$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa File: afec4958-f90c-324d-8365-1b0c02b836a3.roa (raw, json) Hash identifier: t9vuDswtZQg+ZKvY22RNYNFx8nDqekBWcjI5cO7m4Zw= Subject key identifier: 8B:39:7D:B8:4B:31:AD:26:C3:76:75:43:77:01:B0:EE:F2:17:E0:B3 Certificate issuer: /CN=8765e137-e0cd-4574-8e57-7cf87cfec9de Certificate serial: 010D0C9F4328584B609C8D64DE546B82FF3921C0 Authority key identifier: 01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 168.100.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8d:64:de:54:6b:82:ff:39:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8765e137-e0cd-4574-8e57-7cf87cfec9de Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=564814ae-5d1d-498b-8700-9da84c75ef3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:b4:3a:79:6e:cc:6b:ae:34:99:51:53:ae: 8e:00:98:25:8e:e0:4a:fd:6a:3c:44:2c:34:4c:ff: 7f:2b:0c:86:a5:a4:3d:84:85:69:1d:99:8e:10:5d: b5:5c:3e:86:8f:b1:70:d4:f2:bb:33:f4:8b:a0:0e: 1f:f0:d2:65:bc:e5:4f:57:8b:37:1d:e5:cc:0e:04: 2b:1b:65:9f:41:aa:a2:18:71:1b:29:16:98:16:11: e9:f4:3e:fa:6c:6e:f5:f9:64:0f:80:d5:b8:02:08: b4:fe:8f:0b:08:eb:3b:d7:25:da:26:8c:b2:2d:47: b6:ca:27:61:47:ab:1e:74:57:59:84:f5:0d:46:f5: a9:5f:4c:7a:52:81:04:6d:3d:8d:d8:13:2b:98:52: 63:13:27:24:5e:1c:1b:aa:ed:71:a9:33:99:96:9e: e0:a0:9c:58:d8:53:cb:2f:4c:27:19:25:9d:05:78: d7:43:2e:a0:7e:4e:b0:e3:d2:42:e1:06:09:f1:4b: 27:d1:a1:7d:54:40:78:b7:ab:c0:8d:51:84:97:e5: a5:8f:90:4a:07:00:0f:2c:18:44:03:a5:7b:54:8b: f6:ac:39:47:2b:9c:8c:bd:f6:19:f4:43:f4:bd:24: e5:d8:1f:b7:84:b4:49:cc:f9:87:a0:17:66:cc:0b: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:39:7D:B8:4B:31:AD:26:C3:76:75:43:77:01:B0:EE:F2:17:E0:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl X509v3 Authority Key Identifier: keyid:01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer sbgp-ipAddrBlock: critical IPv4: 168.100.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:4f:b1:f3:e0:6b:d1:f0:68:31:44:b3:4b:d5:07:ed:28:d2: c0:2c:0e:f8:6d:3d:e9:40:f7:03:01:89:ec:e3:53:2e:72:26: 6b:d9:6d:22:9b:9c:6e:34:aa:3b:21:76:b5:6f:57:0b:58:e8: 98:f2:27:cd:90:1e:0b:34:79:60:2c:e1:73:c2:11:a0:ea:bd: 54:61:f6:d6:59:e8:2c:67:5a:eb:d1:4a:e3:31:f2:ee:d9:28: 53:33:87:cb:ee:ca:fb:1e:57:b2:13:6f:4e:6b:52:13:f0:4b: 52:6a:1d:af:0e:4e:bd:06:f2:2a:6b:71:76:c0:75:51:ab:b4: e1:48:21:07:2f:d7:fb:95:3f:cc:c3:10:1c:25:02:71:8c:f0: 04:32:4f:3a:10:ed:d6:9c:4c:9f:f9:7d:35:81:d2:63:38:92: 95:05:03:59:dd:8d:ad:f1:37:c3:26:73:bc:8e:5b:b9:b9:dc: 85:8e:40:74:bb:30:d7:11:74:5d:de:70:22:78:0f:9e:7c:60: c7:10:7f:8d:1f:5b:44:4b:9d:34:f3:dd:0b:68:92:45:19:d1: 10:6d:45:6e:3f:1d:1f:e6:ed:dd:ee:26:78:cf:14:18:b2:a8: 32:58:aa:c5:34:6b:a2:65:b7:92:2f:ce:4d:57:15:ba:90:29: 49:5f:b2:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnI1k3lRrgv85IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2NWUxMzctZTBjZC00NTc0LThlNTctN2NmODdjZmVj OWRlMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NTY0ODE0YWUtNWQxZC00OThiLTg3MDAtOWRhODRjNzVlZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysy0OnluzGuuNJlRU66OAJgljuBK/Wo8RCw0 TP9/KwyGpaQ9hIVpHZmOEF21XD6Gj7Fw1PK7M/SLoA4f8NJlvOVPV4s3HeXMDgQr G2WfQaqiGHEbKRaYFhHp9D76bG71+WQPgNW4Agi0/o8LCOs71yXaJoyyLUe2yidh R6sedFdZhPUNRvWpX0x6UoEEbT2N2BMrmFJjEyckXhwbqu1xqTOZlp7goJxY2FPL L0wnGSWdBXjXQy6gfk6w49JC4QYJ8Usn0aF9VEB4t6vAjVGEl+Wlj5BKBwAPLBhE A6V7VIv2rDlHK5yMvfYZ9EP0vSTl2B+3hLRJzPmHoBdmzAvxiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs5fbhLMa0mw3Z1Q3cBsO7yF+CzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzY1 ZTEzNy1lMGNkLTQ1NzQtOGU1Ny03Y2Y4N2NmZWM5ZGUvYWZlYzQ5NTgtZjkwYy0z MjRkLTgzNjUtMWIwYzAyYjgzNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODc2NWUxMzctZTBjZC00NTc0LThl NTctN2NmODdjZmVjOWRlLzg3NjVlMTM3LWUwY2QtNDU3NC04ZTU3LTdjZjg3Y2Zl YzlkZS5jcmwwHwYDVR0jBBgwFoAUARLXI6RxkM4q4G4Zf5FshAvr6M8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzY1ZTEzNy1lMGNkLTQ1NzQtOGU1Ny03Y2Y4 N2NmZWM5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRPsfPga9HwaDFEs0vVB+0o0sAsDvhtPelA9wMBiezjUy5yJmvZbSKb nG40qjshdrVvVwtY6JjyJ82QHgs0eWAs4XPCEaDqvVRh9tZZ6CxnWuvRSuMx8u7Z KFMzh8vuyvseV7ITb05rUhPwS1JqHa8OTr0G8iprcXbAdVGrtOFIIQcv1/uVP8zD EBwlAnGM8AQyTzoQ7dacTJ/5fTWB0mM4kpUFA1ndja3xN8Mmc7yOW7m53IWOQHS7 MNcRdF3ecCJ4D558YMcQf40fW0RLnTTz3QtokkUZ0RBtRW4/HR/m7d3uJnjPFBiy qDJYqsU0a6Jlt5Ivzk1XFbqQKUlfsi8= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:41 2025 by rpki-client