$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bafe8b4-658b-37ef-9ba8-b6b361ebb4d9.roa File: 1bafe8b4-658b-37ef-9ba8-b6b361ebb4d9.roa (raw, json) Hash identifier: kWAQcPbrNPUnxMe4J1XNTWudmOzQetIZniPmWpD/OWM= Subject key identifier: 98:14:47:A5:28:1A:2C:F0:54:DB:F6:1B:BD:70:F7:69:8C:A5:E5:09 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F9E987AE34E0574C0B2C27D40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bafe8b4-658b-37ef-9ba8-b6b361ebb4d9.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 3949 IP address blocks: 165.254.60.176/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:7a:e3:4e:05:74:c0:b2:c2:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=50de5386-47c3-4829-9992-a0f8c9095e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f4:de:3b:01:c0:71:67:0d:aa:f8:fc:df:43: d4:6e:90:ee:62:f8:07:52:6e:d6:e3:c2:00:98:2b: c2:9b:76:d6:fd:b6:ce:f9:3f:c1:20:92:1a:60:e5: 6b:1e:32:f3:3a:ad:12:15:29:70:1a:d7:93:ce:21: aa:9a:01:31:37:a3:10:22:c4:70:7f:9c:50:e5:2f: a6:5c:ee:62:77:1a:d0:c9:58:4f:ff:8b:21:2b:31: ac:57:cb:29:a5:6a:cd:52:4d:ce:ae:25:12:37:7c: 55:0a:08:2a:b8:48:8a:fb:57:db:4f:17:ab:16:4b: 7a:44:4f:0b:d3:d2:8a:b7:f0:f3:3e:30:45:44:09: c0:25:13:bb:a8:7d:f6:1f:60:84:7c:ed:c7:ca:89: 19:d2:50:5d:a4:fd:48:cf:1c:a0:bb:2f:1a:8f:36: ed:b9:bf:f4:7a:88:7f:42:ea:ae:7b:5a:ad:1e:e4: 0b:ce:b4:ef:e4:13:19:7a:3e:b5:09:9e:5b:23:c8: fd:8b:d7:52:b8:ee:d0:8c:fa:03:8d:e3:9d:d2:78: 97:e1:9d:34:a6:20:02:19:a3:e5:c1:d5:f4:e1:25: 81:84:1d:8c:5f:2c:56:b2:bf:42:5d:81:f7:33:41: 58:ac:d1:2b:ff:5d:50:f0:5d:f6:60:6c:10:8f:6c: d5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:14:47:A5:28:1A:2C:F0:54:DB:F6:1B:BD:70:F7:69:8C:A5:E5:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bafe8b4-658b-37ef-9ba8-b6b361ebb4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.60.176/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:3d:6d:44:13:b3:cf:88:79:40:89:ea:f1:43:e0:b4:f0:e5: 92:39:b4:7e:09:61:6c:c5:6c:b6:a1:d0:73:85:47:5c:01:50: e5:99:2c:7f:c3:a0:a7:a8:7a:e1:f6:ab:a9:b2:a5:0e:a9:5e: 14:ee:ae:60:79:92:2d:ce:e8:e8:84:c4:0e:7f:e2:a6:51:ce: 0f:a2:08:92:2c:ca:d5:1c:02:e9:18:e3:de:a9:d1:80:99:b3: 03:74:9a:78:09:a0:2f:40:12:a9:1d:6c:b8:08:c1:da:01:a3: 80:6f:0e:99:72:d8:39:5d:2c:62:9b:30:12:96:7f:e9:30:72: a5:8d:ec:65:39:73:1b:53:07:a0:62:26:2c:2c:57:77:b9:91: b1:92:01:fb:fe:cf:70:d3:2d:70:71:dd:09:40:dd:63:8b:64: ac:6b:80:73:ba:c3:0c:27:c2:9a:b1:1c:18:a2:42:c9:55:37: c2:cb:3a:79:42:aa:d5:39:66:c8:ea:8f:8a:8c:82:8e:9a:01: 87:1a:82:21:d0:8f:5d:d4:54:f7:fe:24:8b:11:da:9c:40:ad: 4d:0f:76:29:17:a5:1a:4a:f3:32:30:7a:63:4d:bf:d4:f3:9d: 66:a2:c2:a0:2f:25:b0:f9:9e:9c:e1:fb:c9:db:3c:56:f3:d6: 16:48:ff:3e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+emHrjTgV0wLLCfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk NTBkZTUzODYtNDdjMy00ODI5LTk5OTItYTBmOGM5MDk1ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfTeOwHAcWcNqvj830PUbpDuYvgHUm7W48IA mCvCm3bW/bbO+T/BIJIaYOVrHjLzOq0SFSlwGteTziGqmgExN6MQIsRwf5xQ5S+m XO5idxrQyVhP/4shKzGsV8sppWrNUk3OriUSN3xVCggquEiK+1fbTxerFkt6RE8L 09KKt/DzPjBFRAnAJRO7qH32H2CEfO3HyokZ0lBdpP1Izxyguy8ajzbtub/0eoh/ Quque1qtHuQLzrTv5BMZej61CZ5bI8j9i9dSuO7QjPoDjeOd0niX4Z00piACGaPl wdX04SWBhB2MXyxWsr9CXYH3M0FYrNEr/11Q8F32YGwQj2zVKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJgUR6UoGizwVNv2G71w92mMpeUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWJhZmU4YjQtNjU4Yi0z N2VmLTliYTgtYjZiMzYxZWJiNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEpf48sDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcPW1EE7PPiHlAierxQ+C08OWSObR+CWFsxWy2odBzhUdcAVDlmSx/ w6CnqHrh9qupsqUOqV4U7q5geZItzujohMQOf+KmUc4PogiSLMrVHALpGOPeqdGA mbMDdJp4CaAvQBKpHWy4CMHaAaOAbw6Zctg5XSximzASln/pMHKljexlOXMbUweg YiYsLFd3uZGxkgH7/s9w0y1wcd0JQN1ji2Ssa4BzusMMJ8KasRwYokLJVTfCyzp5 QqrVOWbI6o+KjIKOmgGHGoIh0I9d1FT3/iSLEdqcQK1ND3YpF6UaSvMyMHpjTb/U 851mosKgLyWw+Z6c4fvJ2zxW89YWSP8+ -----END CERTIFICATE-----Generated at Sat Oct 31 09:46:26 2026 by rpki-client