$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa File: bf541b3f-d38b-3716-affa-7307e218a63b.roa (raw, json) Hash identifier: u0HKNKQE85xn6VYxfsv1B3ezyQzUcGCWnypdE3Z5OEs= Subject key identifier: 6E:45:B1:9E:48:9C:E2:07:A2:81:2B:CA:D9:08:7C:83:DD:A7:31:90 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CD6D2219C9E5534BE0FEA2100 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 25645 IP address blocks: 165.254.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:21:9c:9e:55:34:be:0f:ea:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=8412220c-fd2b-43db-b03e-8930291de3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:fd:e4:5e:28:fc:56:5f:4e:af:4b:1a:03: 09:1f:a5:a9:a2:c9:42:0e:b7:07:c4:29:63:ef:b1: 8c:d1:d4:5e:57:e6:0c:f0:8c:52:40:fc:8e:e5:d2: b6:4c:38:a1:4c:fc:3f:eb:76:3e:70:f0:63:81:33: 23:75:28:49:85:48:40:d4:cb:74:90:db:55:d7:4a: 73:6d:80:f1:f9:6f:75:b2:de:45:9f:86:07:f2:7f: 39:eb:f5:82:b8:13:81:83:c1:fd:23:b8:0c:fe:4a: 90:cb:57:ce:d1:e9:79:a6:7c:52:2d:6f:8c:14:45: 56:ca:9d:6e:fd:6c:63:0b:57:59:ed:28:10:ca:d7: b7:b1:c0:a9:e1:27:ff:1c:e7:bd:99:62:12:04:d2: 91:6a:aa:9f:25:d0:df:bb:85:6e:01:89:e3:51:56: ab:06:d1:d5:2b:14:34:11:3b:53:3e:1f:b7:71:b3: 64:e4:c5:6e:65:ac:1d:97:e7:13:ab:bb:5d:8c:01: 9c:82:44:4e:84:f1:55:9a:fb:bb:c7:37:e4:f7:0e: 90:86:04:e2:75:c9:8c:f1:f8:d1:75:c5:ee:88:43: 13:5d:b9:a2:ef:df:a6:0e:4b:b6:d4:9e:d3:b4:ea: 22:20:11:24:9a:b6:f1:5a:98:c8:c5:8a:d3:0c:e0: 54:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:45:B1:9E:48:9C:E2:07:A2:81:2B:CA:D9:08:7C:83:DD:A7:31:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:75:6d:fa:5e:aa:96:b2:e4:d7:2f:3d:8d:f0:d5:64:be:b0: df:d8:d7:69:3b:7a:2b:44:f2:50:3d:95:b7:81:29:c3:ab:3e: 39:15:72:3c:f1:4b:31:17:dc:62:f7:9a:34:82:1f:f9:b2:54: 76:e9:23:8f:d3:0e:d3:fd:be:cb:da:7e:c7:da:2b:4d:47:48: 00:2c:1d:31:ce:f3:4a:c5:91:01:65:bc:ac:89:50:29:84:f7: c1:d2:54:a8:dc:db:9c:e2:ed:bd:4d:a1:3e:db:f9:7c:37:af: 03:06:0d:62:e2:54:95:ef:3c:83:c3:ad:dc:bd:8b:89:fe:77: 76:3e:07:95:1a:7f:10:74:3e:24:35:d9:e4:4d:0e:78:04:2b: 0d:d7:58:6a:fb:98:74:f3:55:51:31:ba:7b:e5:5c:51:b1:61: c9:11:ce:02:0b:05:c5:60:28:bb:7b:01:cd:7a:cd:aa:0e:d2: 88:78:dd:68:5a:79:00:a8:05:ff:70:7c:56:8b:37:9e:8a:af: c4:0a:cb:0b:7b:fe:82:12:e7:1a:5e:25:6f:84:c5:61:34:44: 9d:95:23:d3:56:28:26:83:cf:83:0d:bd:a5:a6:e4:63:45:19: 8f:bd:fd:e6:51:e0:20:93:82:08:13:3c:3a:0b:d2:af:e6:d1: 1c:35:0f:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0iGcnlU0vg/qIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk ODQxMjIyMGMtZmQyYi00M2RiLWIwM2UtODkzMDI5MWRlM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsf95F4o/FZfTq9LGgMJH6WposlCDrcHxClj 77GM0dReV+YM8IxSQPyO5dK2TDihTPw/63Y+cPBjgTMjdShJhUhA1Mt0kNtV10pz bYDx+W91st5Fn4YH8n856/WCuBOBg8H9I7gM/kqQy1fO0el5pnxSLW+MFEVWyp1u /WxjC1dZ7SgQyte3scCp4Sf/HOe9mWISBNKRaqqfJdDfu4VuAYnjUVarBtHVKxQ0 ETtTPh+3cbNk5MVuZawdl+cTq7tdjAGcgkROhPFVmvu7xzfk9w6QhgTidcmM8fjR dcXuiEMTXbmi79+mDku21J7TtOoiIBEkmrbxWpjIxYrTDOBUPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5FsZ5InOIHooErytkIfIPdpzGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmY1NDFiM2YtZDM4Yi0z NzE2LWFmZmEtNzMwN2UyMThhNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF1bfpeqpay5NcvPY3w1WS+sN/Y12k7eitE8lA9lbeBKcOrPjkVcjzx SzEX3GL3mjSCH/myVHbpI4/TDtP9vsvafsfaK01HSAAsHTHO80rFkQFlvKyJUCmE 98HSVKjc25zi7b1NoT7b+Xw3rwMGDWLiVJXvPIPDrdy9i4n+d3Y+B5UafxB0PiQ1 2eRNDngEKw3XWGr7mHTzVVExunvlXFGxYckRzgILBcVgKLt7Ac16zaoO0oh43Wha eQCoBf9wfFaLN56Kr8QKywt7/oIS5xpeJW+ExWE0RJ2VI9NWKCaDz4MNvaWm5GNF GY+9/eZR4CCTgggTPDoL0q/m0Rw1D4I= -----END CERTIFICATE-----Generated at Mon Mar 2 02:36:43 2026 by rpki-client