$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c26cd6af-4850-3dbc-88e4-d8fe7443f031.roa File: c26cd6af-4850-3dbc-88e4-d8fe7443f031.roa (raw, json) Hash identifier: snqcQ2JYhFIk9txvBj30CjGZoNbteDjPWDgLQ7h+k/Y= Subject key identifier: 4D:B1:24:1A:77:42:3B:79:E1:E6:DE:A9:2A:8C:5A:1D:CC:69:C2:CE Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D1255FA42D4A48FA070700 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c26cd6af-4850-3dbc-88e4-d8fe7443f031.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 1225 IP address blocks: 165.254.158.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:25:5f:a4:2d:4a:48:fa:07:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=7f5313af-7a66-4bd8-bb4a-8f9d9c63894f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:ee:18:0a:da:c5:3b:e3:be:b0:03:5e:c5: 16:8a:5c:51:00:c6:1d:49:25:fa:26:7b:cb:b1:de: 2b:a8:ee:2f:b1:22:dc:40:8d:2c:49:1c:ca:f7:3f: ca:ef:be:ff:3f:52:5a:3a:f6:0d:72:3b:f3:fd:67: dc:d7:48:54:d2:9f:80:99:0c:31:9e:0f:94:88:51: 05:82:5c:e5:64:15:c7:87:46:a6:0f:92:9b:d5:0e: c9:6e:b4:54:3d:b4:27:9d:b4:48:ab:63:00:c7:0d: f0:3e:c5:a3:41:c2:a5:17:f2:0c:ca:17:3f:1a:4e: 31:cc:9f:13:dc:db:0c:52:f5:e4:de:b7:84:98:45: 1d:87:f1:a5:4c:eb:dd:e3:cc:48:ce:ea:60:0f:15: 48:50:c9:73:36:81:3f:9c:ee:da:3d:13:0e:c4:cb: c0:ce:77:20:b5:bf:d8:7a:80:7f:de:6c:81:85:a3: 35:10:4b:58:eb:31:a2:14:23:f8:ce:54:77:16:55: 63:b8:52:73:e7:04:a4:6d:57:0d:4d:05:f7:a6:20: 67:e5:42:5a:aa:d1:d2:08:7c:d7:7f:78:46:96:e8: 8b:fd:40:22:0d:c7:d8:a9:71:e3:c8:1c:8e:4c:48: 51:94:d1:0d:10:13:c5:05:3a:76:82:41:34:ba:48: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B1:24:1A:77:42:3B:79:E1:E6:DE:A9:2A:8C:5A:1D:CC:69:C2:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c26cd6af-4850-3dbc-88e4-d8fe7443f031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.158.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:8f:13:b4:4f:39:e7:8c:9e:85:3f:57:47:2b:4d:f9:9d:61: 91:d2:0a:dc:2f:bc:ff:23:1c:dd:0a:5f:83:72:1f:09:69:a2: 2a:df:48:4b:8f:30:82:f3:3a:e7:8b:9f:2d:37:ab:88:64:28: 6b:11:18:c4:38:46:3b:46:b3:6a:88:c2:af:77:b9:24:94:41: 9e:fa:2e:ae:ee:ae:c6:ac:bc:e7:0f:f0:99:f9:88:cf:81:32: f5:fa:22:b3:03:00:de:e4:1e:c5:6a:85:69:6f:2d:72:1a:df: 00:97:ea:1f:a1:74:90:a0:6d:9a:81:3e:fc:5c:6b:95:7d:8b: 89:d3:e7:4f:32:0a:3e:bf:47:eb:a5:82:59:f0:24:82:04:3b: f8:39:52:9d:fd:fa:66:24:ad:2b:bb:d7:55:24:13:bc:22:70: 32:6a:72:1b:2e:a3:a8:c8:a7:91:68:fa:90:60:e8:9c:f7:da: f2:7a:93:a8:6e:b9:43:88:7e:a7:d5:d3:5e:6f:35:4e:fa:58: 52:6d:4d:16:83:d2:55:62:03:7b:ac:16:20:2d:28:42:ec:28: 3d:48:19:c2:2a:9e:56:d9:ad:b5:ce:73:16:fb:ab:35:51:7c: 9e:b7:d5:fe:7f:b7:02:2b:24:35:88:75:0b:7a:52:ce:d3:99: 1e:43:2e:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErX0SVfpC1KSPoHBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk N2Y1MzEzYWYtN2E2Ni00YmQ4LWJiNGEtOGY5ZDljNjM4OTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtHuGAraxTvjvrADXsUWilxRAMYdSSX6JnvL sd4rqO4vsSLcQI0sSRzK9z/K777/P1JaOvYNcjvz/Wfc10hU0p+AmQwxng+UiFEF glzlZBXHh0amD5Kb1Q7JbrRUPbQnnbRIq2MAxw3wPsWjQcKlF/IMyhc/Gk4xzJ8T 3NsMUvXk3reEmEUdh/GlTOvd48xIzupgDxVIUMlzNoE/nO7aPRMOxMvAzncgtb/Y eoB/3myBhaM1EEtY6zGiFCP4zlR3FlVjuFJz5wSkbVcNTQX3piBn5UJaqtHSCHzX f3hGluiL/UAiDcfYqXHjyByOTEhRlNENEBPFBTp2gkE0ukgY/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE2xJBp3Qjt54ebeqSqMWh3MacLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzI2Y2Q2YWYtNDg1MC0z ZGJjLTg4ZTQtZDhmZTc0NDNmMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf6eADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCajxO0TznnjJ6FP1dHK035nWGR0grcL7z/IxzdCl+Dch8JaaIq30hL jzCC8zrni58tN6uIZChrERjEOEY7RrNqiMKvd7kklEGe+i6u7q7GrLznD/CZ+YjP gTL1+iKzAwDe5B7FaoVpby1yGt8Al+ofoXSQoG2agT78XGuVfYuJ0+dPMgo+v0fr pYJZ8CSCBDv4OVKd/fpmJK0ru9dVJBO8InAyanIbLqOoyKeRaPqQYOic99ryepOo brlDiH6n1dNebzVO+lhSbU0Wg9JVYgN7rBYgLShC7Cg9SBnCKp5W2a21znMW+6s1 UXyet9X+f7cCKyQ1iHULelLO05keQy6j -----END CERTIFICATE-----Generated at Sat Aug 23 16:51:35 2025 by rpki-client