$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a9ba5d6b-f640-3f62-9e25-31e4d313af22.roa File: a9ba5d6b-f640-3f62-9e25-31e4d313af22.roa (raw, json) Hash identifier: s9otfHmFvRtJZzM/ZCK/k0Ynzer2T8YctuMmDlSl9eU= Subject key identifier: F2:F5:4A:BF:C7:12:7F:DD:F7:7D:0A:B1:65:D5:F6:92:F3:9C:4B:3A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA10435E2DA36A88BDB04700 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a9ba5d6b-f640-3f62-9e25-31e4d313af22.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 165.254.247.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:43:5e:2d:a3:6a:88:bd:b0:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=2925db60-8d28-41e7-96d8-d22bcac2d33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d2:c0:fd:26:e2:19:6b:04:3a:06:50:e7:a5: 37:30:b9:f1:36:bc:ea:b7:2c:fa:df:72:e6:70:43: b3:9e:31:21:9b:73:35:1d:71:38:a3:bb:24:41:b7: 9f:b1:8e:68:28:73:03:e6:78:a0:f4:3b:a0:bf:31: d2:d3:2e:81:3d:de:2d:7a:f9:ea:62:45:aa:63:61: 95:fe:45:b8:33:42:8a:3e:2e:f8:c0:3e:87:39:a1: 3c:aa:29:a0:47:7c:2b:64:64:82:60:9d:64:2f:4b: 8c:cb:dc:e6:46:a3:d3:e4:d0:03:df:e4:15:bd:fe: 54:c2:44:86:54:96:23:87:15:e6:2e:0b:e5:e7:49: fb:02:04:64:ca:63:e0:d8:78:a6:e4:4f:72:ee:e2: f7:ae:5c:5f:3e:a9:64:1d:1c:0b:71:41:d9:a3:5c: 79:a2:b6:e6:a7:33:2c:75:53:4f:08:9a:84:e1:d5: 42:64:07:6a:81:3d:81:cd:bb:0f:2a:53:41:23:bf: d4:5c:23:c8:6a:a0:2f:84:17:31:04:b7:1f:b9:e9: fb:46:ae:16:b2:81:d7:19:dd:27:60:36:79:6c:2f: e0:b9:22:17:ac:ad:0d:0c:0b:c2:75:22:c6:14:12: c4:87:9c:06:51:40:8b:89:d8:cd:57:47:c4:e9:be: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F5:4A:BF:C7:12:7F:DD:F7:7D:0A:B1:65:D5:F6:92:F3:9C:4B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a9ba5d6b-f640-3f62-9e25-31e4d313af22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.247.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:61:07:4b:98:6a:94:26:07:0b:b1:5e:fd:d8:7f:64:2a:18: 9c:37:c1:49:c5:65:94:37:75:3a:ff:a5:2c:55:88:f1:ed:3e: 6d:2f:b5:d4:53:57:4a:ba:84:09:57:bd:19:01:d2:e2:3b:27: 25:2e:9e:34:ce:dc:fe:4f:0a:ce:95:7f:48:61:ce:00:0c:70: 70:4a:82:e2:01:36:7c:70:66:1b:f7:5c:26:bc:ed:e7:b6:e5: 72:ea:91:75:73:2c:31:4d:cd:77:e9:e7:66:81:f2:1b:88:5e: db:a3:44:f4:14:69:6a:8f:bc:e8:22:dc:c2:d5:a5:2b:f3:3e: ed:f8:8f:57:dc:33:00:7a:c9:2e:6b:f5:d8:46:a2:13:6c:ce: 64:3d:64:2b:5f:aa:85:15:d8:f5:6a:4c:d4:68:01:a0:e2:9f: 4f:a5:31:fa:34:3d:1d:bf:8d:56:56:3c:92:82:e4:1e:ae:ef: 7e:04:85:87:38:44:40:10:26:69:69:02:9b:c8:5f:71:df:ea: a7:75:27:4f:43:2a:23:c5:af:c9:4c:7c:16:98:89:23:28:7a: ea:cc:72:92:5f:63:3e:d2:8b:93:af:e6:fa:8f:48:5b:ab:82: 22:26:4e:55:1a:25:df:e1:4c:cd:e5:9d:df:37:d6:e1:16:50: 97:81:51:c4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu6EENeLaNqiL2wRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MjkyNWRiNjAtOGQyOC00MWU3LTk2ZDgtZDIyYmNhYzJkMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNLA/SbiGWsEOgZQ56U3MLnxNrzqtyz633Lm cEOznjEhm3M1HXE4o7skQbefsY5oKHMD5nig9DugvzHS0y6BPd4tevnqYkWqY2GV /kW4M0KKPi74wD6HOaE8qimgR3wrZGSCYJ1kL0uMy9zmRqPT5NAD3+QVvf5UwkSG VJYjhxXmLgvl50n7AgRkymPg2Him5E9y7uL3rlxfPqlkHRwLcUHZo1x5orbmpzMs dVNPCJqE4dVCZAdqgT2BzbsPKlNBI7/UXCPIaqAvhBcxBLcfuen7Rq4WsoHXGd0n YDZ5bC/guSIXrK0NDAvCdSLGFBLEh5wGUUCLidjNV0fE6b60dwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPL1Sr/HEn/d930KsWXV9pLznEs6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTliYTVkNmItZjY0MC0z ZjYyLTllMjUtMzFlNGQzMTNhZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf73gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8YQdLmGqUJgcLsV792H9kKhicN8FJxWWUN3U6/6UsVYjx7T5tL7XU U1dKuoQJV70ZAdLiOyclLp40ztz+TwrOlX9IYc4ADHBwSoLiATZ8cGYb91wmvO3n tuVy6pF1cywxTc136edmgfIbiF7bo0T0FGlqj7zoItzC1aUr8z7t+I9X3DMAesku a/XYRqITbM5kPWQrX6qFFdj1akzUaAGg4p9PpTH6ND0dv41WVjySguQeru9+BIWH OERAECZpaQKbyF9x3+qndSdPQyojxa/JTHwWmIkjKHrqzHKSX2M+0ouTr+b6j0hb q4IiJk5VGiXf4UzN5Z3fN9bhFlCXgVHE -----END CERTIFICATE-----Generated at Wed Nov 5 01:23:52 2025 by rpki-client