$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de1f14c8-a057-3631-ab65-38bb76a8e939.roa File: de1f14c8-a057-3631-ab65-38bb76a8e939.roa (raw, json) Hash identifier: etTF1DmzvZ3uT10RtkyVgPEYdsrSePSsFk23ED8yf0I= Subject key identifier: 53:97:DE:51:16:7B:91:7E:07:60:D8:F2:11:1E:FB:74:FD:53:61:C2 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA104413328C0CA3A1ADBC20 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de1f14c8-a057-3631-ab65-38bb76a8e939.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 40934 IP address blocks: 165.254.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:44:13:32:8c:0c:a3:a1:ad:bc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=69102a43-1220-46c3-9864-520654b5b1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:5a:57:62:8a:10:1c:8d:fc:a7:01:16:d2: 3a:ff:5c:94:18:64:87:6d:eb:e8:31:f1:1a:a5:ec: 46:f6:23:d8:12:af:01:99:d6:41:97:14:eb:6c:be: 0e:cf:b3:90:a4:91:43:1c:9c:f9:b3:85:90:c8:47: 80:16:b6:3d:df:fa:37:0f:09:7d:ed:e1:03:3b:eb: c7:b5:94:bc:9b:af:ac:15:6f:62:4b:79:32:b0:9e: 55:e9:00:f8:82:e3:00:5a:ec:bb:88:ef:5b:d8:a7: 72:3d:91:f7:f1:b9:e1:eb:ea:3e:91:51:e3:53:0d: 5d:66:ad:13:ef:25:29:fb:f8:fe:b0:b6:f1:32:9e: fd:71:cc:45:64:cb:60:cb:69:b7:a5:29:7f:5e:be: af:1d:29:ed:0b:c1:55:a2:ca:c1:63:7f:5f:31:c7: 3e:d0:d9:ea:d8:30:82:18:2e:10:74:f6:bb:d7:27: 22:8b:c4:4a:e5:c6:72:f1:de:c8:92:36:c0:bd:80: 98:8c:f8:1d:ec:3e:42:21:7f:1c:9b:99:59:d9:57: da:46:37:f0:a1:29:a3:ec:db:fc:c4:30:8c:0c:79: 8e:ac:0c:91:42:89:40:b9:a3:ff:3f:ef:b1:30:bc: c2:31:c7:a3:fb:54:17:56:84:4f:24:86:81:e1:4d: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:97:DE:51:16:7B:91:7E:07:60:D8:F2:11:1E:FB:74:FD:53:61:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de1f14c8-a057-3631-ab65-38bb76a8e939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:14:15:0e:dd:3c:03:d3:ce:e1:4f:c9:9b:80:0f:eb:e2:60: b5:71:e7:41:2b:f9:0a:d9:7e:62:f6:f7:78:e3:81:3a:80:97: 1a:f5:e4:cf:c1:e6:db:db:5e:7b:37:2c:ed:bb:60:cd:8e:0f: 0f:72:6e:65:0c:1d:cc:5f:96:e2:be:15:b5:75:c4:ba:32:5c: 8f:a5:b7:d1:8a:a4:1d:75:d1:65:80:93:40:b5:79:98:6f:83: d1:41:fc:dd:a2:f4:6d:f5:c8:e5:52:f9:46:1e:8b:76:1e:ca: b8:13:f7:dd:be:86:ae:52:8a:7a:77:33:85:fb:00:62:63:42: 55:12:11:ad:13:53:74:b3:02:03:c7:ee:6e:6d:60:58:e7:2c: 47:56:c4:30:69:d2:ad:2f:75:e2:f4:25:e1:27:f0:ac:2c:47: 01:dc:a2:fa:34:30:ed:e3:a2:cb:3c:46:d0:9f:a5:72:91:a4: 3a:51:ac:1e:bf:9e:ea:e3:11:7a:7a:f0:ea:9f:c4:ec:dd:ef: 1e:7f:42:df:81:5f:75:39:3f:3e:06:64:55:0a:a5:11:99:60: 69:4f:67:c4:e7:05:78:fa:08:0d:89:3b:91:e9:1c:a2:ab:70: cd:83:d0:03:a3:b2:ba:38:de:b1:40:df:b9:f5:c3:fb:59:9a: d6:70:ef:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEQTMowMo6GtvCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NjkxMDJhNDMtMTIyMC00NmMzLTk4NjQtNTIwNjU0YjViMWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8BaV2KKEByN/KcBFtI6/1yUGGSHbevoMfEa pexG9iPYEq8BmdZBlxTrbL4Oz7OQpJFDHJz5s4WQyEeAFrY93/o3Dwl97eEDO+vH tZS8m6+sFW9iS3kysJ5V6QD4guMAWuy7iO9b2KdyPZH38bnh6+o+kVHjUw1dZq0T 7yUp+/j+sLbxMp79ccxFZMtgy2m3pSl/Xr6vHSntC8FVosrBY39fMcc+0Nnq2DCC GC4QdPa71ycii8RK5cZy8d7IkjbAvYCYjPgd7D5CIX8cm5lZ2VfaRjfwoSmj7Nv8 xDCMDHmOrAyRQolAuaP/P++xMLzCMcej+1QXVoRPJIaB4U1v6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOX3lEWe5F+B2DY8hEe+3T9U2HCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGUxZjE0YzgtYTA1Ny0z NjMxLWFiNjUtMzhiYjc2YThlOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwUFQ7dPAPTzuFPyZuAD+viYLVx50Er+QrZfmL293jjgTqAlxr15M/B 5tvbXns3LO27YM2ODw9ybmUMHcxfluK+FbV1xLoyXI+lt9GKpB110WWAk0C1eZhv g9FB/N2i9G31yOVS+UYei3YeyrgT992+hq5Sinp3M4X7AGJjQlUSEa0TU3SzAgPH 7m5tYFjnLEdWxDBp0q0vdeL0JeEn8KwsRwHcovo0MO3joss8RtCfpXKRpDpRrB6/ nurjEXp68OqfxOzd7x5/Qt+BX3U5Pz4GZFUKpRGZYGlPZ8TnBXj6CA2JO5HpHKKr cM2D0AOjsro43rFA37n1w/tZmtZw734= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:36 2025 by rpki-client