$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa File: aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa (raw, json) Hash identifier: o255XO4I66Fp6hMgsePirBaDflZPOP5bTMo43z+Sfmo= Subject key identifier: 66:5F:F4:9A:99:1A:C7:8A:A3:3F:60:0A:BC:F6:2F:0C:4B:65:77:28 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACC86501CBF5FFFE452440 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 40816 IP address blocks: 165.254.137.0/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c8:65:01:cb:f5:ff:fe:45:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=1a339431-2129-4968-8b47-e5246fc74c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:58:20:03:38:e0:18:16:ff:57:da:bb:6f: 42:48:7d:ba:f9:ba:bd:19:53:7e:8b:4a:10:9e:82: 3f:e5:58:e9:48:41:12:a6:65:12:58:c6:de:f3:e0: 5c:43:d1:80:46:3a:e2:5d:0e:6f:97:eb:36:20:4e: 7e:0a:36:bb:07:6b:01:93:a9:a8:82:4a:29:31:91: 25:3b:16:81:76:f2:26:2f:3d:cc:3c:bf:61:77:7b: ef:bf:a2:37:08:9d:73:66:c3:4e:b9:cc:67:84:dd: 64:95:71:d1:aa:5c:1c:fc:b2:9c:1d:ae:f1:5d:48: da:97:47:5d:c3:12:39:33:e9:b4:7d:5f:a2:98:3b: 2b:8c:fc:ae:ae:8d:61:1a:c2:63:9d:64:f1:1a:0f: 0a:91:6c:8f:c5:73:f9:2c:72:ed:80:4c:96:bc:2f: d7:4c:1d:ab:78:5d:30:78:0b:47:07:8c:6e:da:f2: 9f:f1:bc:a7:e0:e9:03:89:c4:cc:dd:97:b4:ee:57: 69:ad:23:9d:84:75:a6:04:88:ef:28:0b:ca:0e:60: f3:3a:41:1c:a9:bd:38:bb:37:5d:55:ab:eb:ef:e7: 8d:b0:4a:9d:f7:ec:57:d3:f0:8a:5f:ec:fb:1c:2e: 56:f2:3d:16:65:fc:58:04:6e:37:e8:a7:90:4d:d7: 49:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5F:F4:9A:99:1A:C7:8A:A3:3F:60:0A:BC:F6:2F:0C:4B:65:77:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.137.0/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:80:cc:89:09:49:69:eb:d2:58:5b:9e:98:9d:54:fc:8c:35: d8:1d:37:b9:f3:6c:ee:59:d5:96:e2:34:2f:1a:6c:fe:49:a5: 91:5d:93:7a:d6:d6:47:61:de:76:b0:89:64:e8:67:99:39:53: 2c:0d:2d:9c:2e:5e:8a:83:5a:4e:88:2d:9c:b5:83:0a:c5:b0: 66:ac:8d:c5:76:70:c2:77:99:72:18:86:37:a9:3a:6b:10:93: 36:78:b4:02:c2:83:6c:01:d2:96:5c:62:19:fa:c1:14:bd:56: 9a:55:92:7b:2f:9b:50:0a:df:a1:b7:78:3e:fd:5e:10:a7:e6: 3a:4a:db:51:90:32:d5:0e:f9:d1:1b:94:7f:3f:46:c5:d5:7b: ca:4a:db:ad:4a:68:00:45:33:38:30:4c:09:71:27:d7:f2:50: 89:27:d1:d8:05:02:18:d0:69:2f:63:0a:99:2f:7f:61:3d:4a: 12:81:d5:15:0c:18:28:d9:e4:6e:9f:bc:04:74:3b:7b:ea:16: 96:f5:56:db:ef:e4:4c:52:3b:53:76:47:fb:53:a7:83:51:31: 30:4d:da:54:d0:d6:6a:f0:1e:e0:1b:0a:92:b2:98:54:e4:64: c5:1a:0b:78:d8:b3:3a:5a:20:b0:20:17:f3:9c:6a:ba:c0:67: e1:e5:e7:1d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE78rMhlAcv1//5FJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MWEzMzk0MzEtMjEyOS00OTY4LThiNDctZTUyNDZmYzc0YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy15YIAM44BgW/1fau29CSH26+bq9GVN+i0oQ noI/5VjpSEESpmUSWMbe8+BcQ9GARjriXQ5vl+s2IE5+Cja7B2sBk6mogkopMZEl OxaBdvImLz3MPL9hd3vvv6I3CJ1zZsNOucxnhN1klXHRqlwc/LKcHa7xXUjal0dd wxI5M+m0fV+imDsrjPyuro1hGsJjnWTxGg8KkWyPxXP5LHLtgEyWvC/XTB2reF0w eAtHB4xu2vKf8byn4OkDicTM3Ze07ldprSOdhHWmBIjvKAvKDmDzOkEcqb04uzdd Vavr7+eNsEqd9+xX0/CKX+z7HC5W8j0WZfxYBG436KeQTddJXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGZf9JqZGseKoz9gCrz2LwxLZXcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWE3ZjM3MTMtYzgxMC0z MWMxLTk0YWYtNzNhYTRiYjBmYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDpf6JADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAAgMyJCUlp69JYW56YnVT8jDXYHTe582zuWdWW4jQvGmz+SaWRXZN6 1tZHYd52sIlk6GeZOVMsDS2cLl6Kg1pOiC2ctYMKxbBmrI3FdnDCd5lyGIY3qTpr EJM2eLQCwoNsAdKWXGIZ+sEUvVaaVZJ7L5tQCt+ht3g+/V4Qp+Y6SttRkDLVDvnR G5R/P0bF1XvKStutSmgARTM4MEwJcSfX8lCJJ9HYBQIY0GkvYwqZL39hPUoSgdUV DBgo2eRun7wEdDt76haW9Vbb7+RMUjtTdkf7U6eDUTEwTdpU0NZq8B7gGwqSsphU 5GTFGgt42LM6WiCwIBfznGq6wGfh5ecd -----END CERTIFICATE-----Generated at Sat Sep 26 07:37:46 2026 by rpki-client