$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de1f14c8-a057-3631-ab65-38bb76a8e939.roa File: de1f14c8-a057-3631-ab65-38bb76a8e939.roa (raw, json) Hash identifier: fhcF7LeLuDppOT23bdTC8PpZ1u921ZBOWJm8jd1oahM= Subject key identifier: A5:DB:6E:08:1A:F7:F4:64:D6:B7:6E:5A:46:CE:0F:B8:B6:45:71:5B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD9365E0A654C80D6393EE280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de1f14c8-a057-3631-ab65-38bb76a8e939.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 40934 IP address blocks: 165.254.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5e:0a:65:4c:80:d6:39:3e:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=32f136fb-cc04-4ada-880d-34ed3db6110f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:af:be:ec:29:a8:5b:98:ba:32:25:b7:43: bc:88:2f:5b:67:c0:fc:46:1b:45:66:23:61:b0:e4: b5:6b:93:87:7b:de:2f:3d:5e:43:ff:13:57:3f:92: 4c:c9:96:ac:99:42:b2:ac:f1:8e:21:98:ce:66:a6: be:88:2c:84:f1:d5:41:c9:cc:33:a2:a0:8a:47:2f: 86:87:75:b9:62:f6:d7:a6:9f:b6:d3:60:eb:26:31: 8d:a8:f6:1e:97:de:de:2d:e3:90:3f:d6:06:c1:60: 8e:8a:c3:36:f1:e9:65:bb:9d:f6:0d:30:7b:3d:cd: 95:eb:a2:f2:87:a4:59:a2:23:a6:d8:3e:42:75:ab: 49:d3:31:6d:9d:55:cb:19:45:4f:ca:3a:76:67:55: 16:d3:d7:93:be:9f:65:87:39:19:b9:78:2e:a3:8e: d2:d3:8a:7f:f3:46:72:a5:fb:3a:a8:10:6b:dc:30: 10:c7:59:17:a9:fe:b0:c8:23:e1:71:15:8c:6f:c8: 62:f3:a8:e6:96:1b:ed:fe:bb:66:9a:31:69:47:45: 88:41:b9:2a:36:7d:f2:de:4f:71:04:1f:7f:d8:15: 96:64:96:4b:1d:25:f2:e5:a1:86:2f:42:23:c4:c7: 2f:37:d9:61:50:f8:cd:56:95:55:d9:dd:70:6d:1a: 7a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DB:6E:08:1A:F7:F4:64:D6:B7:6E:5A:46:CE:0F:B8:B6:45:71:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de1f14c8-a057-3631-ab65-38bb76a8e939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:9c:8f:96:af:a8:4c:a4:63:ef:33:2a:46:ed:c6:78:fc:bc: 26:f3:cf:5c:a4:9e:fa:4f:19:9c:af:c8:09:10:96:1f:3b:69: ce:8e:ac:25:40:67:b6:0a:c5:23:ce:47:33:6d:4c:38:68:76: b8:79:fd:7c:8c:14:0b:c1:c9:77:d2:35:5e:fb:e1:b7:60:49: 08:4f:aa:ac:c5:cb:66:7b:83:10:91:c0:6f:f1:fc:8b:1a:00: 34:16:d5:75:00:57:fd:9d:f3:bd:37:58:8e:3b:02:af:b9:9c: 2d:69:22:ec:fa:12:7b:87:49:60:a6:ae:2a:f6:d1:d9:08:32: 90:94:e5:ee:66:93:ff:b9:15:b9:64:c1:4a:1a:ae:66:e7:39: 50:c6:3c:ad:da:0f:c5:89:23:b3:05:62:8d:0c:d6:e3:ea:1f: 7a:c5:b4:16:51:f5:43:cc:73:43:94:d4:9e:53:d3:b8:4e:65: 16:41:67:91:6d:02:25:da:a0:2a:31:d2:45:df:2a:9f:49:79: a5:57:2b:a3:27:6f:26:98:f4:ec:3b:84:b9:70:69:8a:4a:43: 58:e2:02:1a:da:ba:bc:5a:b0:60:f3:70:16:91:14:de:b7:b6: c0:d2:4a:6a:1e:c8:96:bf:46:0e:c9:46:55:6c:b6:0f:1d:26: 97:a9:2d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNl4KZUyA1jk+4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MzJmMTM2ZmItY2MwNC00YWRhLTg4MGQtMzRlZDNkYjYxMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwuvvuwpqFuYujIlt0O8iC9bZ8D8RhtFZiNh sOS1a5OHe94vPV5D/xNXP5JMyZasmUKyrPGOIZjOZqa+iCyE8dVBycwzoqCKRy+G h3W5YvbXpp+202DrJjGNqPYel97eLeOQP9YGwWCOisM28ellu532DTB7Pc2V66Ly h6RZoiOm2D5CdatJ0zFtnVXLGUVPyjp2Z1UW09eTvp9lhzkZuXguo47S04p/80Zy pfs6qBBr3DAQx1kXqf6wyCPhcRWMb8hi86jmlhvt/rtmmjFpR0WIQbkqNn3y3k9x BB9/2BWWZJZLHSXy5aGGL0IjxMcvN9lhUPjNVpVV2d1wbRp6pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXbbgga9/Rk1rduWkbOD7i2RXFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGUxZjE0YzgtYTA1Ny0z NjMxLWFiNjUtMzhiYjc2YThlOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKcj5avqEykY+8zKkbtxnj8vCbzz1yknvpPGZyvyAkQlh87ac6OrCVA Z7YKxSPORzNtTDhodrh5/XyMFAvByXfSNV774bdgSQhPqqzFy2Z7gxCRwG/x/Isa ADQW1XUAV/2d8703WI47Aq+5nC1pIuz6EnuHSWCmrir20dkIMpCU5e5mk/+5Fblk wUoarmbnOVDGPK3aD8WJI7MFYo0M1uPqH3rFtBZR9UPMc0OU1J5T07hOZRZBZ5Ft AiXaoCox0kXfKp9JeaVXK6MnbyaY9Ow7hLlwaYpKQ1jiAhraurxasGDzcBaRFN63 tsDSSmoeyJa/Rg7JRlVstg8dJpepLQ0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:33:49 2025 by rpki-client