$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6d452308-b5ae-3985-8b29-e02a73e505a9.roa File: 6d452308-b5ae-3985-8b29-e02a73e505a9.roa (raw, json) Hash identifier: bvOlIaE3IfAZZWv0OTDC7lvjBJlMrCPyN+zcyHgJPGM= Subject key identifier: C2:39:48:8A:B0:70:46:71:1A:19:7C:57:96:25:8B:DD:25:DC:FC:54 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE4040C9F73CC1F9694DF980 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6d452308-b5ae-3985-8b29-e02a73e505a9.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 22006 IP address blocks: 165.254.24.240/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:40:c9:f7:3c:c1:f9:69:4d:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=74849d6d-fc31-4e10-b031-e0a4fc10efb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cd:7f:42:7c:dd:8d:6f:83:99:07:45:6c:f4: 9d:47:56:7f:26:c8:e7:01:26:87:1d:74:6b:d7:0c: 00:5a:f1:f3:e0:b1:0a:56:d9:08:39:bd:7e:39:2d: e8:84:f1:1c:76:e7:32:87:b8:f6:04:cb:fe:8d:41: 6a:59:76:e8:33:3d:06:6b:ff:92:a3:b0:f4:3a:cf: c5:69:5f:46:b7:b0:3c:62:7d:2c:97:ab:7c:09:01: e1:75:76:89:43:42:28:0d:84:83:40:d6:d7:5f:33: 50:e5:54:34:60:2b:a3:ca:03:4a:7c:10:f5:3d:4e: 61:23:1a:6a:3e:ce:f8:fc:56:ff:55:e1:9c:e7:29: 4f:31:e9:96:b0:af:c1:cc:92:3d:c4:b4:e6:32:99: d4:59:59:ff:a8:30:fc:b4:e0:29:20:0d:d1:d3:3b: a5:95:d4:90:9c:42:d1:b5:ea:ef:33:dd:75:35:59: b0:57:01:71:e6:27:5c:be:2a:1d:7c:48:35:35:4e: 77:47:a9:01:89:1c:42:09:f6:84:36:52:7d:1b:f1: 46:de:f5:1e:89:b3:4e:39:7c:15:21:84:95:49:6c: 27:1b:bd:60:6c:8c:7c:5a:f7:57:7f:2e:67:91:2e: 3e:d7:21:fd:7d:fc:6c:08:b9:20:05:b2:28:46:24: 5e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:39:48:8A:B0:70:46:71:1A:19:7C:57:96:25:8B:DD:25:DC:FC:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6d452308-b5ae-3985-8b29-e02a73e505a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.24.240/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:68:97:5b:40:8c:3b:87:5f:2b:84:88:23:49:b4:30:44:84: 6e:c0:a0:5f:04:83:9e:ca:40:97:0a:0d:f2:48:76:b1:2a:42: f9:e1:9d:64:67:94:ec:1a:fc:ab:2a:8e:ab:3e:7e:0c:18:9c: d6:ce:be:c3:45:9a:ab:c1:cb:6d:3f:1b:2c:b2:1b:2c:2b:20: 97:c1:53:7a:6f:a5:35:77:4d:aa:bc:b8:06:f7:8f:f7:9e:53: 83:de:63:9e:2a:eb:ea:fa:79:52:a1:0d:ba:54:58:22:e1:fc: d5:0c:7b:61:93:80:c0:52:43:4d:59:e3:4e:20:92:b7:64:95: 10:12:63:85:d0:21:b5:b7:2c:2a:9a:ea:07:78:ec:56:35:9f: f1:6c:94:14:e8:3f:29:db:43:ea:9d:96:e3:27:74:15:75:d6: cc:a9:28:e5:04:74:68:d6:89:c2:da:48:9d:c0:b7:6f:c1:90: 8b:f6:ad:94:f1:44:51:85:35:15:df:78:47:45:e2:49:dc:8b: 81:f8:a1:f9:ee:74:5e:b3:a6:b5:e1:d6:dc:4b:72:82:e1:a8: 33:3f:18:37:19:c9:52:ff:a8:39:eb:a1:6a:8d:e9:0b:c4:1c: ae:fc:7e:eb:f7:26:04:1a:3c:2b:63:03:14:71:2c:14:6f:70: 00:f0:c0:b1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu+QEDJ9zzB+WlN+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NzQ4NDlkNmQtZmMzMS00ZTEwLWIwMzEtZTBhNGZjMTBlZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs1/QnzdjW+DmQdFbPSdR1Z/JsjnASaHHXRr 1wwAWvHz4LEKVtkIOb1+OS3ohPEcducyh7j2BMv+jUFqWXboMz0Ga/+So7D0Os/F aV9Gt7A8Yn0sl6t8CQHhdXaJQ0IoDYSDQNbXXzNQ5VQ0YCujygNKfBD1PU5hIxpq Ps74/Fb/VeGc5ylPMemWsK/BzJI9xLTmMpnUWVn/qDD8tOApIA3R0zulldSQnELR tervM911NVmwVwFx5idcviodfEg1NU53R6kBiRxCCfaENlJ9G/FG3vUeibNOOXwV IYSVSWwnG71gbIx8WvdXfy5nkS4+1yH9ffxsCLkgBbIoRiRegwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMI5SIqwcEZxGhl8V5Yli90l3PxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNmQ0NTIzMDgtYjVhZS0z OTg1LThiMjktZTAyYTczZTUwNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDpf4Y8DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeaJdbQIw7h18rhIgjSbQwRIRuwKBfBIOeykCXCg3ySHaxKkL54Z1k Z5TsGvyrKo6rPn4MGJzWzr7DRZqrwcttPxssshssKyCXwVN6b6U1d02qvLgG94/3 nlOD3mOeKuvq+nlSoQ26VFgi4fzVDHthk4DAUkNNWeNOIJK3ZJUQEmOF0CG1tywq muoHeOxWNZ/xbJQU6D8p20PqnZbjJ3QVddbMqSjlBHRo1onC2kidwLdvwZCL9q2U 8URRhTUV33hHReJJ3IuB+KH57nRes6a14dbcS3KC4agzPxg3GclS/6g566FqjekL xByu/H7r9yYEGjwrYwMUcSwUb3AA8MCx -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:35 2025 by rpki-client