$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0f1148f5-ea4a-3039-9302-ff65ccf7d09e.roa File: 0f1148f5-ea4a-3039-9302-ff65ccf7d09e.roa (raw, json) Hash identifier: Ucnu1PUEKAlZ1Kmn3XbJUa9D89wb7+Ey0Bplqdd6ww4= Subject key identifier: 5F:A9:4C:3E:81:E4:0D:31:5A:5C:66:CD:4C:EE:D8:55:C1:25:0D:AC Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B23318A90B973938FA0E2F4C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0f1148f5-ea4a-3039-9302-ff65ccf7d09e.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 397008 IP address blocks: 165.254.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:8a:90:b9:73:93:8f:a0:e2:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=ba5f6223-1791-4a1c-a8da-7e82b71fff8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:29:1e:48:dc:fb:4c:ee:c8:d6:38:f9:e3:30: a3:9d:38:1a:cf:ad:90:bc:46:6e:8e:b2:fd:ae:87: 7c:94:91:39:50:f8:45:4d:8e:ba:d3:75:c9:9e:87: 37:3f:51:d0:e7:cf:67:2a:b2:40:a2:13:29:7a:ab: 06:c5:85:de:d3:a1:0c:e1:7f:ed:ca:50:e0:a0:90: 67:14:b1:76:d8:06:61:ff:e3:73:4c:e4:4b:0b:74: c8:1a:77:e2:3d:51:89:31:b4:1a:c4:11:84:8f:7b: 97:61:20:f6:fd:54:10:83:5b:0a:7c:b0:a2:7f:a8: 0f:75:27:e4:80:fe:a6:1d:ee:6f:a0:9e:37:72:88: 8e:d3:c1:69:9d:47:b6:b7:92:7a:88:82:12:19:8e: b7:d9:09:5c:4b:c3:2e:e9:d4:fb:55:d9:8f:a3:cd: 39:4e:b1:d8:bd:98:c2:ea:3b:0f:7d:a7:ed:22:79: eb:17:e3:46:f8:22:cd:7e:65:f8:62:21:a8:0b:dc: 76:ed:84:bc:d4:4a:ab:7a:12:bf:36:f7:97:41:68: c8:59:4b:6b:07:61:3a:64:7a:a3:82:b1:0e:ec:15: 18:76:bf:8d:6b:9c:ee:cf:fc:de:a3:36:d1:b2:d1: f3:aa:8d:0a:5b:c5:da:0a:ed:8a:9b:e5:17:59:da: 04:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A9:4C:3E:81:E4:0D:31:5A:5C:66:CD:4C:EE:D8:55:C1:25:0D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0f1148f5-ea4a-3039-9302-ff65ccf7d09e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c4:98:bf:dd:41:99:09:b5:5e:c4:b4:c2:47:ca:6e:a4:83: f0:0a:0a:b6:17:37:5f:4e:dc:5e:df:64:37:8f:eb:d1:ee:4e: 27:04:f9:bd:f1:3d:23:69:f0:aa:9f:1d:9f:57:0c:f3:5a:ef: ec:15:bf:1c:e2:98:ca:ad:9e:5b:eb:d1:06:bb:e7:5f:45:cf: 36:3a:fb:99:4c:f9:ae:fb:fb:85:fa:05:ec:1f:f2:74:4a:0c: b6:0c:21:8a:f8:2b:fd:2f:bb:89:9b:27:35:57:43:1a:5b:30: df:61:9b:e0:fc:28:a4:bf:d3:2b:4a:a7:28:37:06:3e:e4:a8: 61:47:15:6e:37:57:a6:40:7b:6c:cc:bf:bf:40:ef:1d:24:82: 1e:c7:dd:8c:42:fb:fd:92:a2:95:9b:23:4c:33:02:bd:f6:3c: eb:d3:8b:86:0d:a5:9a:03:14:46:0a:3f:07:b5:eb:ce:08:c4: 1a:d7:93:d6:02:dc:41:5c:9f:15:de:8b:9a:ea:a6:81:08:b4: 85:28:fc:4a:98:a3:11:60:9e:d7:2b:13:d5:ab:ff:cd:b5:43: 6a:8c:f2:52:d6:81:b8:41:50:5a:81:31:64:dc:8b:f2:cd:24: c8:c8:25:c7:c0:1e:f6:88:3f:34:00:ca:ee:58:ce:5c:00:6d: 09:cf:40:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYqQuXOTj6Di9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YmE1ZjYyMjMtMTc5MS00YTFjLWE4ZGEtN2U4MmI3MWZmZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjikeSNz7TO7I1jj54zCjnTgaz62QvEZujrL9 rod8lJE5UPhFTY6603XJnoc3P1HQ589nKrJAohMpeqsGxYXe06EM4X/tylDgoJBn FLF22AZh/+NzTORLC3TIGnfiPVGJMbQaxBGEj3uXYSD2/VQQg1sKfLCif6gPdSfk gP6mHe5voJ43coiO08FpnUe2t5J6iIISGY632QlcS8Mu6dT7VdmPo805TrHYvZjC 6jsPfaftInnrF+NG+CLNfmX4YiGoC9x27YS81EqrehK/NveXQWjIWUtrB2E6ZHqj grEO7BUYdr+Na5zuz/zeozbRstHzqo0KW8XaCu2Km+UXWdoECwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+pTD6B5A0xWlxmzUzu2FXBJQ2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGYxMTQ4ZjUtZWE0YS0z MDM5LTkzMDItZmY2NWNjZjdkMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArEmL/dQZkJtV7EtMJHym6kg/AKCrYXN19O3F7fZDeP69HuTicE+b3x PSNp8KqfHZ9XDPNa7+wVvxzimMqtnlvr0Qa7519FzzY6+5lM+a77+4X6Bewf8nRK DLYMIYr4K/0vu4mbJzVXQxpbMN9hm+D8KKS/0ytKpyg3Bj7kqGFHFW43V6ZAe2zM v79A7x0kgh7H3YxC+/2SopWbI0wzAr32POvTi4YNpZoDFEYKPwe1684IxBrXk9YC 3EFcnxXei5rqpoEItIUo/EqYoxFgntcrE9Wr/821Q2qM8lLWgbhBUFqBMWTci/LN JMjIJcfAHvaIPzQAyu5YzlwAbQnPQK8= -----END CERTIFICATE-----Generated at Fri Sep 19 00:01:12 2025 by rpki-client