$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/543c5650-8637-3f4d-af36-15118bf9130a.roa File: 543c5650-8637-3f4d-af36-15118bf9130a.roa (raw, json) Hash identifier: kTzpL1PebR/O65E4tSU5MgIUeXg7MfZ/4rNyDKb6Lv8= Subject key identifier: B3:9B:37:57:39:58:B5:10:25:2A:52:56:1C:6D:B1:35:BD:63:1C:E4 Certificate issuer: /CN=f80f9298-8029-4285-89d7-27308341b2e0 Certificate serial: 010D0C9F4328584E9A7FEBFE8263958C11A4E000 Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/543c5650-8637-3f4d-af36-15118bf9130a.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 401636 IP address blocks: 165.173.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:eb:fe:82:63:95:8c:11:a4:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=c4defd8b-d81c-45ac-9a19-74eb5422ce54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:39:e2:70:a5:a0:f4:5c:52:11:ac:a6:a7: e2:e1:c3:85:c1:34:32:77:cc:71:02:b5:11:4d:2f: 4a:81:05:d1:14:f0:70:ea:86:d7:6e:9b:6d:51:65: 59:61:5e:9a:12:b1:67:bf:3b:f6:30:c3:d2:fb:4c: d3:f8:51:85:2f:1d:23:5d:15:70:bd:bb:19:12:24: 4d:99:05:6f:16:e8:62:c8:ce:ce:9d:10:f2:03:71: 90:43:ea:2d:60:ba:0d:19:5d:58:43:75:2d:d0:9f: bc:24:4e:7e:56:3c:23:90:82:31:45:fc:d3:0d:80: 37:73:79:5f:46:56:8e:27:3f:a1:cf:ec:d5:3d:c5: de:e4:cc:80:4b:8a:fb:1f:4a:d1:38:f7:9c:b8:ec: a8:08:7a:1b:a4:13:8b:2f:61:78:78:bf:3b:48:f6: 57:b8:00:81:f1:83:6c:b0:c4:08:08:fc:41:8c:9d: 7f:2b:6d:50:44:6e:08:39:17:a1:70:fc:51:7e:94: ef:85:a7:04:ab:6c:83:15:61:1c:69:77:cc:fa:d9: e7:a7:f0:8a:5b:99:e3:c7:0f:9f:1d:43:af:14:a0: d8:0f:8b:ff:e2:49:be:d7:87:a0:e3:c8:df:34:80: e6:26:5a:4b:11:37:57:d8:c0:7a:19:d1:62:66:62: 66:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9B:37:57:39:58:B5:10:25:2A:52:56:1C:6D:B1:35:BD:63:1C:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/543c5650-8637-3f4d-af36-15118bf9130a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl X509v3 Authority Key Identifier: keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer sbgp-ipAddrBlock: critical IPv4: 165.173.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:50:54:e8:8a:71:be:e9:24:c1:66:0a:e5:85:6b:cf:a6:55: 42:3b:04:ed:4c:28:91:e3:50:55:2c:f6:84:45:7e:d5:69:60: a4:a5:51:8a:a2:7d:21:24:b3:ef:3a:7b:fe:0f:da:74:cc:eb: dc:f7:6d:1d:5c:72:15:f6:b6:2e:17:5d:30:02:57:51:5e:51: c5:be:cd:cc:01:05:32:b4:22:c6:5e:f3:7e:a6:b7:ec:6a:9a: 95:ef:53:cb:39:0b:67:25:66:a4:38:31:14:95:2f:77:ff:c1: 3e:54:24:a4:52:9e:0b:b8:e6:20:e8:3c:1d:bc:50:3c:28:4c: d0:35:0f:ac:c0:8a:f2:cf:c9:a2:cf:86:ba:c9:69:8a:39:92: 4c:df:1f:0f:62:f0:b2:da:94:66:56:9b:7a:c8:0e:bb:50:3b: 24:7e:96:0e:da:d7:99:b9:4c:42:16:14:9b:1b:8b:93:77:c2: 40:1a:c9:c9:e8:83:35:bd:c1:1d:89:95:f6:92:14:3d:6b:46: be:4c:31:e2:f2:a6:72:af:34:39:77:4d:68:a6:28:d1:5f:bc: 4e:7f:58:b7:dd:07:1b:f8:a9:00:55:31:e4:90:ad:3a:5c:c5: 2d:f6:ab:2c:26:54:8c:c1:b9:5a:42:54:4d:26:fb:da:cd:db: 56:82:48:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af+v+gmOVjBGk4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjgwZjkyOTgtODAyOS00Mjg1LTg5ZDctMjczMDgzNDFi MmUwMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk YzRkZWZkOGItZDgxYy00NWFjLTlhMTktNzRlYjU0MjJjZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS054nCloPRcUhGspqfi4cOFwTQyd8xxArUR TS9KgQXRFPBw6obXbpttUWVZYV6aErFnvzv2MMPS+0zT+FGFLx0jXRVwvbsZEiRN mQVvFuhiyM7OnRDyA3GQQ+otYLoNGV1YQ3Ut0J+8JE5+VjwjkIIxRfzTDYA3c3lf RlaOJz+hz+zVPcXe5MyAS4r7H0rROPecuOyoCHobpBOLL2F4eL87SPZXuACB8YNs sMQICPxBjJ1/K21QRG4IORehcPxRfpTvhacEq2yDFWEcaXfM+tnnp/CKW5njxw+f HUOvFKDYD4v/4km+14eg48jfNIDmJlpLETdX2MB6GdFiZmJmzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLObN1c5WLUQJSpSVhxtsTW9YxzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mODBm OTI5OC04MDI5LTQyODUtODlkNy0yNzMwODM0MWIyZTAvNTQzYzU2NTAtODYzNy0z ZjRkLWFmMzYtMTUxMThiZjkxMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjgwZjkyOTgtODAyOS00Mjg1LTg5 ZDctMjczMDgzNDFiMmUwL2Y4MGY5Mjk4LTgwMjktNDI4NS04OWQ3LTI3MzA4MzQx YjJlMC5jcmwwHwYDVR0jBBgwFoAUZ2/fmN3Fstann5/PDklcOGTRROcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mODBmOTI5OC04MDI5LTQyODUtODlkNy0yNzMw ODM0MWIyZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpa2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNQVOiKcb7pJMFmCuWFa8+mVUI7BO1MKJHjUFUs9oRFftVpYKSlUYqi fSEks+86e/4P2nTM69z3bR1cchX2ti4XXTACV1FeUcW+zcwBBTK0IsZe836mt+xq mpXvU8s5C2clZqQ4MRSVL3f/wT5UJKRSngu45iDoPB28UDwoTNA1D6zAivLPyaLP hrrJaYo5kkzfHw9i8LLalGZWm3rIDrtQOyR+lg7a15m5TEIWFJsbi5N3wkAaycno gzW9wR2JlfaSFD1rRr5MMeLypnKvNDl3TWimKNFfvE5/WLfdBxv4qQBVMeSQrTpc xS32qywmVIzBuVpCVE0m+9rN21aCSL0= -----END CERTIFICATE-----Generated at Fri Jul 24 15:30:53 2026 by rpki-client