$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d76aff0-29ba-3d0c-ba76-f8fc2072ec73.roa File: 1d76aff0-29ba-3d0c-ba76-f8fc2072ec73.roa (raw, json) Hash identifier: VCrrwjrFt0K3QhfV42ZXmOBX6RU6UBE0aU+sj+l6Ti8= Subject key identifier: 22:24:61:AC:A2:72:DC:6C:5A:D5:B3:C0:AB:97:41:E7:AD:E8:D3:1D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB2F7A362E5C94BFA7E4E7380 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d76aff0-29ba-3d0c-ba76-f8fc2072ec73.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 401494 IP address blocks: 165.254.16.240/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a3:62:e5:c9:4b:fa:7e:4e:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=5ad0363d-b8a8-427d-90bf-352c2f8ab3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:fd:e0:33:d3:8f:df:69:d8:0c:b4:63:38: 7e:c5:1c:9c:d1:a5:e2:d5:57:1d:33:58:79:47:e1: 7e:8f:6e:a9:9d:7c:cd:8d:e3:f1:b2:87:ff:f9:c4: 56:e3:34:7e:b4:17:cb:ca:17:e5:73:d6:b1:9d:31: 6f:a1:a5:cd:b8:43:fa:aa:49:89:b2:cb:ea:72:93: 55:19:d1:0d:6f:b1:e8:6f:71:4c:ae:0b:d1:fa:19: b4:bc:50:5d:6c:c4:b2:cc:5b:7c:ff:26:a4:f1:12: ba:3c:29:3d:65:04:fc:f6:6d:3b:f9:10:c1:79:8b: 8b:e7:eb:b1:70:f4:b8:d3:d8:72:59:37:84:f4:16: 34:96:13:a6:e3:1d:fc:4d:d1:dc:b1:b9:09:93:4f: aa:2f:ec:3f:86:fc:fa:7a:7e:4c:52:6f:35:b4:f4: df:5f:54:e7:a7:06:2f:ca:da:54:a3:d3:63:46:f2: cd:35:a3:ce:33:49:90:08:6e:e7:57:db:1a:0c:4a: 17:cc:c2:20:6a:5c:64:be:6b:6d:66:93:86:18:31: 1f:f6:33:8f:c1:33:94:f8:2b:4d:e0:5c:1c:6f:cd: 4d:2d:c3:57:36:a4:48:34:a4:74:44:6a:79:e0:6c: ca:cf:c8:71:1e:78:ae:66:fb:fb:ad:d5:40:1a:f6: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:24:61:AC:A2:72:DC:6C:5A:D5:B3:C0:AB:97:41:E7:AD:E8:D3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d76aff0-29ba-3d0c-ba76-f8fc2072ec73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.16.240/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:51:45:bc:6b:6d:e2:83:70:b7:0e:a9:93:31:3f:d4:82:37: e6:88:71:83:90:25:ac:3f:f8:23:58:06:c4:5c:47:34:b6:f4: 56:a8:16:f6:e2:6d:b1:6a:03:ba:15:e0:5d:02:e9:b8:81:8c: 6e:36:1f:e3:53:23:9e:c3:ae:85:35:d8:89:82:0d:98:f9:2c: 47:51:d0:30:fa:61:03:f6:40:8f:f2:81:cf:06:d6:12:3b:d9: b8:e9:46:db:a8:c1:b7:09:5c:ae:c9:fb:6c:f4:89:e2:b0:9d: 39:db:82:b2:ac:48:4e:80:c3:d7:92:4e:92:74:b8:00:3c:09: f3:09:ce:dd:39:10:9b:3a:89:d1:62:09:4a:04:fd:e3:da:a4: dc:ed:3e:68:09:cd:47:36:7c:15:e2:b3:ea:aa:a2:d2:cf:c2: 11:ef:18:c3:11:ec:39:27:77:17:5d:4a:a6:e2:ae:97:d3:aa: 7b:5d:e7:8b:d2:6e:fd:bc:4f:21:ef:30:0e:13:97:94:62:8c: 91:39:8f:a4:6c:ab:fa:da:bb:33:0a:a5:fd:d8:40:12:b3:37: da:10:91:37:28:e8:70:a2:fd:52:c4:ba:b2:f6:39:b9:5f:74: 68:0e:dc:1c:77:f1:8e:dd:18:23:cd:10:3c:e7:fe:0e:16:f6: e9:42:24:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuy96Ni5clL+n5Oc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NWFkMDM2M2QtYjhhOC00MjdkLTkwYmYtMzUyYzJmOGFiM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcz94DPTj99p2Ay0Yzh+xRyc0aXi1VcdM1h5 R+F+j26pnXzNjePxsof/+cRW4zR+tBfLyhflc9axnTFvoaXNuEP6qkmJssvqcpNV GdENb7Hob3FMrgvR+hm0vFBdbMSyzFt8/yak8RK6PCk9ZQT89m07+RDBeYuL5+ux cPS409hyWTeE9BY0lhOm4x38TdHcsbkJk0+qL+w/hvz6en5MUm81tPTfX1TnpwYv ytpUo9NjRvLNNaPOM0mQCG7nV9saDEoXzMIgalxkvmttZpOGGDEf9jOPwTOU+CtN 4Fwcb81NLcNXNqRINKR0RGp54GzKz8hxHniuZvv7rdVAGvZwHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCIkYayictxsWtWzwKuXQeet6NMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWQ3NmFmZjAtMjliYS0z ZDBjLWJhNzYtZjhmYzIwNzJlYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDpf4Q8DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgUUW8a23ig3C3DqmTMT/UgjfmiHGDkCWsP/gjWAbEXEc0tvRWqBb2 4m2xagO6FeBdAum4gYxuNh/jUyOew66FNdiJgg2Y+SxHUdAw+mED9kCP8oHPBtYS O9m46UbbqMG3CVyuyfts9InisJ0524KyrEhOgMPXkk6SdLgAPAnzCc7dORCbOonR YglKBP3j2qTc7T5oCc1HNnwV4rPqqqLSz8IR7xjDEew5J3cXXUqm4q6X06p7XeeL 0m79vE8h7zAOE5eUYoyROY+kbKv62rszCqX92EASszfaEJE3KOhwov1SxLqy9jm5 X3RoDtwcd/GO3RgjzRA85/4OFvbpQiRZ -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:52 2025 by rpki-client