$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9378aadf-33bd-3a99-820a-36e781e6798a.roa File: 9378aadf-33bd-3a99-820a-36e781e6798a.roa (raw, json) Hash identifier: J5q64OsoIA9jNd3qZJBHUc0L7HQfij8bQH3QGhrcT4s= Subject key identifier: 17:60:00:64:87:4A:B5:C1:02:36:69:3F:3E:4F:89:DF:EA:73:BF:CC Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A054F1D61FD40EFABC58790 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9378aadf-33bd-3a99-820a-36e781e6798a.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 22691 IP address blocks: 165.254.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:4f:1d:61:fd:40:ef:ab:c5:87:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=5954b086-0c6f-4fed-8edf-753c2013abe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:f4:59:5d:be:ec:60:c1:1f:56:64:d1:56: b7:c2:2f:79:c0:74:a3:b6:d6:cc:04:36:5b:9a:cc: 18:4c:c2:f7:d0:68:fb:82:f7:3c:6e:b9:54:f4:7a: 08:58:fb:b7:05:b1:e5:f2:08:9e:75:24:4c:67:3e: 35:fc:45:9d:f0:3a:63:2d:c6:64:0c:90:ab:3b:e0: 1e:a0:b9:7e:74:8b:b4:47:c6:f8:bd:ef:5c:1e:c9: bc:c3:f1:08:63:2b:1a:5d:a2:e1:0c:f2:bf:8d:b9: ee:62:49:5f:47:96:fd:f3:b9:a1:82:02:02:93:a1: 56:ae:6a:53:8a:b2:b1:01:b2:d9:81:fe:2f:c2:f8: 35:e3:21:e4:8f:20:e0:49:9c:bc:d3:00:ad:e8:99: 97:d1:c5:78:6f:43:70:5e:7c:04:d2:57:d8:3b:4d: c3:d0:8d:e1:69:65:df:a1:e1:df:ce:46:b7:1a:54: a4:4b:14:10:96:1e:ce:bb:f1:38:5e:f8:4c:d1:53: be:aa:fc:fe:d0:ed:15:0d:d0:61:dc:e6:8c:cc:55: 67:cd:80:64:7c:d8:3d:b9:51:07:a9:b7:c2:05:a3: 5c:79:4e:ec:53:69:cc:92:58:18:04:ec:4e:7d:c2: 94:d8:0a:05:ec:25:02:d0:42:56:a2:e3:e2:c8:2a: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:60:00:64:87:4A:B5:C1:02:36:69:3F:3E:4F:89:DF:EA:73:BF:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9378aadf-33bd-3a99-820a-36e781e6798a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:bb:ba:ab:4a:15:c5:ae:4d:bd:5d:52:ef:33:0b:5e:dc:50: 64:bc:f4:74:c6:2c:dc:cf:7d:42:37:54:f1:81:0c:cd:6e:f3: 95:c4:f2:87:0c:4f:0f:27:74:ae:2d:43:80:15:7e:e0:26:df: 61:2a:b4:7a:67:79:2b:72:a8:65:49:c5:55:ca:e6:a8:bd:0a: 49:85:92:ad:cb:59:b6:f5:13:02:92:71:50:b0:42:60:53:c0: 49:d5:42:b0:61:f6:89:e4:57:7e:4c:43:0d:16:b2:ed:ad:08: 41:59:3f:a4:8c:9e:5e:2d:ff:7f:59:25:b5:0a:b9:a7:73:16: 1a:7d:c9:44:d0:9b:90:1d:b9:ea:82:76:d4:4b:c0:73:d6:83: be:93:b9:a8:93:44:e1:6b:d4:51:73:0e:df:03:63:ec:f8:0d: 65:d1:ea:a7:51:eb:9b:52:47:fb:18:a4:f1:c3:b5:68:94:1e: 36:fc:c7:22:cb:4e:c7:c6:22:98:86:ff:46:e9:2f:e9:e7:f4: ec:c7:67:8c:7a:4c:64:17:da:1e:45:34:ff:f6:85:71:fc:09: c7:ce:49:14:ee:1e:ef:93:94:63:ad:34:85:ae:10:4b:44:c6: 0d:91:34:b2:6e:47:6c:d4:f5:9d:18:ed:f6:4a:3f:45:c6:73: 1f:89:ed:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BU8dYf1A76vFh5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NTk1NGIwODYtMGM2Zi00ZmVkLThlZGYtNzUzYzIwMTNhYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7L0WV2+7GDBH1Zk0Va3wi95wHSjttbMBDZb mswYTML30Gj7gvc8brlU9HoIWPu3BbHl8giedSRMZz41/EWd8DpjLcZkDJCrO+Ae oLl+dIu0R8b4ve9cHsm8w/EIYysaXaLhDPK/jbnuYklfR5b987mhggICk6FWrmpT irKxAbLZgf4vwvg14yHkjyDgSZy80wCt6JmX0cV4b0NwXnwE0lfYO03D0I3haWXf oeHfzka3GlSkSxQQlh7Ou/E4XvhM0VO+qvz+0O0VDdBh3OaMzFVnzYBkfNg9uVEH qbfCBaNceU7sU2nMklgYBOxOfcKU2AoF7CUC0EJWouPiyCqEcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdgAGSHSrXBAjZpPz5Pid/qc7/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTM3OGFhZGYtMzNiZC0z YTk5LTgyMGEtMzZlNzgxZTY3OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKq7uqtKFcWuTb1dUu8zC17cUGS89HTGLNzPfUI3VPGBDM1u85XE8ocM Tw8ndK4tQ4AVfuAm32EqtHpneStyqGVJxVXK5qi9CkmFkq3LWbb1EwKScVCwQmBT wEnVQrBh9onkV35MQw0Wsu2tCEFZP6SMnl4t/39ZJbUKuadzFhp9yUTQm5AdueqC dtRLwHPWg76TuaiTROFr1FFzDt8DY+z4DWXR6qdR65tSR/sYpPHDtWiUHjb8xyLL TsfGIpiG/0bpL+nn9OzHZ4x6TGQX2h5FNP/2hXH8CcfOSRTuHu+TlGOtNIWuEEtE xg2RNLJuR2zU9Z0Y7fZKP0XGcx+J7SM= -----END CERTIFICATE-----Generated at Fri Apr 17 18:25:08 2026 by rpki-client