$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28a4010f-5de3-384d-b9b2-213c332759a1.roa File: 28a4010f-5de3-384d-b9b2-213c332759a1.roa (raw, json) Hash identifier: LYkWimue9ueZt+tsEPldsH4HmYvx8edwpO3k+DiVgho= Subject key identifier: 7B:A3:62:69:53:B7:19:98:6C:2B:23:67:A7:BF:CE:13:EE:07:8D:27 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA104480BC982F5FC0580500 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28a4010f-5de3-384d-b9b2-213c332759a1.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 165.254.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:44:80:bc:98:2f:5f:c0:58:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=eeae6c5b-0534-4d0a-a03c-e2adc4b47269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:75:bc:f8:a0:f2:95:8f:12:5e:27:4a:10:c9: b0:02:f1:ba:75:9b:e6:79:74:3b:83:e2:c1:36:f5: 97:67:74:7e:f1:b8:86:5a:b0:04:e5:82:dc:6c:90: a1:e7:89:7c:62:ee:c0:26:10:7d:29:5e:6f:e3:58: 0b:48:42:48:a7:6c:d7:b8:32:3a:f5:6e:64:02:a4: 38:fa:24:ea:30:79:8b:f4:90:6b:6f:66:c6:7c:d7: ce:23:84:2c:c2:9d:4c:43:5f:54:18:54:8c:01:87: 55:4e:46:22:e4:d7:bd:d2:61:50:5d:e1:2a:a4:23: 6b:12:0b:cd:af:b8:2b:92:03:ad:2f:f0:67:cd:56: bd:1d:8e:e6:d3:e4:17:78:0e:42:7f:ae:ac:cf:30: fc:b2:2d:58:87:12:ad:eb:5e:26:d4:b7:1a:00:f1: 8c:30:e3:af:d4:f0:74:f1:99:48:0c:aa:2a:ff:14: f0:d5:aa:80:b8:95:e9:fd:a5:f7:a6:66:b0:f6:84: 3a:ef:e4:c7:ef:7e:fe:37:a8:a3:bd:c7:22:13:79: 79:17:0e:8e:59:6a:70:dd:a1:43:7e:e8:2f:9b:06: e1:09:db:a5:e3:e9:e1:91:a4:f2:fe:b5:77:99:d9: 4a:f4:d6:8a:50:25:ff:ad:a7:63:76:d5:15:42:29: 8e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A3:62:69:53:B7:19:98:6C:2B:23:67:A7:BF:CE:13:EE:07:8D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28a4010f-5de3-384d-b9b2-213c332759a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:d5:d9:6a:9c:f3:8e:24:94:ad:b0:97:c6:0e:5b:4e:10:fb: ff:96:b8:27:fa:81:3c:0a:5b:2c:0f:51:3d:7d:27:97:e4:5d: f0:8f:45:3c:ff:82:34:aa:ba:af:a4:51:48:b0:90:a3:06:70: 8b:58:ee:48:37:37:60:96:33:6e:dd:0e:59:7d:02:d5:b8:8c: a9:2d:ec:2c:07:26:ca:fd:67:37:66:1a:b8:f8:3d:10:75:33: 15:af:ef:81:c8:6e:5f:9a:8d:0b:b6:e5:a7:01:2d:be:d1:b6: de:de:60:7e:66:dc:d2:fa:b4:61:e7:58:a9:59:af:c9:3b:1b: e4:12:72:3e:bd:09:44:0d:c6:73:d1:2a:6a:1a:89:5c:91:ab: d5:db:d3:17:bf:c8:9e:83:69:2d:91:67:b4:88:22:23:db:cd: 3d:66:d6:aa:74:31:55:1a:79:8c:47:36:f4:33:43:99:39:0c: 13:0e:12:94:0b:e4:e7:b5:c2:8a:99:c1:75:a9:25:39:a7:bb: 5a:7f:e8:d1:fd:d5:b9:e3:cc:2d:0b:bb:32:43:d7:fd:ad:cd: 5e:c6:f0:25:1c:c6:17:06:af:3d:83:c6:bc:1f:f6:3c:c8:08: fd:ac:2e:1b:46:02:e2:94:de:e2:a6:58:a2:97:70:1d:ca:7d: 33:d8:8d:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EESAvJgvX8BYBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZWVhZTZjNWItMDUzNC00ZDBhLWEwM2MtZTJhZGM0YjQ3MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknW8+KDylY8SXidKEMmwAvG6dZvmeXQ7g+LB NvWXZ3R+8biGWrAE5YLcbJCh54l8Yu7AJhB9KV5v41gLSEJIp2zXuDI69W5kAqQ4 +iTqMHmL9JBrb2bGfNfOI4Qswp1MQ19UGFSMAYdVTkYi5Ne90mFQXeEqpCNrEgvN r7grkgOtL/BnzVa9HY7m0+QXeA5Cf66szzD8si1YhxKt614m1LcaAPGMMOOv1PB0 8ZlIDKoq/xTw1aqAuJXp/aX3pmaw9oQ67+TH737+N6ijvcciE3l5Fw6OWWpw3aFD fugvmwbhCdul4+nhkaTy/rV3mdlK9NaKUCX/radjdtUVQimOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHujYmlTtxmYbCsjZ6e/zhPuB40nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjhhNDAxMGYtNWRlMy0z ODRkLWI5YjItMjEzYzMzMjc1OWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTV2Wqc844klK2wl8YOW04Q+/+WuCf6gTwKWywPUT19J5fkXfCPRTz/ gjSquq+kUUiwkKMGcItY7kg3N2CWM27dDll9AtW4jKkt7CwHJsr9ZzdmGrj4PRB1 MxWv74HIbl+ajQu25acBLb7Rtt7eYH5m3NL6tGHnWKlZr8k7G+QScj69CUQNxnPR KmoaiVyRq9Xb0xe/yJ6DaS2RZ7SIIiPbzT1m1qp0MVUaeYxHNvQzQ5k5DBMOEpQL 5Oe1woqZwXWpJTmnu1p/6NH91bnjzC0LuzJD1/2tzV7G8CUcxhcGrz2Dxrwf9jzI CP2sLhtGAuKU3uKmWKKXcB3KfTPYjdU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:23 2025 by rpki-client