$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a58799bb-d10d-3a02-8111-cca1d0698707.roa File: a58799bb-d10d-3a02-8111-cca1d0698707.roa (raw, json) Hash identifier: j/lZ/nIRT1Pze00ZuX+h4Y53E439MGTrstSs/e9HKMs= Subject key identifier: 55:ED:17:C9:59:30:41:F6:09:2F:B5:39:88:75:D4:50:CB:CB:F8:F4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B3987042AD6892B5DD9791500 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a58799bb-d10d-3a02-8111-cca1d0698707.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 18486 IP address blocks: 165.254.239.160/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:04:2a:d6:89:2b:5d:d9:79:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=bcc82a2e-4d46-4d4b-a8a3-ad0eecf1072e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b0:0f:02:56:79:77:1e:b4:13:8e:f4:cd:d1: 16:cc:63:14:db:96:d3:fc:7e:43:06:15:cf:2a:9c: 01:cb:1f:a6:78:5d:d8:29:00:c5:59:4f:49:37:65: ab:8d:ac:83:18:16:0a:3d:bc:c9:bf:e3:c9:49:8c: 1a:ce:e4:07:28:eb:6e:00:8a:28:06:32:d4:a0:52: f7:8f:c2:f8:98:c5:c4:f2:4d:5a:e5:60:eb:60:19: 56:b9:98:88:c4:43:a1:ba:8b:75:a2:a1:0c:53:5b: 70:ef:9b:7e:0b:b8:16:a5:73:dd:4b:87:41:7f:5e: 5c:27:b8:e3:b4:e6:fe:14:65:df:57:c6:32:c7:ca: 0e:83:60:05:1e:d3:f7:14:c8:fc:d3:75:84:92:5f: 5b:d1:a9:b3:ab:8d:86:0a:35:cd:d2:cd:7c:4c:20: ce:44:29:79:60:cb:93:88:74:9f:0d:d5:38:6b:52: 0b:e7:f8:44:d1:d4:88:80:07:ad:2b:0a:6c:7e:1a: 9f:68:f7:fe:77:33:b8:bc:c3:3b:30:43:60:40:53: 9f:10:bd:7e:9f:82:bd:2c:01:91:33:fd:18:6c:fd: ae:6a:f4:00:e9:6a:82:e1:a0:80:61:5c:b7:85:a3: 25:7b:72:a2:2a:f7:ce:ef:7e:93:b1:a3:a6:3c:42: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:ED:17:C9:59:30:41:F6:09:2F:B5:39:88:75:D4:50:CB:CB:F8:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a58799bb-d10d-3a02-8111-cca1d0698707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.239.160/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:14:16:83:8f:75:55:a1:04:bb:24:32:f0:4b:18:f4:bb:d4: 58:d0:d8:99:8b:b9:9f:78:97:0d:54:51:48:42:e5:b6:84:89: 29:00:f2:68:d4:52:2f:c3:cd:6c:c3:95:37:19:3b:d5:c1:25: 03:20:a3:d0:ad:5f:e3:f6:56:8b:43:3c:5f:b6:f5:ae:ac:3f: eb:2e:b9:ad:70:3d:8a:8a:2d:86:f1:74:dc:e5:7c:66:a0:da: ae:e9:21:d2:5a:1d:65:88:9c:fe:a6:36:ae:1f:53:59:26:77: 8d:58:f5:c9:61:9b:aa:bf:10:05:82:54:d4:c7:51:05:b4:ba: 3c:d0:99:1e:ac:b8:1a:dd:f2:54:ab:72:ee:88:8c:a3:7c:0e: 6c:95:d7:4c:13:94:49:a2:48:61:3e:68:f1:c8:d7:b5:b9:53: a4:ab:8c:d2:ca:6d:eb:f7:5b:cd:fd:a9:4f:70:c9:34:f1:bd: 5a:9b:f2:ad:1e:55:ac:67:8d:4c:01:2e:c1:13:9f:86:e7:a1: c3:e3:d7:52:a1:19:cc:db:df:e1:f0:08:ea:9e:5a:d4:a9:64: b2:e6:36:5a:33:af:3d:29:4d:dd:55:08:17:a4:c7:0f:b4:c8: 06:95:ef:23:f0:86:11:3f:b0:b2:1f:5b:c0:34:ed:de:5f:24: 4f:93:ad:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs5hwQq1okrXdl5FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk YmNjODJhMmUtNGQ0Ni00ZDRiLWE4YTMtYWQwZWVjZjEwNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbAPAlZ5dx60E470zdEWzGMU25bT/H5DBhXP KpwByx+meF3YKQDFWU9JN2WrjayDGBYKPbzJv+PJSYwazuQHKOtuAIooBjLUoFL3 j8L4mMXE8k1a5WDrYBlWuZiIxEOhuot1oqEMU1tw75t+C7gWpXPdS4dBf15cJ7jj tOb+FGXfV8Yyx8oOg2AFHtP3FMj803WEkl9b0amzq42GCjXN0s18TCDORCl5YMuT iHSfDdU4a1IL5/hE0dSIgAetKwpsfhqfaPf+dzO4vMM7MENgQFOfEL1+n4K9LAGR M/0YbP2uavQA6WqC4aCAYVy3haMle3KiKvfO736TsaOmPEK2dQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFXtF8lZMEH2CS+1OYh11FDLy/j0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTU4Nzk5YmItZDEwZC0z YTAyLTgxMTEtY2NhMWQwNjk4NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDpf7voDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDAFBaDj3VVoQS7JDLwSxj0u9RY0NiZi7mfeJcNVFFIQuW2hIkpAPJo 1FIvw81sw5U3GTvVwSUDIKPQrV/j9laLQzxftvWurD/rLrmtcD2Kii2G8XTc5Xxm oNqu6SHSWh1liJz+pjauH1NZJneNWPXJYZuqvxAFglTUx1EFtLo80JkerLga3fJU q3LuiIyjfA5slddME5RJokhhPmjxyNe1uVOkq4zSym3r91vN/alPcMk08b1am/Kt HlWsZ41MAS7BE5+G56HD49dSoRnM29/h8AjqnlrUqWSy5jZaM689KU3dVQgXpMcP tMgGle8j8IYRP7CyH1vANO3eXyRPk61e -----END CERTIFICATE-----Generated at Sat Oct 11 12:48:45 2025 by rpki-client