$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e0f0657-8ac0-366b-bb37-8cf2aaa8eca7.roa File: 1e0f0657-8ac0-366b-bb37-8cf2aaa8eca7.roa (raw, json) Hash identifier: Qq1GjKpNJLN2Q5L93Sj/d789A+kU7Up9HPsMsPHJt8o= Subject key identifier: 05:59:FA:C8:0F:D4:F4:80:AD:5E:70:9A:2C:28:06:43:41:05:F5:F7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D299FF492CDA0B7686580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e0f0657-8ac0-366b-bb37-8cf2aaa8eca7.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 1225 IP address blocks: 165.254.42.160/27 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:29:9f:f4:92:cd:a0:b7:68:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=e168405c-a5f5-4c48-9542-5bf17542143c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6a:51:e4:3b:cb:86:4b:4e:d2:88:d6:5a:df: 7f:77:9b:f6:91:5b:f7:44:c2:06:12:f1:ff:81:22: 16:6f:82:5a:fd:b6:77:03:b1:80:76:46:b2:0a:c0: 1e:a0:30:2a:92:9d:7d:f7:77:2a:90:b8:53:f3:a6: bb:8d:85:f5:46:6c:72:b0:08:7a:5b:8a:ac:a4:78: 35:0c:10:99:cc:cf:97:5a:a7:ce:d7:6a:6c:62:bf: 4e:4f:b0:aa:02:49:2c:b8:ec:d0:69:aa:ab:5e:a6: 0a:82:ee:8c:3e:cd:ad:7d:c8:cb:42:3e:00:fb:47: f3:cc:f0:2e:c1:40:21:6c:eb:f4:ec:7a:6a:a4:7d: 05:21:b0:b7:e3:c9:fc:eb:c2:0f:95:33:c0:99:2f: 5f:c3:5b:bd:91:68:d4:80:de:84:c5:cc:e9:1c:55: 22:3d:ff:2b:9f:c4:fa:52:66:93:78:64:53:84:9d: c9:b7:66:e4:bb:e7:32:64:ce:21:3c:27:35:5b:54: 49:d8:05:b0:1e:76:1a:b1:20:82:ce:b3:95:5c:38: 46:58:2f:71:7b:c2:9c:4d:59:7c:20:06:21:e9:cb: e2:d7:30:e0:30:fa:f7:b0:e2:4b:23:af:d6:38:34: 22:e3:d9:b5:d1:42:e3:3e:94:41:63:6f:05:41:15: 4e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:59:FA:C8:0F:D4:F4:80:AD:5E:70:9A:2C:28:06:43:41:05:F5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e0f0657-8ac0-366b-bb37-8cf2aaa8eca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.42.160/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8e:7e:7a:13:d7:63:c3:1c:27:7d:8e:1d:7f:98:e5:9e:8c: 9c:91:d0:1a:9f:4e:c5:65:d8:9d:04:42:b6:1c:5d:4b:e9:a3: 59:0a:b5:c6:47:b6:c0:21:45:24:2c:c0:e1:a4:a9:b7:d1:f6: d1:9e:c9:49:91:b3:56:99:e8:bb:76:7b:96:e0:4f:19:39:82: 45:5c:94:93:b3:0a:e9:4e:7a:a7:c5:ae:a1:41:1c:3e:18:17: 39:8f:ac:06:eb:8c:0e:b4:5d:11:e3:6f:90:0a:dd:a2:e8:7f: 02:df:cd:ed:f4:ef:33:e4:64:d0:8f:f5:2c:fb:c5:0d:95:54: ee:5b:55:ae:bd:08:91:2f:32:34:aa:0a:3b:88:9d:80:cb:c0: bb:22:0a:48:28:bc:b1:79:06:bf:4e:d7:f2:95:98:21:d3:ae: 8d:6f:b4:da:cf:cd:28:72:ac:e4:ef:1e:46:07:a1:b7:7e:20: b0:3a:0b:dd:ae:76:f1:bc:4d:d9:3d:fd:ff:6f:59:fb:9f:bf: 8e:2f:ff:00:0a:64:d3:f4:12:a2:59:b0:f8:dd:a0:fa:60:55: c8:e7:ec:ff:fa:8a:2e:9a:98:93:17:43:3d:86:40:1c:e4:13: 07:be:6d:f5:6e:c0:7f:83:d5:74:0e:88:5f:81:13:93:f1:99: b5:b8:97:70 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu4jSmf9JLNoLdoZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTE2ODQwNWMtYTVmNS00YzQ4LTk1NDItNWJmMTc1NDIxNDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2pR5DvLhktO0ojWWt9/d5v2kVv3RMIGEvH/ gSIWb4Ja/bZ3A7GAdkayCsAeoDAqkp1993cqkLhT86a7jYX1RmxysAh6W4qspHg1 DBCZzM+XWqfO12psYr9OT7CqAkksuOzQaaqrXqYKgu6MPs2tfcjLQj4A+0fzzPAu wUAhbOv07HpqpH0FIbC348n868IPlTPAmS9fw1u9kWjUgN6ExczpHFUiPf8rn8T6 UmaTeGRThJ3Jt2bku+cyZM4hPCc1W1RJ2AWwHnYasSCCzrOVXDhGWC9xe8KcTVl8 IAYh6cvi1zDgMPr3sOJLI6/WODQi49m10ULjPpRBY28FQRVOkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAVZ+sgP1PSArV5wmiwoBkNBBfX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWUwZjA2NTctOGFjMC0z NjZiLWJiMzctOGNmMmFhYThlY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFpf4qoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBfjn56E9djwxwnfY4df5jlnoyckdAan07FZdidBEK2HF1L6aNZCrXG R7bAIUUkLMDhpKm30fbRnslJkbNWmei7dnuW4E8ZOYJFXJSTswrpTnqnxa6hQRw+ GBc5j6wG64wOtF0R42+QCt2i6H8C383t9O8z5GTQj/Us+8UNlVTuW1WuvQiRLzI0 qgo7iJ2Ay8C7IgpIKLyxeQa/TtfylZgh066Nb7Taz80ocqzk7x5GB6G3fiCwOgvd rnbxvE3ZPf3/b1n7n7+OL/8ACmTT9BKiWbD43aD6YFXI5+z/+ooumpiTF0M9hkAc 5BMHvm31bsB/g9V0DohfgROT8Zm1uJdw -----END CERTIFICATE-----Generated at Wed Nov 5 01:02:04 2025 by rpki-client