$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa File: f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa (raw, json) Hash identifier: IxHzA8yozm2QpA0xvUGRkBcxB4ihqyJPIq69jkUTbsY= Subject key identifier: 3B:06:AE:59:B4:61:5E:75:5A:D7:78:11:9B:CE:E8:B6:05:EA:37:12 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD9365E5DE31C9AEF53A8DA80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 3949 IP address blocks: 165.254.191.232/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5e:5d:e3:1c:9a:ef:53:a8:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=081d5037-cfae-4d6d-9601-188d2d1706a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:10:6c:60:2f:99:e7:4b:6c:77:81:c4:76:a3: cc:1b:7f:2b:34:ec:05:8a:46:d6:42:77:c3:70:cb: 94:c3:41:c0:cc:f3:6f:f9:43:fe:cc:4c:78:05:90: 7d:be:2d:15:c2:44:46:87:c8:3d:1c:97:d4:56:36: fb:00:97:2f:fc:e4:ab:ab:72:a4:02:8f:ef:9b:b5: d2:6f:0f:37:14:09:a4:a8:64:c5:14:e3:eb:58:2d: 48:16:48:0d:d3:f2:13:19:74:68:13:94:92:cb:ee: f6:82:12:b9:60:3d:fc:35:bb:65:3c:99:e1:f9:e7: 02:0e:bf:44:d1:1f:f3:b7:95:7f:ef:f2:f4:41:1e: f3:77:c5:5a:be:18:4b:eb:25:aa:80:f8:92:f8:fe: 9b:75:4a:ec:a1:cb:92:24:c3:b4:b9:a7:77:95:a0: 30:d4:46:58:0a:17:88:70:12:17:4d:b3:6f:5f:a2: 8c:ac:7c:1b:76:be:a1:ae:3f:4d:75:32:80:60:c5: f3:e1:cf:4b:09:d5:48:c1:cb:38:ca:c8:a3:70:2f: 8a:ad:27:33:26:59:b4:a5:5b:e7:2e:f4:cc:8f:c6: 9e:f7:7e:73:dc:a3:ec:79:b4:45:cf:20:6e:74:1b: 55:b4:95:6a:3a:e9:20:e5:c8:ee:38:bd:44:ba:f0: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:06:AE:59:B4:61:5E:75:5A:D7:78:11:9B:CE:E8:B6:05:EA:37:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.191.232/30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6a:1f:df:d1:c9:e3:c0:6f:3d:16:d5:d3:a1:7d:47:60:37: eb:86:b2:63:ff:16:b6:4d:de:44:4f:18:8a:2c:33:cc:f7:4a: e8:82:f9:26:9f:d9:99:eb:51:6b:8b:4a:5e:bd:e1:01:3d:79: 7d:fe:a7:e5:2e:73:f0:fb:c5:8c:10:3d:0a:cf:e0:29:c5:a2: 83:b9:06:f2:44:ae:4f:74:a7:48:c6:07:99:22:57:6b:4e:b5: 18:17:9a:81:e2:26:57:37:f0:8b:c8:b1:1c:82:cc:0d:29:66: 81:f6:6a:a7:47:ae:56:90:45:96:af:33:97:a2:fd:b1:fd:c8: 61:cd:bb:d7:0a:2e:4a:1c:f7:2f:dd:ee:4d:cc:a9:c3:6d:cf: 22:cc:4d:d1:b2:51:71:1e:ad:cc:21:4a:a6:96:69:73:6f:16: 63:de:21:b6:27:0d:42:5e:5a:c9:ce:b9:22:ab:97:12:fc:df: be:ca:53:e5:ba:17:92:ea:98:33:9f:ba:77:8a:a8:57:df:7c: c7:eb:ab:de:57:8e:d1:38:52:94:d6:4f:29:a5:c6:42:44:47: 2b:db:d2:00:e0:d1:aa:c4:b5:46:9b:47:6c:b8:8f:fc:29:b1: 9f:ed:d8:a4:e2:cc:38:b8:c6:09:c1:fb:37:89:97:83:a5:0d: 5a:a6:18:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErZNl5d4xya71Oo2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MDgxZDUwMzctY2ZhZS00ZDZkLTk2MDEtMTg4ZDJkMTcwNmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixBsYC+Z50tsd4HEdqPMG38rNOwFikbWQnfD cMuUw0HAzPNv+UP+zEx4BZB9vi0VwkRGh8g9HJfUVjb7AJcv/OSrq3KkAo/vm7XS bw83FAmkqGTFFOPrWC1IFkgN0/ITGXRoE5SSy+72ghK5YD38NbtlPJnh+ecCDr9E 0R/zt5V/7/L0QR7zd8VavhhL6yWqgPiS+P6bdUrsocuSJMO0uad3laAw1EZYCheI cBIXTbNvX6KMrHwbdr6hrj9NdTKAYMXz4c9LCdVIwcs4ysijcC+KrSczJlm0pVvn LvTMj8ae935z3KPsebRFzyBudBtVtJVqOukg5cjuOL1EuvDQwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDsGrlm0YV51Wtd4EZvO6LYF6jcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjRjZDk0YjMtZWYzZS0z YWYwLWFmOTgtYmM0ZDQwMmE3OTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUCpf6/6DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGah/f0cnjwG89FtXToX1HYDfrhrJj/xa2Td5ETxiKLDPM90rogvkm n9mZ61Fri0peveEBPXl9/qflLnPw+8WMED0Kz+ApxaKDuQbyRK5PdKdIxgeZIldr TrUYF5qB4iZXN/CLyLEcgswNKWaB9mqnR65WkEWWrzOXov2x/chhzbvXCi5KHPcv 3e5NzKnDbc8izE3RslFxHq3MIUqmlmlzbxZj3iG2Jw1CXlrJzrkiq5cS/N++ylPl uheS6pgzn7p3iqhX33zH66veV47ROFKU1k8ppcZCREcr29IA4NGqxLVGm0dsuI/8 KbGf7dik4sw4uMYJwfs3iZeDpQ1aphgM -----END CERTIFICATE-----Generated at Sat Aug 23 13:09:36 2025 by rpki-client