$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/baa5e1cb-359c-36d6-81d8-2c4aed65dad2.roa File: baa5e1cb-359c-36d6-81d8-2c4aed65dad2.roa (raw, json) Hash identifier: J6EPqSIJNbS76XT/fpXzQHcaxtV65PpOtAeIt0hcWkU= Subject key identifier: 6A:E0:43:03:4C:2D:F3:8E:54:E3:BD:9A:BD:E9:F8:62:ED:C4:F0:94 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B583C8E48FABE2A4652FDC880 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/baa5e1cb-359c-36d6-81d8-2c4aed65dad2.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396168 IP address blocks: 165.254.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8e:48:fa:be:2a:46:52:fd:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=7204cbb8-5a34-46d1-adca-20a2b81992e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1e:ea:e3:8c:db:fe:33:1a:17:64:3c:12:4c: c3:30:4b:d3:0b:54:ea:f3:f1:4b:2f:ba:e5:7c:f6: b6:dc:ad:52:d5:78:f0:56:4b:cd:ef:90:97:cf:84: 6d:46:c8:6c:5f:85:9c:1e:fb:32:94:9f:7a:e9:a7: fe:94:b9:25:82:a9:d8:02:b9:92:49:b0:6f:f4:9c: 97:0f:b8:e6:4e:2f:a2:69:fa:53:66:cf:82:d0:56: 8c:54:ee:15:b4:20:c7:86:9f:f5:87:09:87:69:dd: 37:08:06:5d:21:e4:55:1b:56:3d:67:24:12:d9:c5: 95:c9:18:88:37:26:a3:dc:c6:17:93:d6:21:ec:f7: 0c:42:76:16:6a:64:d1:10:fe:a6:63:fc:9a:cf:32: d9:76:4c:55:13:ce:05:5d:20:18:e1:34:72:c4:97: 61:fd:8c:64:d5:b0:21:ee:d3:a3:72:97:c2:68:8c: 2c:a0:d8:62:5a:1c:fe:96:0b:66:ad:3f:61:df:74: fd:63:c4:b7:50:77:74:53:6e:22:a0:a8:e3:99:06: cf:01:2b:75:e2:23:08:a1:f7:3b:4f:58:6e:c9:9d: 27:64:94:2d:93:32:75:6a:17:7c:9c:62:a3:01:26: a6:6d:76:04:52:89:d8:2e:1d:6d:24:2d:ae:0f:b4: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E0:43:03:4C:2D:F3:8E:54:E3:BD:9A:BD:E9:F8:62:ED:C4:F0:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/baa5e1cb-359c-36d6-81d8-2c4aed65dad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:2a:4b:7c:53:0c:12:35:3b:d0:b5:fc:21:e8:99:23:7a:4f: ef:e4:29:8a:eb:8f:71:8e:42:7e:51:eb:62:b7:50:e8:7e:71: 8b:e7:34:5e:1d:a7:75:3f:42:7a:93:02:ca:dc:da:c2:ee:66: 39:e8:57:35:a3:3f:69:12:7a:3b:7b:22:5a:42:c2:3f:4a:aa: 4b:ab:1f:16:71:b3:58:5d:10:fe:11:f2:2c:8a:90:cd:40:4f: ca:38:c8:bd:47:56:0d:92:d4:4d:65:08:57:f0:30:bc:e6:4d: 5f:0f:2a:4f:48:b6:c6:db:33:db:b9:14:06:d0:c2:1f:73:93: d3:1c:fe:40:83:a5:53:26:26:76:7d:25:7f:44:32:aa:37:4f: 37:14:d2:9b:3e:67:5e:ea:c4:80:19:1f:01:d0:30:7f:0c:ef: d5:44:60:c0:31:01:2c:3d:76:74:16:52:f6:c1:75:9d:2c:a7: 4e:92:cc:9a:4b:a2:48:f9:cb:69:a6:2c:dd:34:7c:28:b4:10: a5:56:2b:71:7b:4e:f7:8a:e8:58:37:cc:c7:df:64:a5:58:51: 86:44:1b:e3:a8:38:ed:8f:e2:a3:35:9b:0b:87:56:13:71:c9: a6:83:70:6d:9f:b2:48:e5:21:3f:90:f3:24:47:2d:23:b6:1a: 78:e2:2f:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPI5I+r4qRlL9yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NzIwNGNiYjgtNWEzNC00NmQxLWFkY2EtMjBhMmI4MTk5MmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix7q44zb/jMaF2Q8EkzDMEvTC1Tq8/FLL7rl fPa23K1S1XjwVkvN75CXz4RtRshsX4WcHvsylJ966af+lLklgqnYArmSSbBv9JyX D7jmTi+iafpTZs+C0FaMVO4VtCDHhp/1hwmHad03CAZdIeRVG1Y9ZyQS2cWVyRiI Nyaj3MYXk9Yh7PcMQnYWamTREP6mY/yazzLZdkxVE84FXSAY4TRyxJdh/Yxk1bAh 7tOjcpfCaIwsoNhiWhz+lgtmrT9h33T9Y8S3UHd0U24ioKjjmQbPASt14iMIofc7 T1huyZ0nZJQtkzJ1ahd8nGKjASambXYEUonYLh1tJC2uD7Q26wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrgQwNMLfOOVOO9mr3p+GLtxPCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmFhNWUxY2ItMzU5Yy0z NmQ2LTgxZDgtMmM0YWVkNjVkYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAqS3xTDBI1O9C1/CHomSN6T+/kKYrrj3GOQn5R62K3UOh+cYvnNF4d p3U/QnqTAsrc2sLuZjnoVzWjP2kSejt7IlpCwj9KqkurHxZxs1hdEP4R8iyKkM1A T8o4yL1HVg2S1E1lCFfwMLzmTV8PKk9ItsbbM9u5FAbQwh9zk9Mc/kCDpVMmJnZ9 JX9EMqo3TzcU0ps+Z17qxIAZHwHQMH8M79VEYMAxASw9dnQWUvbBdZ0sp06SzJpL okj5y2mmLN00fCi0EKVWK3F7TveK6Fg3zMffZKVYUYZEG+OoOO2P4qM1mwuHVhNx yaaDcG2fskjlIT+Q8yRHLSO2GnjiL9M= -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:49 2025 by rpki-client