$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/757ed140-a31e-39a3-8ca4-34123d3ce5dd.roa File: 757ed140-a31e-39a3-8ca4-34123d3ce5dd.roa (raw, json) Hash identifier: 8xd445cdJZe1cPqggbNfyJHS9DXfhCG6zliTIgGSYlY= Subject key identifier: 4F:48:21:CF:0D:42:EF:A1:3D:FA:6E:E0:BA:A6:CE:C9:3D:CC:B5:37 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE403F37BC057350A651BE00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/757ed140-a31e-39a3-8ca4-34123d3ce5dd.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 165.254.145.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:3f:37:bc:05:73:50:a6:51:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=d4fd31e8-7a43-4fd4-83ee-05dcca2eda30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6a:df:45:a8:77:0f:f7:49:de:3a:a1:e8:f3: e3:bd:5e:8b:ce:af:be:09:5d:be:82:a9:5a:f5:10: cc:cb:09:4b:8f:09:52:c1:a6:12:89:f8:33:7c:a3: 7c:cf:70:3a:86:d1:f9:05:91:96:8f:8c:84:50:e2: fe:7d:34:d3:b0:ae:6c:5a:56:dd:d7:ca:45:0d:18: d1:1e:2d:30:9d:93:6a:4f:ee:2e:c3:f1:66:d9:45: ea:db:0c:51:3e:96:b4:e1:f4:bc:16:12:6a:b0:7d: b5:2b:ec:13:2a:b7:c6:21:a7:fa:c1:42:2d:6e:92: 65:83:14:f9:c0:7d:6e:19:c8:f8:04:6b:7b:a2:c3: bf:ed:c9:f3:3f:a6:d0:c7:fd:c8:41:e2:78:49:c2: 2a:db:18:a8:56:3f:fb:e8:72:7e:e1:14:f5:a0:55: 81:12:25:c0:5e:b3:34:34:c1:a9:b5:8c:89:f3:bc: bb:fb:95:04:19:73:04:f8:99:1f:af:af:cc:01:27: 4e:9d:c6:8d:aa:6b:cf:69:7b:99:8e:48:d1:09:4d: a8:c2:ce:c6:d0:d2:e2:c5:e1:8e:87:4d:3d:10:5a: 63:be:5e:8d:38:21:48:d9:39:ce:88:34:b4:37:a9: 1a:9d:ce:36:14:4d:00:fb:84:85:95:8f:96:aa:81: a1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:48:21:CF:0D:42:EF:A1:3D:FA:6E:E0:BA:A6:CE:C9:3D:CC:B5:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/757ed140-a31e-39a3-8ca4-34123d3ce5dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.145.64/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:cc:d7:26:03:db:76:9b:c3:2b:dd:a3:24:43:b5:c7:d2:0a: a6:73:ad:93:e6:15:be:98:a5:54:1d:80:1f:69:45:8b:43:86: c9:a3:3f:f8:f3:d3:c9:f1:ed:c6:a6:7c:61:80:f9:b6:70:08: 77:5d:af:0d:de:cf:84:ca:aa:07:92:e6:85:4a:ef:95:d9:0a: 0f:5f:3e:f1:75:6c:63:c2:50:c8:c9:28:39:c8:84:ff:80:38: fd:ec:20:7c:c5:38:d6:a3:6c:2f:2b:5d:77:fe:81:38:bb:27: 39:fb:79:dc:a1:5a:0d:58:ab:34:ab:78:96:dd:75:b7:90:fb: c6:cb:64:69:71:e5:30:ce:cf:60:f7:a1:88:5d:b6:f0:76:fe: 90:44:ba:17:df:53:10:b0:53:47:95:9f:80:10:38:12:61:ff: 0c:07:18:1a:98:e1:d0:68:d4:83:57:3d:ca:04:10:f9:59:20: 0f:5b:d6:47:86:5f:6b:88:97:1a:46:38:63:46:c9:a9:5c:ff: b3:96:f7:fb:00:90:93:54:a3:03:7a:61:a1:05:71:e9:40:4a: d2:d8:cb:11:99:c1:bc:08:6a:98:ea:2a:83:19:96:9d:1e:bc: 70:1f:8b:d4:98:59:51:b7:61:b9:51:c6:8e:ef:43:fa:b9:79: 22:09:c8:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu+QD83vAVzUKZRvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZDRmZDMxZTgtN2E0My00ZmQ0LTgzZWUtMDVkY2NhMmVkYTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWrfRah3D/dJ3jqh6PPjvV6Lzq++CV2+gqla 9RDMywlLjwlSwaYSifgzfKN8z3A6htH5BZGWj4yEUOL+fTTTsK5sWlbd18pFDRjR Hi0wnZNqT+4uw/Fm2UXq2wxRPpa04fS8FhJqsH21K+wTKrfGIaf6wUItbpJlgxT5 wH1uGcj4BGt7osO/7cnzP6bQx/3IQeJ4ScIq2xioVj/76HJ+4RT1oFWBEiXAXrM0 NMGptYyJ87y7+5UEGXME+Jkfr6/MASdOncaNqmvPaXuZjkjRCU2ows7G0NLixeGO h009EFpjvl6NOCFI2TnOiDS0N6kanc42FE0A+4SFlY+WqoGhmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE9IIc8NQu+hPfpu4Lqmzsk9zLU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzU3ZWQxNDAtYTMxZS0z OWEzLThjYTQtMzQxMjNkM2NlNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGpf6RQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB5zNcmA9t2m8Mr3aMkQ7XH0gqmc62T5hW+mKVUHYAfaUWLQ4bJoz/4 89PJ8e3GpnxhgPm2cAh3Xa8N3s+EyqoHkuaFSu+V2QoPXz7xdWxjwlDIySg5yIT/ gDj97CB8xTjWo2wvK113/oE4uyc5+3ncoVoNWKs0q3iW3XW3kPvGy2RpceUwzs9g 96GIXbbwdv6QRLoX31MQsFNHlZ+AEDgSYf8MBxgamOHQaNSDVz3KBBD5WSAPW9ZH hl9riJcaRjhjRsmpXP+zlvf7AJCTVKMDemGhBXHpQErS2MsRmcG8CGqY6iqDGZad HrxwH4vUmFlRt2G5UcaO70P6uXkiCchk -----END CERTIFICATE-----Generated at Wed Nov 5 16:10:15 2025 by rpki-client