp1IcAensG6 bDHPknqhDrrpQC8bjc7snfCOjJrJhM0X -----END CERTIFICATE-----Generated at Sat Aug 23 17:32:34 2025 by rpki-client