$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6b396c8-4e68-3290-98cc-6d3add02bcdd.roa File: f6b396c8-4e68-3290-98cc-6d3add02bcdd.roa (raw, json) Hash identifier: 7VlntfpYVAKOuB4ldso2M3vYuXRLn59UISLOJT34FpE= Subject key identifier: 45:45:5E:4B:EE:C1:EF:60:F7:58:B0:72:2B:BB:0C:3F:39:2E:1C:AD Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE403F4AAA6AC8D66448C200 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6b396c8-4e68-3290-98cc-6d3add02bcdd.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 165.254.237.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:3f:4a:aa:6a:c8:d6:64:48:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=c765018c-34f8-4bc9-8623-f0099f46245d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:42:65:21:16:c7:1d:07:a6:75:db:03:7b:e9: 2d:4f:fd:e5:ad:ff:09:af:a5:14:cd:78:9d:dd:7e: b1:c3:09:66:d9:c4:12:be:90:23:be:d4:4f:55:f5: 49:e9:0e:ba:ea:96:bc:c6:d1:2d:a5:b4:7d:36:fa: 85:d2:ed:ce:46:d7:22:c8:5c:02:6a:ab:0e:4f:02: a8:63:54:c3:14:05:09:e9:07:a5:99:ac:17:1e:7f: 28:96:d3:77:23:42:25:f1:94:c3:bd:bf:9f:fc:60: 9b:a4:ab:09:8e:d9:6d:c1:e1:4a:fa:c2:6f:98:d1: 67:08:34:1f:21:82:4e:a3:2f:4f:8d:0a:10:33:04: db:6a:54:9a:41:c4:33:39:a7:1d:9c:81:32:00:60: 17:9b:2b:6b:01:24:29:49:78:fd:e4:bc:be:3c:fd: 7f:83:4c:bc:8d:e8:bb:8b:d4:9e:11:d2:64:ed:80: 6d:67:95:5a:80:c5:8c:b9:39:fe:de:8a:99:23:de: e3:91:7b:dc:75:56:00:aa:18:ca:81:a2:97:03:bd: 1f:2e:4a:2e:5c:87:14:41:f4:93:d4:43:32:24:16: 53:99:05:e9:f9:11:7b:e0:8f:69:8d:a9:d9:21:d0: a1:3a:44:50:20:a5:b0:67:f7:41:8d:bc:d4:1e:90: b3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:45:5E:4B:EE:C1:EF:60:F7:58:B0:72:2B:BB:0C:3F:39:2E:1C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6b396c8-4e68-3290-98cc-6d3add02bcdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.237.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:14:34:c3:f4:31:dc:77:70:71:1c:a5:97:a8:b4:c7:54:ba: 4a:a1:5d:31:ac:f8:29:bd:be:ac:4a:1b:1e:d4:96:17:0d:99: ea:f4:de:74:a2:2e:74:64:66:23:e6:75:d3:24:63:70:93:88: 11:07:96:4d:df:3e:c5:9e:bb:15:f5:88:9e:e9:aa:2f:f7:c7: 95:dd:fa:e7:8f:d3:c6:36:c0:56:61:c5:de:c5:be:86:8b:ef: 81:b2:f5:40:7c:6e:61:cf:cd:03:f6:d7:9c:84:18:54:e0:23: 0d:9d:4d:9b:60:01:ae:a1:ce:f2:5a:dc:97:fe:95:c3:49:13: 51:2d:2f:ea:4c:2f:72:d2:68:70:28:4c:ca:fa:55:a2:dd:1c: b9:6f:c3:ce:13:48:88:c5:f8:f6:89:78:1a:ce:9d:59:29:56: 24:0d:17:c5:cc:af:dc:d4:fe:01:5d:d7:d4:2b:46:b8:7f:e8: 77:aa:04:a4:fc:94:02:d8:59:ad:e1:58:6c:0c:3a:1f:de:f5: 67:72:4a:10:76:94:66:b0:13:66:12:ba:35:72:53:a3:6f:4b: f5:c6:05:7b:a0:95:85:29:4e:1e:c1:a3:b3:e6:d2:9e:67:5d: 78:7f:8e:da:a7:9d:03:4c:df:7c:be:fe:65:32:22:30:d1:fe: 26:1e:ba:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu+QD9KqmrI1mRIwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk Yzc2NTAxOGMtMzRmOC00YmM5LTg2MjMtZjAwOTlmNDYyNDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkJlIRbHHQemddsDe+ktT/3lrf8Jr6UUzXid 3X6xwwlm2cQSvpAjvtRPVfVJ6Q666pa8xtEtpbR9NvqF0u3ORtciyFwCaqsOTwKo Y1TDFAUJ6QelmawXHn8oltN3I0Il8ZTDvb+f/GCbpKsJjtltweFK+sJvmNFnCDQf IYJOoy9PjQoQMwTbalSaQcQzOacdnIEyAGAXmytrASQpSXj95Ly+PP1/g0y8jei7 i9SeEdJk7YBtZ5VagMWMuTn+3oqZI97jkXvcdVYAqhjKgaKXA70fLkouXIcUQfST 1EMyJBZTmQXp+RF74I9pjanZIdChOkRQIKWwZ/dBjbzUHpCz9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEVFXkvuwe9g91iwciu7DD85LhytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjZiMzk2YzgtNGU2OC0z MjkwLTk4Y2MtNmQzYWRkMDJiY2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf7tgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCaFDTD9DHcd3BxHKWXqLTHVLpKoV0xrPgpvb6sShse1JYXDZnq9N50 oi50ZGYj5nXTJGNwk4gRB5ZN3z7FnrsV9Yie6aov98eV3frnj9PGNsBWYcXexb6G i++BsvVAfG5hz80D9techBhU4CMNnU2bYAGuoc7yWtyX/pXDSRNRLS/qTC9y0mhw KEzK+lWi3Ry5b8POE0iIxfj2iXgazp1ZKVYkDRfFzK/c1P4BXdfUK0a4f+h3qgSk /JQC2Fmt4VhsDDof3vVnckoQdpRmsBNmEro1clOjb0v1xgV7oJWFKU4ewaOz5tKe Z114f47ap50DTN98vv5lMiIw0f4mHrof -----END CERTIFICATE-----Generated at Wed Nov 5 04:54:58 2025 by rpki-client