$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e963172d-dfa5-35fa-b840-6f03febee5ca.roa File: e963172d-dfa5-35fa-b840-6f03febee5ca.roa (raw, json) Hash identifier: GFGE/bj8MPbLjppRJsgEccKXWKqki/SS4ukNK0oN03w= Subject key identifier: 6F:40:60:2F:E9:17:68:36:E7:C7:12:A7:5E:97:B8:D3:44:1D:8C:AE Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B41E71E364E2ED62BEE367D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e963172d-dfa5-35fa-b840-6f03febee5ca.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 27424 IP address blocks: 165.254.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1e:36:4e:2e:d6:2b:ee:36:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=b95d9482-c0a3-4e3e-a646-448b08552d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:2c:3a:cf:8b:f9:71:39:f4:32:ca:9f:d3: 05:bb:d7:79:98:03:db:62:c0:90:e1:85:59:b7:cc: ce:b1:94:78:30:56:6b:31:2e:79:92:80:b9:bb:a0: f5:d2:1f:f1:82:ac:c1:ba:44:44:17:a5:5a:e6:07: 3d:d3:ab:d4:cd:d7:54:0a:50:e1:a0:3d:7a:2a:0c: c7:45:d5:04:69:13:c5:e1:82:b7:12:4d:eb:72:dc: de:fc:0e:d0:08:d1:85:6c:fd:89:13:3e:02:08:7c: 7a:eb:c3:70:81:c6:e8:28:40:e2:c5:ba:bc:81:d1: ef:de:83:5d:18:18:a2:6d:d4:4c:21:70:31:0f:68: a3:01:65:9a:3b:3c:19:68:82:67:4c:74:f5:15:67: ad:81:57:4c:dc:02:24:a0:44:0f:55:f0:88:17:4a: 37:14:ab:b8:ec:b2:b1:a6:1a:93:39:7f:db:ad:38: 74:d5:ac:10:38:47:2c:57:44:bf:a3:7e:8a:dc:e2: c2:4c:38:f5:3f:f2:70:04:dc:50:77:d6:c7:8e:0b: 82:95:48:45:06:bd:39:11:ce:e8:86:35:bb:8c:83: 4a:7a:2f:ed:db:e9:9c:85:43:e6:7a:e4:25:5e:0a: 8c:24:a3:31:cd:ab:f7:f2:0c:b4:1b:fd:e5:98:97: 1a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:40:60:2F:E9:17:68:36:E7:C7:12:A7:5E:97:B8:D3:44:1D:8C:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e963172d-dfa5-35fa-b840-6f03febee5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:0c:4c:ac:cc:66:4a:51:ed:84:8b:87:27:40:55:c0:4a:56: 0e:6e:ac:e6:de:4a:b7:ac:9f:99:95:c2:92:e5:07:1e:aa:c3: 13:f5:b0:5b:25:1d:f8:e4:0b:cd:2e:9f:68:3d:da:31:05:07: d8:ba:80:ae:bb:16:ae:9b:3d:8f:dc:e9:d1:48:30:0d:95:a3: 1a:0d:0d:08:ab:6b:e7:19:82:fe:6b:2d:b8:f7:bc:56:c8:52: 67:a2:26:0b:4d:2f:2f:05:4e:00:eb:7b:53:8a:62:f3:19:5a: 2c:99:ca:4d:0e:3f:30:b4:c7:3f:e0:58:a6:01:35:dd:cb:d9: 83:ee:5d:83:8d:30:2a:3d:51:15:80:56:35:a4:cb:55:ac:23: d7:73:16:5c:c6:2f:5c:e1:9f:4a:c8:59:30:bf:e0:97:a2:52: b7:8c:73:c1:df:6c:6d:7f:42:07:1a:4d:38:3e:09:b6:54:30: a2:68:40:02:93:e1:48:cb:3f:71:ba:eb:5a:de:f6:32:4d:a5: 16:47:34:77:e6:87:bd:9c:ed:0e:09:52:07:b7:a9:30:37:c1: a8:9a:ea:c0:ca:ce:b1:90:02:72:38:9d:1c:b4:6d:38:ff:c3: 99:c0:a5:af:6d:a9:c5:33:0c:44:a5:24:69:27:35:c2:dd:03: ce:e7:30:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5x42Ti7WK+42fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk Yjk1ZDk0ODItYzBhMy00ZTNlLWE2NDYtNDQ4YjA4NTUyZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PMsOs+L+XE59DLKn9MFu9d5mAPbYsCQ4YVZ t8zOsZR4MFZrMS55koC5u6D10h/xgqzBukREF6Va5gc906vUzddUClDhoD16KgzH RdUEaRPF4YK3Ek3rctze/A7QCNGFbP2JEz4CCHx668NwgcboKEDixbq8gdHv3oNd GBiibdRMIXAxD2ijAWWaOzwZaIJnTHT1FWetgVdM3AIkoEQPVfCIF0o3FKu47LKx phqTOX/brTh01awQOEcsV0S/o36K3OLCTDj1P/JwBNxQd9bHjguClUhFBr05Ec7o hjW7jINKei/t2+mchUPmeuQlXgqMJKMxzav38gy0G/3lmJca0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9AYC/pF2g258cSp16XuNNEHYyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZTk2MzE3MmQtZGZhNS0z NWZhLWI4NDAtNmYwM2ZlYmVlNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf6PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0MTKzMZkpR7YSLhydAVcBKVg5urObeSresn5mVwpLlBx6qwxP1sFsl HfjkC80un2g92jEFB9i6gK67Fq6bPY/c6dFIMA2VoxoNDQira+cZgv5rLbj3vFbI UmeiJgtNLy8FTgDre1OKYvMZWiyZyk0OPzC0xz/gWKYBNd3L2YPuXYONMCo9URWA VjWky1WsI9dzFlzGL1zhn0rIWTC/4JeiUreMc8HfbG1/QgcaTTg+CbZUMKJoQAKT 4UjLP3G661re9jJNpRZHNHfmh72c7Q4JUge3qTA3waia6sDKzrGQAnI4nRy0bTj/ w5nApa9tqcUzDESlJGknNcLdA87nMLk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:25:06 2025 by rpki-client