$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa File: bf541b3f-d38b-3716-affa-7307e218a63b.roa (raw, json) Hash identifier: tyaUQLfmO0VCwxsHI6nD4CuT30tOdmrq8JenrdltFr8= Subject key identifier: 7F:4A:1F:67:D2:90:E4:E1:64:1D:F7:FE:5F:EA:6A:3F:03:DD:94:B9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E97B50812D30749BE749F1840 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 25645 IP address blocks: 165.254.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:08:12:d3:07:49:be:74:9f:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=30bff1d5-36dc-4067-b93d-59a42b508a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e8:97:2b:37:02:45:d4:bd:c3:3a:e5:d8:62: 1c:2d:eb:f8:85:d8:87:a4:39:57:bc:12:d9:78:1a: 64:f8:1c:bf:ff:2d:57:bf:4f:e6:12:e8:3a:56:e8: 55:17:e5:18:59:3a:e8:a9:a7:8c:4f:b7:ea:a7:da: c6:8b:51:9e:1a:ad:77:25:4f:37:5b:8d:46:a6:b3: 32:85:78:68:72:63:89:1c:53:27:43:94:33:71:27: 41:f7:4e:fe:2f:2f:80:87:ea:53:46:f5:e2:58:9d: 8c:bd:ff:e2:27:38:6e:c5:89:4d:9a:4e:70:72:12: 0c:98:d2:3b:b4:3e:77:08:9a:d6:6b:67:c8:ce:01: 7e:79:9d:70:8e:49:29:c1:80:64:a1:88:9a:60:82: cf:10:da:f2:6a:ba:52:57:4f:f3:41:37:9e:95:a3: 5c:38:ac:31:70:57:ea:f9:1e:01:4d:24:7a:cf:b1: 1f:2e:c4:98:3d:cf:7d:4b:dc:db:8b:3f:3a:06:9c: 82:23:43:09:ce:78:ce:c3:cb:5a:8c:53:5d:76:e7: 94:db:44:dd:56:87:5c:0a:e1:37:c1:61:3b:72:74: dd:28:69:16:af:1a:da:b5:ce:6a:65:16:45:3b:52: 8d:96:d8:05:c0:ab:14:e8:a8:62:80:18:7c:49:7e: ad:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4A:1F:67:D2:90:E4:E1:64:1D:F7:FE:5F:EA:6A:3F:03:DD:94:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7e:c3:46:04:b7:94:82:b9:a0:a2:97:39:0f:80:27:69:60: c6:cb:7b:61:7d:c3:67:08:c9:8a:c9:91:3c:81:b5:e9:8c:10: dc:11:1f:3a:06:d5:a2:11:be:0f:ba:39:cf:cf:e7:a4:e5:ea: 09:ec:e8:71:fe:94:0c:13:0a:b2:00:18:1d:c4:02:a1:8c:42: 00:37:a6:de:6f:9e:75:88:47:4f:75:38:b5:9e:6c:6b:62:bb: 1c:0b:2e:b2:c8:84:2b:56:9e:42:00:5f:78:4f:03:94:92:96: 58:42:3d:2c:be:4e:45:27:61:57:c6:3e:bc:c7:91:9a:c2:3a: 45:e4:95:e8:0b:f9:58:46:d2:b4:4c:ac:a0:bd:22:bc:db:31: 02:ea:a9:63:da:17:c8:51:c5:ab:9a:75:e1:f4:00:d3:8f:c0: ff:db:34:63:c1:6e:37:1f:1a:eb:6d:33:46:1b:68:c3:93:65: 3b:ae:8d:b0:fb:d8:c2:42:e5:9f:6b:71:75:bb:b5:33:c8:c3: b7:6f:32:9d:f2:dd:67:96:ef:f8:0e:ad:0e:f8:81:fd:69:63: 12:09:7c:ed:64:fc:c4:bf:8d:b3:0f:c4:1c:96:05:47:72:ab: f5:d5:ad:9b:c5:fb:a7:9b:b2:84:3f:f1:1a:8d:d2:2c:f7:45: 92:09:b2:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQgS0wdJvnSfGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk MzBiZmYxZDUtMzZkYy00MDY3LWI5M2QtNTlhNDJiNTA4YTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+iXKzcCRdS9wzrl2GIcLev4hdiHpDlXvBLZ eBpk+By//y1Xv0/mEug6VuhVF+UYWTroqaeMT7fqp9rGi1GeGq13JU83W41GprMy hXhocmOJHFMnQ5QzcSdB907+Ly+Ah+pTRvXiWJ2Mvf/iJzhuxYlNmk5wchIMmNI7 tD53CJrWa2fIzgF+eZ1wjkkpwYBkoYiaYILPENryarpSV0/zQTeelaNcOKwxcFfq +R4BTSR6z7EfLsSYPc99S9zbiz86BpyCI0MJznjOw8tajFNddueU20TdVodcCuE3 wWE7cnTdKGkWrxratc5qZRZFO1KNltgFwKsU6KhigBh8SX6tkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9KH2fSkOThZB33/l/qaj8D3ZS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmY1NDFiM2YtZDM4Yi0z NzE2LWFmZmEtNzMwN2UyMThhNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl+w0YEt5SCuaCilzkPgCdpYMbLe2F9w2cIyYrJkTyBtemMENwRHzoG 1aIRvg+6Oc/P56Tl6gns6HH+lAwTCrIAGB3EAqGMQgA3pt5vnnWIR091OLWebGti uxwLLrLIhCtWnkIAX3hPA5SSllhCPSy+TkUnYVfGPrzHkZrCOkXklegL+VhG0rRM rKC9IrzbMQLqqWPaF8hRxauadeH0ANOPwP/bNGPBbjcfGuttM0YbaMOTZTuujbD7 2MJC5Z9rcXW7tTPIw7dvMp3y3WeW7/gOrQ74gf1pYxIJfO1k/MS/jbMPxByWBUdy q/XVrZvF+6ebsoQ/8RqN0iz3RZIJsnI= -----END CERTIFICATE-----Generated at Fri Jul 24 07:51:18 2026 by rpki-client