$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd89da04-b0f0-36de-8d4a-6ec62953b24d.roa File: cd89da04-b0f0-36de-8d4a-6ec62953b24d.roa (raw, json) Hash identifier: JEALqd+7wkkcD1xzat8Nc6itPLn59mng+skd4p3MP9Y= Subject key identifier: F1:57:D2:B8:EE:A0:B0:66:81:55:32:58:80:59:F0:F9:AD:B4:B5:C2 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE40405C743AF8788F5A5200 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd89da04-b0f0-36de-8d4a-6ec62953b24d.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 22691 IP address blocks: 165.254.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:40:5c:74:3a:f8:78:8f:5a:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=05fcb967-c1ba-4dbd-b0fb-7de62f2a8e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0c:f3:4a:e6:6d:d3:6c:40:17:2b:ee:b6:d5: 54:3b:68:4c:72:9f:7b:ab:36:ce:03:33:e5:0c:17: 0b:71:79:c4:7a:f4:27:2c:1a:d6:d1:f8:39:d8:57: 28:39:d9:e7:aa:77:73:b1:d1:c6:f5:8b:d8:80:a4: c5:71:f5:15:57:c0:8a:6a:3e:4d:07:82:5c:cc:4d: 6f:ef:b9:12:bc:2f:3b:36:45:07:94:52:d3:75:50: b4:8b:dd:88:e0:96:bf:ec:36:4f:52:25:d6:e2:43: 4a:db:00:d1:db:e5:d1:cc:31:b4:dc:15:ff:4c:93: ab:18:04:bd:6e:38:44:5e:e9:a7:76:bf:35:d3:17: 7d:21:d1:bb:a7:7e:9a:51:0a:4c:c0:26:f5:21:15: 81:00:9a:19:cb:70:bd:cf:b4:fb:08:76:b3:df:73: f3:30:9c:5d:a5:48:f5:d6:3f:29:3e:cd:c4:99:8b: 28:18:7f:a2:b4:a6:c7:2a:81:98:1c:fc:6d:98:0e: df:8a:5f:34:c3:7c:5e:e6:65:f1:db:6a:fc:c2:f6: 93:ef:6a:48:8b:28:b5:86:4c:6f:aa:47:49:79:52: f3:25:17:81:15:11:ce:6e:7a:3a:3a:10:78:51:b5: 1a:b4:5e:a9:63:63:94:e7:1c:b1:93:e9:8e:ee:0b: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:57:D2:B8:EE:A0:B0:66:81:55:32:58:80:59:F0:F9:AD:B4:B5:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd89da04-b0f0-36de-8d4a-6ec62953b24d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c8:03:70:48:e8:ad:c3:08:c4:ee:c7:46:ff:d5:50:aa:ab: eb:71:fe:0d:f2:2c:75:1a:b0:90:48:62:20:22:af:46:6c:21: a8:f2:10:a9:8e:72:00:90:53:af:ff:4e:c6:39:56:c5:aa:86: f2:63:59:fd:a1:a8:dd:c9:a1:38:d8:d0:e4:59:d9:b0:dd:cd: 76:41:17:77:20:0a:65:f6:c0:58:77:42:2c:bd:34:f4:8a:9c: 08:b8:1c:9a:d0:ea:2e:58:f4:05:81:06:e4:b3:0d:35:17:36: 78:2f:3a:c7:b2:97:27:ce:18:78:6d:38:e9:43:f6:5a:76:e3: 81:be:bb:21:2d:77:f3:1a:4d:4c:87:3c:36:5e:ed:57:23:62: 86:b2:99:51:0e:6c:fe:02:82:0d:7d:a8:a1:b4:66:68:db:68: d3:f8:f3:f1:e4:0b:97:66:06:b1:e0:9c:74:ef:74:2f:b8:8b: f8:79:34:d3:66:26:fe:b4:ef:dc:a0:b3:2c:3b:7d:dc:96:db: 8f:fc:87:3c:5b:85:65:10:81:67:4c:b3:f4:90:b3:8a:10:ec: e2:66:cb:ef:b7:04:8f:08:70:22:58:b7:ad:7c:07:df:80:b9: 41:79:1e:45:68:fe:72:28:fd:50:0c:22:16:cc:df:27:31:dc: ba:44:ff:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEBcdDr4eI9aUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MDVmY2I5NjctYzFiYS00ZGJkLWIwZmItN2RlNjJmMmE4ZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAzzSuZt02xAFyvuttVUO2hMcp97qzbOAzPl DBcLcXnEevQnLBrW0fg52FcoOdnnqndzsdHG9YvYgKTFcfUVV8CKaj5NB4JczE1v 77kSvC87NkUHlFLTdVC0i92I4Ja/7DZPUiXW4kNK2wDR2+XRzDG03BX/TJOrGAS9 bjhEXumndr810xd9IdG7p36aUQpMwCb1IRWBAJoZy3C9z7T7CHaz33PzMJxdpUj1 1j8pPs3EmYsoGH+itKbHKoGYHPxtmA7fil80w3xe5mXx22r8wvaT72pIiyi1hkxv qkdJeVLzJReBFRHObno6OhB4UbUatF6pY2OU5xyxk+mO7gtW/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFX0rjuoLBmgVUyWIBZ8PmttLXCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2Q4OWRhMDQtYjBmMC0z NmRlLThkNGEtNmVjNjI5NTNiMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHIA3BI6K3DCMTux0b/1VCqq+tx/g3yLHUasJBIYiAir0ZsIajyEKmO cgCQU6//TsY5VsWqhvJjWf2hqN3JoTjY0ORZ2bDdzXZBF3cgCmX2wFh3Qiy9NPSK nAi4HJrQ6i5Y9AWBBuSzDTUXNngvOseylyfOGHhtOOlD9lp244G+uyEtd/MaTUyH PDZe7VcjYoaymVEObP4Cgg19qKG0ZmjbaNP48/HkC5dmBrHgnHTvdC+4i/h5NNNm Jv6079ygsyw7fdyW24/8hzxbhWUQgWdMs/SQs4oQ7OJmy++3BI8IcCJYt618B9+A uUF5HkVo/nIo/VAMIhbM3ycx3LpE/y8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:28 2025 by rpki-client