$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c893b414-e2cc-30c6-8957-012f4ec2c42c.roa File: c893b414-e2cc-30c6-8957-012f4ec2c42c.roa (raw, json) Hash identifier: kTTtOLbrYlJvvqtRZkUxiJfppsFz6kkHe4E+9eRU+x0= Subject key identifier: 7D:37:26:2B:F2:CF:9D:C1:3D:44:BD:1B:A7:C8:27:DF:0A:16:35:2B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA1043C982E18815178E4D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c893b414-e2cc-30c6-8957-012f4ec2c42c.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 165.254.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:43:c9:82:e1:88:15:17:8e:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=37ea42ab-c694-49de-938b-1e08016ea29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:21:d6:14:ce:0e:ee:58:dc:d6:b7:7a:da:47: 33:14:7a:86:b2:92:72:8a:b0:8e:81:8e:70:e0:12: 9d:ba:d3:ad:7f:bf:36:9b:8c:8f:74:58:08:e7:3a: 57:19:e5:84:4b:b5:5d:72:68:ae:d8:c5:88:29:cd: 99:08:e3:d4:04:f6:54:83:38:ef:15:16:aa:6f:2e: 2e:f7:24:49:90:a3:69:9d:a2:3c:b6:e2:a7:c6:c9: 28:05:dd:e0:d4:da:5d:d1:4a:45:bc:f0:a7:1a:8d: 64:af:cb:8c:77:70:84:e9:d0:55:fc:f2:d7:5f:38: 4b:67:ce:cd:00:5f:6f:c3:aa:bc:e0:ed:fc:9c:ab: 9e:f8:37:c7:14:18:7d:40:0d:6c:0f:3f:ae:78:69: a8:b3:69:2e:9d:b3:88:2c:ce:cd:c6:f0:6f:f5:01: 74:74:b9:3f:42:16:06:cd:46:f2:a6:30:33:17:7a: 2b:2d:1d:e2:1f:cf:db:e8:90:1e:0d:5e:07:2a:fc: 35:32:3b:ce:83:5d:13:37:d5:28:a9:7b:a0:5a:45: ce:1d:bf:36:f8:73:08:93:ad:2c:f6:46:ab:e5:fa: 5b:a9:ec:d0:8f:6f:d3:f7:19:10:cc:10:44:cc:0a: 99:79:ae:fa:7b:44:85:36:c4:75:6d:c8:43:d7:52: 46:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:37:26:2B:F2:CF:9D:C1:3D:44:BD:1B:A7:C8:27:DF:0A:16:35:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c893b414-e2cc-30c6-8957-012f4ec2c42c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:47:2a:b4:9e:cd:41:97:d3:5f:ff:45:0c:1d:49:0c:39:36: a7:bd:3d:21:58:1a:80:8b:a4:6d:4a:57:66:02:12:e8:ea:46: b6:da:6d:bd:fd:c4:b0:6e:85:86:8b:26:76:fd:07:a8:a0:b0: a9:93:11:35:0e:d5:bf:c7:67:08:a1:e1:67:52:68:42:ee:bd: 01:e0:e0:d2:71:b9:2c:97:38:63:20:c7:e4:d0:50:ec:9a:fb: 87:16:be:48:74:1e:00:e2:10:c1:69:4d:09:32:0a:86:ed:7d: ee:50:28:ab:eb:c5:3b:7b:fa:8b:87:b2:1e:6a:1d:af:99:64: 20:70:3f:94:17:ff:c1:17:82:6b:8b:2f:2c:bd:2a:b0:a4:43: 20:23:bc:1d:22:93:c9:ab:b0:21:e3:54:3c:e7:b1:8b:8b:88: c0:ef:c7:ee:22:ca:33:4c:94:8a:5f:bd:10:f1:21:e5:ec:5a: 74:49:a7:ba:f8:58:56:06:e1:11:18:6f:ba:9b:53:05:a3:cb: ed:3a:d4:52:cf:ba:67:ba:45:37:3c:9a:97:9a:3e:9f:30:e3: 3a:0d:df:70:87:3e:9a:86:4c:ce:8a:7b:f3:59:6a:d2:92:1a: 71:c4:8d:c2:99:fe:9f:80:15:6a:81:03:05:00:9d:94:30:a6: 44:bf:1a:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEPJguGIFReOTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MzdlYTQyYWItYzY5NC00OWRlLTkzOGItMWUwODAxNmVhMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SHWFM4O7ljc1rd62kczFHqGspJyirCOgY5w 4BKdutOtf782m4yPdFgI5zpXGeWES7Vdcmiu2MWIKc2ZCOPUBPZUgzjvFRaqby4u 9yRJkKNpnaI8tuKnxskoBd3g1Npd0UpFvPCnGo1kr8uMd3CE6dBV/PLXXzhLZ87N AF9vw6q84O38nKue+DfHFBh9QA1sDz+ueGmos2kunbOILM7NxvBv9QF0dLk/QhYG zUbypjAzF3orLR3iH8/b6JAeDV4HKvw1MjvOg10TN9UoqXugWkXOHb82+HMIk60s 9kar5fpbqezQj2/T9xkQzBBEzAqZea76e0SFNsR1bchD11JGmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH03Jivyz53BPUS9G6fIJ98KFjUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzg5M2I0MTQtZTJjYy0z MGM2LTg5NTctMDEyZjRlYzJjNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf6NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhHKrSezUGX01//RQwdSQw5Nqe9PSFYGoCLpG1KV2YCEujqRrbabb39 xLBuhYaLJnb9B6igsKmTETUO1b/HZwih4WdSaELuvQHg4NJxuSyXOGMgx+TQUOya +4cWvkh0HgDiEMFpTQkyCobtfe5QKKvrxTt7+ouHsh5qHa+ZZCBwP5QX/8EXgmuL Lyy9KrCkQyAjvB0ik8mrsCHjVDznsYuLiMDvx+4iyjNMlIpfvRDxIeXsWnRJp7r4 WFYG4REYb7qbUwWjy+061FLPume6RTc8mpeaPp8w4zoN33CHPpqGTM6Ke/NZatKS GnHEjcKZ/p+AFWqBAwUAnZQwpkS/Gpg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:41 2025 by rpki-client