$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da98e5f-2213-3af7-9305-6228e9005054.roa File: 8da98e5f-2213-3af7-9305-6228e9005054.roa (raw, json) Hash identifier: qLlKrqqZ/bUUXUdB4J0oohHvaxhyT8hI+QKMzzVOEvA= Subject key identifier: F1:ED:31:5B:3A:82:9C:A1:60:A9:D8:24:86:23:98:B0:F1:53:AA:20 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD936521B1DBA82FB88063800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da98e5f-2213-3af7-9305-6228e9005054.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 2914 IP address blocks: 165.254.119.64/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:52:1b:1d:ba:82:fb:88:06:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=1e01cf07-da4b-48e0-9ca1-007901c52017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:ee:7d:48:ae:a2:2b:4c:41:c6:eb:e9:74: aa:89:9f:bd:18:a4:93:94:03:a2:20:e1:20:99:f6: 2e:84:23:58:d9:b5:c2:42:6a:38:48:ff:fc:44:43: aa:c6:9e:92:5e:70:6e:e4:2f:65:29:fb:84:77:ae: 80:a6:82:4d:5f:73:6d:74:4b:38:90:5a:89:0f:74: 97:bd:24:7e:da:b6:86:1f:b0:ea:4c:8b:cc:85:e2: b9:43:ff:32:c1:54:09:60:59:c7:c3:72:b2:02:0e: 94:83:95:c0:9b:6a:dd:99:f3:8a:ae:da:dd:e0:ea: 6e:e3:69:56:17:57:47:11:7e:2d:6d:0d:20:f3:ae: 6b:46:14:d7:f4:54:e8:f9:b8:72:37:96:6f:9f:59: 84:47:e2:4e:9f:81:69:2d:f2:ac:e3:91:d3:53:c1: 1c:cd:c8:af:10:99:1b:09:32:7f:93:a5:ea:9f:0e: 8b:08:d8:6e:20:4c:57:3d:59:5b:a3:20:91:d6:54: 7b:23:fb:6d:08:72:6c:06:f3:cb:c6:cc:df:64:d0: 17:99:01:55:38:7b:ce:db:70:de:be:eb:f1:c6:c5: c6:59:57:33:34:7c:17:d9:8b:79:97:5f:76:03:35: aa:60:67:62:7a:7b:be:7e:0e:96:5d:df:32:5b:fe: ab:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:ED:31:5B:3A:82:9C:A1:60:A9:D8:24:86:23:98:B0:F1:53:AA:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da98e5f-2213-3af7-9305-6228e9005054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.119.64/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2b:67:a8:dd:78:32:a3:71:44:ea:61:c1:f9:d8:57:c8:8e: 76:81:0a:7d:6b:f8:3b:72:eb:b3:62:16:af:09:18:d5:50:e1: 37:2a:12:b3:09:a3:9f:10:99:df:20:2c:ec:8f:89:98:d7:33: 8e:3c:17:20:64:7f:52:91:7f:82:20:fd:97:7b:3e:bd:07:74: 2c:7c:02:b4:92:f6:fb:6f:5e:17:eb:4e:77:4a:cb:6a:08:26: 5e:b5:b9:ee:7e:9f:85:00:63:a3:72:e8:74:f0:0e:78:2e:d7: 02:76:2e:58:b4:17:84:df:ee:cf:d6:24:04:13:d3:74:93:31: 98:ea:9e:f4:4f:8a:5e:49:9d:24:5c:cc:2d:fe:6f:a3:22:5d: d7:74:79:d5:cd:84:82:78:6d:d6:f6:93:9a:ee:75:0c:00:80: a8:3d:00:2c:28:b2:3d:23:f3:2b:46:4e:9a:9f:89:1d:42:f0: 8f:06:ee:be:a6:f9:0c:04:da:8d:50:68:01:e7:3d:41:15:57: 5b:9e:ef:7c:27:c8:f8:72:83:97:97:57:40:0a:f3:5c:dd:8e: f3:5f:0d:03:fb:5a:b8:a5:fd:be:8a:e3:0e:3b:32:d4:9b:e7: bd:6f:84:f5:0f:ff:80:4c:b7:ee:1a:5d:25:d6:bf:6d:90:3b: 24:62:0c:5d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErZNlIbHbqC+4gGOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MWUwMWNmMDctZGE0Yi00OGUwLTljYTEtMDA3OTAxYzUyMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnTufUiuoitMQcbr6XSqiZ+9GKSTlAOiIOEg mfYuhCNY2bXCQmo4SP/8REOqxp6SXnBu5C9lKfuEd66ApoJNX3NtdEs4kFqJD3SX vSR+2raGH7DqTIvMheK5Q/8ywVQJYFnHw3KyAg6Ug5XAm2rdmfOKrtrd4Opu42lW F1dHEX4tbQ0g865rRhTX9FTo+bhyN5Zvn1mER+JOn4FpLfKs45HTU8EczcivEJkb CTJ/k6Xqnw6LCNhuIExXPVlboyCR1lR7I/ttCHJsBvPLxszfZNAXmQFVOHvO23De vuvxxsXGWVczNHwX2Yt5l192AzWqYGdienu+fg6WXd8yW/6rhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPHtMVs6gpyhYKnYJIYjmLDxU6ogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGRhOThlNWYtMjIxMy0z YWY3LTkzMDUtNjIyOGU5MDA1MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFpf53QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBLK2eo3Xgyo3FE6mHB+dhXyI52gQp9a/g7cuuzYhavCRjVUOE3KhKz CaOfEJnfICzsj4mY1zOOPBcgZH9SkX+CIP2Xez69B3QsfAK0kvb7b14X6053Sstq CCZetbnufp+FAGOjcuh08A54LtcCdi5YtBeE3+7P1iQEE9N0kzGY6p70T4peSZ0k XMwt/m+jIl3XdHnVzYSCeG3W9pOa7nUMAICoPQAsKLI9I/MrRk6an4kdQvCPBu6+ pvkMBNqNUGgB5z1BFVdbnu98J8j4coOXl1dACvNc3Y7zXw0D+1q4pf2+iuMOOzLU m+e9b4T1D/+ATLfuGl0l1r9tkDskYgxd -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:31 2025 by rpki-client