$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3894a47b-26d8-319f-b73f-b2c688c91db8.roa File: 3894a47b-26d8-319f-b73f-b2c688c91db8.roa (raw, json) Hash identifier: pbmFoRH5QKINUEB/W/1uD+5XzBEzt7bJ+iOKY3PUA9g= Subject key identifier: 2B:ED:8B:5A:3D:67:32:EC:12:C9:5A:90:C6:0B:43:C5:89:BE:B5:50 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA10452C95BE4E06C66A3700 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3894a47b-26d8-319f-b73f-b2c688c91db8.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 49846 IP address blocks: 168.143.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:45:2c:95:be:4e:06:c6:6a:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=799a8dea-56e3-49b7-80c8-1f7d62be7827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:16:e9:75:f4:ae:b8:bc:a8:4a:33:d8:cb: 64:2f:5f:1f:d7:7b:92:c8:ae:a7:cb:a9:8d:f4:e2: 23:94:fe:71:39:af:23:1b:5f:e7:80:e9:3d:cb:64: 72:e7:ad:4d:b0:a6:dc:75:bd:7b:a2:ff:ff:c6:1b: ca:ed:61:d7:2d:70:5a:77:eb:0e:54:2a:f8:cb:39: 74:75:86:68:80:b0:b9:9a:d7:1c:17:0c:27:47:24: 6c:5f:a2:80:f6:a3:f6:c7:c4:25:fa:22:bd:29:84: ed:f3:83:e8:a9:f8:d7:72:58:c0:d0:ec:86:47:16: 3a:ad:01:19:61:57:da:09:ac:86:aa:8b:a0:8a:2b: 7a:14:4f:bf:f5:fa:65:c8:6f:66:d7:4e:d9:03:04: 4c:53:41:5d:90:89:5b:e0:62:c7:a6:a3:e5:5e:e1: 0e:56:56:70:b0:27:7f:ab:8e:b5:95:cf:6e:5d:3d: 4d:c2:4a:8b:53:08:81:c0:33:a8:d6:c9:fc:1d:6c: 52:a7:84:24:1e:11:7a:91:7a:44:ec:d8:5b:01:45: fb:08:c6:ef:f6:01:4f:69:7a:c0:f7:40:cc:0f:24: 26:d2:6e:f1:f5:cf:07:1a:a5:94:ef:c5:73:ff:25: ec:21:79:ca:0b:ff:3a:f2:e0:45:46:73:4f:86:8b: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:ED:8B:5A:3D:67:32:EC:12:C9:5A:90:C6:0B:43:C5:89:BE:B5:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3894a47b-26d8-319f-b73f-b2c688c91db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:15:ea:d6:5a:a5:11:9d:51:00:c5:c6:cd:e7:b2:b2:89:96: 32:25:f2:b1:48:62:1e:7b:00:7d:95:d8:61:8b:a3:05:e9:c4: ed:9c:6e:1f:fb:92:32:84:70:64:db:5b:00:8e:3e:6e:3b:a0: 02:09:22:7b:c3:46:75:67:b7:8a:ad:5a:cd:b0:4e:0a:af:21: 01:2a:0d:ca:78:1d:0a:a2:75:7e:b8:16:09:70:e2:c9:31:30: a2:a3:a0:cd:12:df:4e:cd:07:4d:33:d6:f0:56:2a:2f:bc:61: fb:1c:13:2d:cf:0e:38:f2:59:59:9a:69:ac:e3:d1:6f:31:79: 39:94:ff:83:6b:dd:d3:39:46:ca:8e:8f:7c:04:9a:17:06:d0: b4:e8:d9:64:d2:f0:7a:b1:d4:ee:ea:68:37:89:c2:50:ac:9c: 3a:9b:8c:da:c4:6e:d4:f7:9e:97:d2:b1:a9:9f:4e:29:69:9c: d3:15:69:ad:e7:97:b6:d5:c1:e1:10:00:3c:7a:1f:3e:e4:65: e3:23:2f:8f:9e:c3:64:2b:ff:c4:19:4d:17:6a:50:e2:ac:89: 15:7a:a9:d8:ed:8a:99:fc:53:21:91:57:bb:79:ce:64:a2:38: 48:e3:11:ac:8a:1d:9b:17:a5:6e:24:11:bb:19:4f:d3:57:5e: 5a:1c:83:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEUslb5OBsZqNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk Nzk5YThkZWEtNTZlMy00OWI3LTgwYzgtMWY3ZDYyYmU3ODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFUW6XX0rri8qEoz2MtkL18f13uSyK6ny6mN 9OIjlP5xOa8jG1/ngOk9y2Ry561NsKbcdb17ov//xhvK7WHXLXBad+sOVCr4yzl0 dYZogLC5mtccFwwnRyRsX6KA9qP2x8Ql+iK9KYTt84PoqfjXcljA0OyGRxY6rQEZ YVfaCayGqougiit6FE+/9fplyG9m107ZAwRMU0FdkIlb4GLHpqPlXuEOVlZwsCd/ q461lc9uXT1NwkqLUwiBwDOo1sn8HWxSp4QkHhF6kXpE7NhbAUX7CMbv9gFPaXrA 90DMDyQm0m7x9c8HGqWU78Vz/yXsIXnKC/868uBFRnNPhossMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvti1o9ZzLsEslakMYLQ8WJvrVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzg5NGE0N2ItMjZkOC0z MTlmLWI3M2YtYjJjNjg4YzkxZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqI/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsV6tZapRGdUQDFxs3nsrKJljIl8rFIYh57AH2V2GGLowXpxO2cbh/7 kjKEcGTbWwCOPm47oAIJInvDRnVnt4qtWs2wTgqvIQEqDcp4HQqidX64Fglw4skx MKKjoM0S307NB00z1vBWKi+8YfscEy3PDjjyWVmaaazj0W8xeTmU/4Nr3dM5RsqO j3wEmhcG0LTo2WTS8Hqx1O7qaDeJwlCsnDqbjNrEbtT3npfSsamfTilpnNMVaa3n l7bVweEQADx6Hz7kZeMjL4+ew2Qr/8QZTRdqUOKsiRV6qdjtipn8UyGRV7t5zmSi OEjjEayKHZsXpW4kEbsZT9NXXlocg+Q= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:59 2025 by rpki-client