$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9378aadf-33bd-3a99-820a-36e781e6798a.roa File: 9378aadf-33bd-3a99-820a-36e781e6798a.roa (raw, json) Hash identifier: Oc7/l+9pFL7kWmSnowZyE3lSRbah8iqvev7zezYijjY= Subject key identifier: BD:39:41:99:AD:AB:E2:DD:33:EB:38:69:8B:66:2D:B9:2A:92:1A:8F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D150D5B3C470B3188CC280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9378aadf-33bd-3a99-820a-36e781e6798a.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 22691 IP address blocks: 165.254.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:50:d5:b3:c4:70:b3:18:8c:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=32c3b99a-37f5-494e-8e70-4dd4e1dbed99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:eb:9c:52:ac:80:9a:1e:47:09:a1:1a:12: b6:8e:75:4b:43:a6:d7:a6:79:4d:e2:74:4b:a9:b2: a4:c3:6a:04:92:b1:b9:6e:b5:58:a7:ad:75:4f:4b: 8f:32:cc:dc:3d:f5:4d:7a:e6:a1:a5:0c:e6:61:59: e4:81:8d:d8:3a:e6:9b:3c:52:96:80:38:26:a4:99: f3:38:c2:4c:bd:c6:1b:4e:de:9b:b3:d6:6c:17:69: 4d:a3:1c:0e:4b:f3:ad:b3:41:b7:9f:ee:8d:a2:ad: a0:39:78:f9:f1:db:35:61:20:03:ef:ce:a8:e3:31: 18:02:88:25:8f:2d:af:92:8b:66:16:3a:d3:77:f2: f9:5b:40:aa:b8:1a:88:b2:b3:79:a4:cf:9b:ef:aa: a7:80:f4:14:52:0a:18:e6:c7:b5:9e:b5:09:77:e7: 83:86:0d:80:69:a9:9f:20:e1:c9:2f:07:19:55:a1: 3c:ef:7a:92:fb:c0:ae:85:64:28:3c:a6:cc:27:12: 4e:88:e2:60:09:62:f2:ee:88:d1:12:95:f1:51:48: 31:e9:e5:1e:dc:e2:d4:39:4b:45:1e:17:48:25:5f: b9:4e:31:d6:f7:7c:da:44:c2:c9:e0:99:69:6f:cb: 2c:cf:23:60:ea:08:53:91:20:62:34:d8:e5:ab:43: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:39:41:99:AD:AB:E2:DD:33:EB:38:69:8B:66:2D:B9:2A:92:1A:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9378aadf-33bd-3a99-820a-36e781e6798a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ad:ae:bc:1c:75:d5:c8:f4:d7:da:37:19:d1:15:3d:39:0f: ac:02:e5:fb:68:ab:3d:e7:d5:aa:3e:37:4e:0c:0e:a1:59:60: 6a:04:4a:30:38:52:c7:52:a6:d1:68:63:aa:db:87:67:5e:f6: 0b:f5:a8:27:7c:a2:47:1c:6d:fd:4a:c1:21:34:b5:c1:88:02: c1:6b:6f:96:57:ee:d3:bf:86:d6:7c:82:c9:18:8e:4c:df:cd: 2c:55:a6:a2:56:ec:51:ae:bc:8e:90:d2:b5:28:b4:85:a8:de: d7:11:f5:13:51:c8:d9:7e:b9:3c:11:4c:ae:b5:84:36:8a:04: 95:65:32:c1:40:2e:39:86:7d:7f:b1:b9:8a:5e:56:e1:71:29: 7b:4c:f3:38:26:da:d6:92:4e:8a:7e:91:f4:34:ff:d5:7e:52: 93:c1:c7:61:9d:4c:3c:f9:c0:a7:ea:61:95:c2:9e:0b:2f:72: 35:6c:9a:fd:ce:27:5c:87:e5:1e:4e:54:d3:61:22:e8:18:ff: 6c:3d:4b:be:99:8a:6a:9d:aa:72:cc:9f:06:6f:34:3b:06:52: c6:82:7d:da:6e:45:01:d2:64:d5:cd:e8:4f:84:cf:a2:c9:12: 0d:f7:cf:de:77:fa:69:f0:f1:eb:ad:97:8a:7a:67:3b:73:15: 5d:06:e1:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0VDVs8RwsxiMwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MzJjM2I5OWEtMzdmNS00OTRlLThlNzAtNGRkNGUxZGJlZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVTrnFKsgJoeRwmhGhK2jnVLQ6bXpnlN4nRL qbKkw2oEkrG5brVYp611T0uPMszcPfVNeuahpQzmYVnkgY3YOuabPFKWgDgmpJnz OMJMvcYbTt6bs9ZsF2lNoxwOS/Ots0G3n+6Noq2gOXj58ds1YSAD786o4zEYAogl jy2vkotmFjrTd/L5W0CquBqIsrN5pM+b76qngPQUUgoY5se1nrUJd+eDhg2Aaamf IOHJLwcZVaE873qS+8CuhWQoPKbMJxJOiOJgCWLy7ojREpXxUUgx6eUe3OLUOUtF HhdIJV+5TjHW93zaRMLJ4Jlpb8sszyNg6ghTkSBiNNjlq0MUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL05QZmtq+LdM+s4aYtmLbkqkhqPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTM3OGFhZGYtMzNiZC0z YTk5LTgyMGEtMzZlNzgxZTY3OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6trrwcddXI9NfaNxnRFT05D6wC5ftoqz3n1ao+N04MDqFZYGoESjA4 UsdSptFoY6rbh2de9gv1qCd8okccbf1KwSE0tcGIAsFrb5ZX7tO/htZ8gskYjkzf zSxVpqJW7FGuvI6Q0rUotIWo3tcR9RNRyNl+uTwRTK61hDaKBJVlMsFALjmGfX+x uYpeVuFxKXtM8zgm2taSTop+kfQ0/9V+UpPBx2GdTDz5wKfqYZXCngsvcjVsmv3O J1yH5R5OVNNhIugY/2w9S76ZimqdqnLMnwZvNDsGUsaCfdpuRQHSZNXN6E+Ez6LJ Eg33z953+mnw8eutl4p6ZztzFV0G4dU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:36:42 2025 by rpki-client