$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd89da04-b0f0-36de-8d4a-6ec62953b24d.roa File: cd89da04-b0f0-36de-8d4a-6ec62953b24d.roa (raw, json) Hash identifier: 8U14ZDOHXvsxsyVE6DzECilZ1Um8E8yTndSZ5+IQAfg= Subject key identifier: 84:69:BE:B4:6C:C6:22:06:D8:51:00:69:85:61:78:29:7C:0A:21:F5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584ADD667F6DCA0762B5E190D700 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd89da04-b0f0-36de-8d4a-6ec62953b24d.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 22691 IP address blocks: 165.254.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:7f:6d:ca:07:62:b5:e1:90:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=4e78d561-bbbd-46c7-bb72-079e1f9798b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:42:44:4a:bc:ac:5f:dd:4f:44:b3:be:14:fe: 96:53:02:78:e1:a2:9d:04:b1:19:f2:f0:22:13:f5: 47:09:43:c7:97:b9:29:0b:be:dd:9c:0e:ae:70:ec: 00:56:fd:17:c0:81:a6:4b:dd:ea:e8:42:61:d8:f6: 60:63:ab:09:e6:1d:3e:7e:69:53:6e:bb:d1:50:f0: 90:46:b9:70:e8:55:06:7f:c3:8b:f6:ad:2f:9c:0e: 3d:9d:23:6d:96:6c:fe:d8:17:71:27:a8:b9:2b:20: ea:f0:df:7b:ac:14:bc:13:d1:dc:3b:16:0e:6c:42: 8c:cd:70:21:19:eb:8d:6e:f3:7b:dd:50:8a:83:1f: 61:0e:90:d5:ef:ad:94:b5:23:83:76:f4:86:d4:36: d2:d3:bf:81:4e:e7:e4:51:a4:e7:0b:bc:ba:e8:d8: 1b:58:cb:66:4c:84:31:10:b0:27:f9:b4:20:76:ca: 36:d2:cc:68:f8:56:ca:9e:48:5f:d9:09:03:ec:b9: 2e:a7:b7:1b:fd:44:d2:32:eb:6e:00:6f:a1:2c:9a: 04:6d:57:f5:93:95:0a:43:a6:25:9d:f7:8c:4a:04: 50:80:cd:2a:95:87:d5:c1:40:1e:56:b2:6e:2f:a3: 80:ff:01:dd:2d:11:5a:e4:f0:30:9d:d8:0d:44:1a: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:69:BE:B4:6C:C6:22:06:D8:51:00:69:85:61:78:29:7C:0A:21:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd89da04-b0f0-36de-8d4a-6ec62953b24d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d5:6e:f5:16:42:5c:d5:f9:8c:76:76:c7:60:83:4a:4f:74: 5d:ab:92:e7:7d:ec:08:bb:fe:4f:17:5e:94:f8:ea:f4:b5:24: 76:b7:7b:b9:53:16:26:1a:04:14:14:a0:c9:76:ca:95:a9:08: 01:30:f5:d4:56:08:8e:6f:44:36:e3:ed:74:92:2e:c2:1f:2e: 16:b4:84:8b:09:a6:1f:90:61:1d:ed:8b:a4:cf:15:f2:96:ff: b4:21:4c:7e:6b:a6:19:6e:a7:a8:55:dc:0d:88:11:ec:f9:86: 43:56:6d:76:e4:6d:89:c4:3a:8c:ec:ab:8f:a2:d2:72:f2:f4: 15:f8:36:29:29:30:e3:36:35:2b:f8:29:b0:c4:9e:02:80:c3: f5:4a:8d:f7:78:62:74:3e:94:1c:ef:10:37:5f:b9:8a:2d:e5: 62:b3:12:49:41:04:55:32:90:6c:b4:7a:1f:03:e4:3a:d9:d1: 0c:5a:cf:0b:43:e3:2e:61:c1:0a:cd:40:9e:30:97:c7:01:3e: db:c9:e6:dd:61:15:16:38:98:64:80:2e:78:b9:88:c1:e3:f1: fc:4f:9b:dd:55:f2:90:5a:51:8f:38:dc:bc:55:7c:83:df:07: b8:66:4e:fe:4b:cc:e6:dd:ea:8d:48:08:7d:52:bb:1e:6a:ff: 05:ad:0d:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZn9tygditeGQ1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NGU3OGQ1NjEtYmJiZC00NmM3LWJiNzItMDc5ZTFmOTc5OGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkJESrysX91PRLO+FP6WUwJ44aKdBLEZ8vAi E/VHCUPHl7kpC77dnA6ucOwAVv0XwIGmS93q6EJh2PZgY6sJ5h0+fmlTbrvRUPCQ Rrlw6FUGf8OL9q0vnA49nSNtlmz+2BdxJ6i5KyDq8N97rBS8E9HcOxYObEKMzXAh GeuNbvN73VCKgx9hDpDV762UtSODdvSG1DbS07+BTufkUaTnC7y66NgbWMtmTIQx ELAn+bQgdso20sxo+FbKnkhf2QkD7Lkup7cb/UTSMutuAG+hLJoEbVf1k5UKQ6Yl nfeMSgRQgM0qlYfVwUAeVrJuL6OA/wHdLRFa5PAwndgNRBqvtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRpvrRsxiIG2FEAaYVheCl8CiH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2Q4OWRhMDQtYjBmMC0z NmRlLThkNGEtNmVjNjI5NTNiMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXVbvUWQlzV+Yx2dsdgg0pPdF2rkud97Ai7/k8XXpT46vS1JHa3e7lT FiYaBBQUoMl2ypWpCAEw9dRWCI5vRDbj7XSSLsIfLha0hIsJph+QYR3ti6TPFfKW /7QhTH5rphlup6hV3A2IEez5hkNWbXbkbYnEOozsq4+i0nLy9BX4NikpMOM2NSv4 KbDEngKAw/VKjfd4YnQ+lBzvEDdfuYot5WKzEklBBFUykGy0eh8D5DrZ0QxazwtD 4y5hwQrNQJ4wl8cBPtvJ5t1hFRY4mGSALni5iMHj8fxPm91V8pBaUY843LxVfIPf B7hmTv5LzObd6o1ICH1Sux5q/wWtDRI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:54:36 2025 by rpki-client