$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa File: 66cb728c-d2d4-30fc-9ad1-2039318ab524.roa (raw, json) Hash identifier: 1bHMHNB1RxkCT/r7v8XMXVLHosiYkrcHVCOHMKyQwac= Subject key identifier: FA:CF:77:F6:1F:99:CC:7D:8B:F3:CD:DF:75:73:5D:3A:E9:7B:26:42 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE403FBAEC94501209ACD480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 165.254.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:3f:ba:ec:94:50:12:09:ac:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=d4c989c2-a600-4775-8aca-b652aa5b556e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:14:a6:ec:8c:46:07:3e:15:3e:55:8a:3f: a2:8a:f2:e8:4e:14:c1:c2:fc:21:a9:f4:90:49:8b: 6f:49:6b:b9:78:eb:55:f0:4e:f1:b1:fc:69:2e:1e: 02:73:ea:1a:2d:00:9a:23:26:81:65:02:f4:3f:18: 10:96:82:96:89:67:fd:54:af:40:6f:51:8c:39:97: 8c:ed:1b:10:17:51:e8:33:e8:c8:b5:f8:c3:84:cd: f5:8d:3b:6b:31:a0:72:ca:ae:a1:90:68:8f:7d:d8: 12:de:30:df:1a:b2:e4:64:18:ca:9b:70:c4:6b:09: 4a:ac:d2:e0:de:ed:f8:60:f9:4f:a9:e4:33:72:f0: cf:8e:e7:3e:16:a1:51:41:97:69:fb:fb:28:48:da: 46:e2:b9:06:ab:62:ed:06:43:26:ce:db:83:d4:91: f3:b5:d7:3b:28:f8:78:9b:35:21:e8:a7:44:be:3b: 5b:ec:b9:c0:c4:34:53:22:a2:a3:96:13:ce:07:1b: 8f:76:4e:b2:45:18:87:2c:1d:05:6c:26:94:ad:ec: bb:c6:70:60:1a:7c:66:e6:7d:9a:8b:fa:d5:92:67: d3:b1:fc:80:bd:41:f7:7e:d2:7b:ea:3e:77:48:74: 02:5f:33:07:c7:52:b8:56:4d:4f:3c:74:03:fc:55: 6a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CF:77:F6:1F:99:CC:7D:8B:F3:CD:DF:75:73:5D:3A:E9:7B:26:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:cf:9d:95:36:b3:03:e2:e1:61:e6:f7:05:28:32:af:6e:84: 3d:26:ea:65:31:22:f2:81:8b:61:80:b4:1a:48:37:03:ee:d3: 90:a5:21:32:44:41:29:c5:08:10:ef:24:18:80:97:9f:78:05: 36:70:f8:50:e6:42:96:a8:07:fa:88:11:a9:97:50:16:bb:b3: 77:f0:80:34:ce:a2:0a:2a:2d:17:5f:19:08:fc:2c:31:c6:a4: 86:6a:01:a8:91:cc:0e:a8:92:ec:d5:88:54:d3:10:25:1f:c4: 1f:d0:d6:f0:79:7f:49:92:6d:74:58:6e:34:52:b1:a4:eb:e3: 38:2f:9b:a7:0b:e8:b5:e6:8d:70:92:a9:1a:e1:5c:72:a7:20: 0f:10:5c:a1:0e:8b:2a:03:8b:60:5d:75:ea:e2:30:a7:f3:0b: 54:d4:65:26:12:16:e8:4e:92:0d:9a:8b:50:d7:cc:e3:73:e2: 49:ac:e0:87:3b:76:a5:4c:bd:74:48:05:7d:a2:1a:d1:8c:1f: 5c:a4:9f:ab:11:5d:9a:7b:86:33:c7:c3:31:50:74:68:38:0e: 19:96:be:06:59:52:1c:4b:77:35:7f:94:aa:b3:b6:31:ec:52: 7e:91:3d:9e:51:84:6e:68:a8:5a:02:06:b2:c3:ab:07:b5:a6: 4c:0d:8e:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QD+67JRQEgms1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZDRjOTg5YzItYTYwMC00Nzc1LThhY2EtYjY1MmFhNWI1NTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIgUpuyMRgc+FT5Vij+iivLoThTBwvwhqfSQ SYtvSWu5eOtV8E7xsfxpLh4Cc+oaLQCaIyaBZQL0PxgQloKWiWf9VK9Ab1GMOZeM 7RsQF1HoM+jItfjDhM31jTtrMaByyq6hkGiPfdgS3jDfGrLkZBjKm3DEawlKrNLg 3u34YPlPqeQzcvDPjuc+FqFRQZdp+/soSNpG4rkGq2LtBkMmztuD1JHztdc7KPh4 mzUh6KdEvjtb7LnAxDRTIqKjlhPOBxuPdk6yRRiHLB0FbCaUrey7xnBgGnxm5n2a i/rVkmfTsfyAvUH3ftJ76j53SHQCXzMHx1K4Vk1PPHQD/FVquQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrPd/Yfmcx9i/PN33VzXTrpeyZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjZjYjcyOGMtZDJkNC0z MGZjLTlhZDEtMjAzOTMxOGFiNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMjPnZU2swPi4WHm9wUoMq9uhD0m6mUxIvKBi2GAtBpINwPu05ClITJE QSnFCBDvJBiAl594BTZw+FDmQpaoB/qIEamXUBa7s3fwgDTOogoqLRdfGQj8LDHG pIZqAaiRzA6okuzViFTTECUfxB/Q1vB5f0mSbXRYbjRSsaTr4zgvm6cL6LXmjXCS qRrhXHKnIA8QXKEOiyoDi2BdderiMKfzC1TUZSYSFuhOkg2ai1DXzONz4kms4Ic7 dqVMvXRIBX2iGtGMH1ykn6sRXZp7hjPHwzFQdGg4DhmWvgZZUhxLdzV/lKqztjHs Un6RPZ5RhG5oqFoCBrLDqwe1pkwNjro= -----END CERTIFICATE-----Generated at Wed Nov 5 07:11:05 2025 by rpki-client