$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de1f14c8-a057-3631-ab65-38bb76a8e939.roa File: de1f14c8-a057-3631-ab65-38bb76a8e939.roa (raw, json) Hash identifier: 2ocKtEZ/9CnDy9sKoUJdkNjR3mAbZGTlA4adix9m5PA= Subject key identifier: 4C:4C:17:1F:FC:D7:81:CB:8E:2B:E2:A6:F5:BA:E7:E3:5D:35:15:55 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7B6A8C209074ACC07C16E200 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de1f14c8-a057-3631-ab65-38bb76a8e939.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 40934 IP address blocks: 165.254.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8c:20:90:74:ac:c0:7c:16:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=078bfaa0-5a40-4f2a-9f42-3db50d72ef25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:0a:5e:7d:4c:2f:7c:a3:b8:bb:c0:0b:71: 2c:28:0b:00:7d:37:ec:a1:b2:a5:f6:32:45:f3:00: 0d:1b:93:6b:75:fa:25:93:f4:d0:ed:d6:e2:fd:36: b8:fc:89:ce:7b:ff:38:d5:4b:d0:d1:8c:64:71:d3: 40:bb:72:78:b7:26:22:d2:00:c5:44:f9:5f:fe:5a: 15:41:65:7f:a4:fb:52:3c:76:ed:51:6a:d9:7b:c1: 54:a3:b6:2c:e2:8e:e5:97:0c:6f:c1:ec:27:77:cb: fa:d4:27:f5:1c:77:e8:99:02:46:77:66:e9:98:77: f9:44:fb:ec:54:2d:d7:6b:3d:15:27:d5:e6:9b:f0: dc:c8:d2:08:c4:c7:1b:d1:28:00:72:2b:d6:7d:99: 38:bd:19:f7:12:db:28:3b:0e:a2:27:48:45:fc:52: fd:68:32:18:69:0a:e8:5f:55:e6:75:a7:f7:2b:b0: a8:36:a1:91:67:45:59:69:26:cd:e3:7c:fa:0f:2e: 80:10:d3:80:6f:ff:9f:c4:04:6b:a6:4a:a6:91:dd: 47:96:55:96:2c:31:3f:04:81:6b:1e:60:e4:e2:64: 45:49:34:7f:86:50:87:7a:f5:6a:52:e0:21:15:68: f5:aa:4e:f0:84:79:da:d2:ee:26:68:82:10:8d:69: 31:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4C:17:1F:FC:D7:81:CB:8E:2B:E2:A6:F5:BA:E7:E3:5D:35:15:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de1f14c8-a057-3631-ab65-38bb76a8e939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:0f:0a:cc:b2:0e:b2:d2:1a:26:21:ef:dc:bb:51:22:27:5d: be:44:08:06:23:a0:85:8c:76:29:71:6e:f3:66:0c:27:76:e6: 0f:d2:a2:cf:fb:d7:9e:a3:eb:5e:c9:e6:f8:52:e8:37:36:11: 5b:45:e8:c7:74:75:91:bf:03:dc:6a:e1:c3:48:45:3d:a2:c2: 52:2d:88:7b:dc:30:2b:b1:3a:4d:d5:76:1d:44:95:4c:ae:4f: 5e:12:76:04:27:d7:df:14:75:f2:75:42:68:c0:ed:2b:e9:11: 7f:f8:bf:58:ad:e1:c8:e5:f5:f8:20:f8:5a:5a:f6:5f:ad:ae: 5f:6b:b2:b3:fb:4e:6d:96:dd:66:ce:05:3e:27:8d:1e:b0:0a: 85:ee:2e:27:8f:1a:d9:5c:36:2c:f3:7a:15:ff:a7:29:87:4f: c7:24:78:67:95:c8:d6:07:60:54:aa:62:dc:3b:c4:65:3b:44: 49:ee:41:15:7d:a7:eb:da:53:17:97:62:dc:3e:ce:5f:54:8a: 6b:eb:4b:20:9a:dd:65:e6:31:d3:ed:98:34:4c:4c:23:c7:18: 2c:26:c7:90:bc:57:4f:05:1c:49:4c:85:22:57:47:81:9e:5f: 9e:f4:d4:af:47:7d:95:f9:39:f0:0d:89:e2:01:4a:47:29:5d: 24:e6:2d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17aowgkHSswHwW4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk MDc4YmZhYTAtNWE0MC00ZjJhLTlmNDItM2RiNTBkNzJlZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjIKXn1ML3yjuLvAC3EsKAsAfTfsobKl9jJF 8wANG5Nrdfolk/TQ7dbi/Ta4/InOe/841UvQ0YxkcdNAu3J4tyYi0gDFRPlf/loV QWV/pPtSPHbtUWrZe8FUo7Ys4o7llwxvwewnd8v61Cf1HHfomQJGd2bpmHf5RPvs VC3Xaz0VJ9Xmm/DcyNIIxMcb0SgAcivWfZk4vRn3EtsoOw6iJ0hF/FL9aDIYaQro X1Xmdaf3K7CoNqGRZ0VZaSbN43z6Dy6AENOAb/+fxARrpkqmkd1HllWWLDE/BIFr HmDk4mRFSTR/hlCHevVqUuAhFWj1qk7whHna0u4maIIQjWkxPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExMFx/814HLjivipvW65+NdNRVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGUxZjE0YzgtYTA1Ny0z NjMxLWFiNjUtMzhiYjc2YThlOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQPCsyyDrLSGiYh79y7USInXb5ECAYjoIWMdilxbvNmDCd25g/Sos/7 156j617J5vhS6Dc2EVtF6Md0dZG/A9xq4cNIRT2iwlItiHvcMCuxOk3Vdh1ElUyu T14SdgQn198UdfJ1QmjA7SvpEX/4v1it4cjl9fgg+Fpa9l+trl9rsrP7Tm2W3WbO BT4njR6wCoXuLiePGtlcNizzehX/pymHT8ckeGeVyNYHYFSqYtw7xGU7REnuQRV9 p+vaUxeXYtw+zl9UimvrSyCa3WXmMdPtmDRMTCPHGCwmx5C8V08FHElMhSJXR4Ge X5701K9HfZX5OfANieIBSkcpXSTmLQ0= -----END CERTIFICATE-----Generated at Fri Apr 17 11:45:38 2026 by rpki-client