$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8aa5a161-e516-321d-ba0f-cdd95cd34fba.roa File: 8aa5a161-e516-321d-ba0f-cdd95cd34fba.roa (raw, json) Hash identifier: aRKHws7QIIYimGISNRiihW6jmlwObSEyvXLXXwvCSNg= Subject key identifier: 40:EA:53:E9:86:F1:F4:4A:AD:AB:DD:4B:AC:39:09:34:DF:9B:4F:A3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AC8764E5552D24309AB132F80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8aa5a161-e516-321d-ba0f-cdd95cd34fba.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 1412 IP address blocks: 165.254.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:4e:55:52:d2:43:09:ab:13:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=26586ce2-2817-4d49-885c-c5ba800c3b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:f1:be:da:7b:48:ec:49:c5:ac:bd:69:60: 1d:63:c2:5a:5d:74:01:67:58:6c:5a:53:d8:bb:56: 0b:b8:21:b8:88:43:be:d0:75:5f:aa:6a:b7:18:f1: d0:ef:f9:53:a5:3c:22:ac:ee:93:4b:84:f9:ff:04: 80:d5:95:35:2a:a3:ae:7c:c3:52:05:23:57:0a:2f: 6e:da:64:a6:d8:4f:72:6f:6e:8f:ba:14:b5:1c:7e: 04:20:4a:16:e4:77:f8:50:ec:e4:5d:c6:2c:c0:6e: 98:19:34:9b:1b:62:c7:b9:06:47:7e:82:35:fa:7d: 53:33:81:95:e4:c7:57:35:ff:fc:10:97:2f:96:4c: f9:1b:44:80:7d:4f:f9:7d:23:5d:69:13:d4:bf:2a: b3:72:e7:e2:af:9c:f0:fc:35:3f:94:ee:d2:db:66: 5f:c0:8d:c3:49:a5:43:6c:00:04:76:0c:3f:64:a2: fa:33:29:47:fe:aa:9c:06:7f:e8:63:8f:97:c1:74: 10:a3:d1:2f:f2:0f:99:b1:0a:91:ed:16:69:36:56: e9:03:15:b9:13:86:7b:8b:dc:80:f5:bf:3c:ea:9d: 2c:3e:2a:4c:ee:01:1a:23:b1:75:7a:66:d1:01:d2: c0:ab:72:d6:34:ff:cb:53:3f:64:e5:3b:4b:b9:6b: 33:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EA:53:E9:86:F1:F4:4A:AD:AB:DD:4B:AC:39:09:34:DF:9B:4F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8aa5a161-e516-321d-ba0f-cdd95cd34fba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:52:c4:86:d3:b8:28:3b:78:32:2a:ed:58:46:2d:dd:dc:be: 00:a2:5d:3f:59:9e:20:29:ab:35:d0:53:b8:cf:a0:97:b6:9e: cc:de:cd:f7:39:ec:65:82:99:dc:a0:d5:96:72:5f:f6:4f:34: 0d:d9:3c:2a:28:b9:08:d4:ff:32:6e:e2:ff:4e:48:43:4d:1d: 44:a7:aa:b4:eb:05:ba:a0:57:50:a8:4f:04:61:3f:b8:9e:19: 17:6e:ab:b3:90:62:43:96:43:f9:09:60:a4:a4:1d:dd:1f:93: 1c:8d:37:dd:1f:67:92:ba:15:0a:72:ef:92:ad:58:a6:a1:31: d0:02:ca:ad:00:a9:1f:26:3f:25:a8:3e:49:72:28:1d:98:d4: 08:13:e5:65:aa:53:d6:89:d4:73:48:7a:bf:7f:e6:c8:31:18: 06:4b:2f:58:87:8d:98:66:33:76:53:41:a0:92:3d:08:11:fe: 7a:bb:4d:08:35:be:37:f3:89:0f:cb:f0:0e:5e:d1:71:31:95: b2:7a:46:27:ea:34:6a:20:4a:c0:d4:b6:16:ee:ed:a8:f1:c6: 0a:1c:b8:a9:22:c7:e4:3e:c2:5b:0d:12:6e:77:af:c8:ba:5e: 5c:7b:94:8f:50:75:0f:6c:bb:07:4a:54:0d:46:91:7d:79:20: 5a:12:56:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdk5VUtJDCasTL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjY1ODZjZTItMjgxNy00ZDQ5LTg4NWMtYzViYTgwMGMzYjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotbxvtp7SOxJxay9aWAdY8JaXXQBZ1hsWlPY u1YLuCG4iEO+0HVfqmq3GPHQ7/lTpTwirO6TS4T5/wSA1ZU1KqOufMNSBSNXCi9u 2mSm2E9yb26PuhS1HH4EIEoW5Hf4UOzkXcYswG6YGTSbG2LHuQZHfoI1+n1TM4GV 5MdXNf/8EJcvlkz5G0SAfU/5fSNdaRPUvyqzcufir5zw/DU/lO7S22ZfwI3DSaVD bAAEdgw/ZKL6MylH/qqcBn/oY4+XwXQQo9Ev8g+ZsQqR7RZpNlbpAxW5E4Z7i9yA 9b886p0sPipM7gEaI7F1embRAdLAq3LWNP/LUz9k5TtLuWszSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDqU+mG8fRKravdS6w5CTTfm0+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGFhNWExNjEtZTUxNi0z MjFkLWJhMGYtY2RkOTVjZDM0ZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlSxIbTuCg7eDIq7VhGLd3cvgCiXT9ZniApqzXQU7jPoJe2nszezfc5 7GWCmdyg1ZZyX/ZPNA3ZPCoouQjU/zJu4v9OSENNHUSnqrTrBbqgV1CoTwRhP7ie GRduq7OQYkOWQ/kJYKSkHd0fkxyNN90fZ5K6FQpy75KtWKahMdACyq0AqR8mPyWo PklyKB2Y1AgT5WWqU9aJ1HNIer9/5sgxGAZLL1iHjZhmM3ZTQaCSPQgR/nq7TQg1 vjfziQ/L8A5e0XExlbJ6RifqNGogSsDUthbu7ajxxgocuKkix+Q+wlsNEm53r8i6 Xlx7lI9QdQ9suwdKVA1GkX15IFoSVuI= -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:19 2025 by rpki-client