$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e89a162-ec07-3fce-9bb8-b47052e1dbe6.roa File: 2e89a162-ec07-3fce-9bb8-b47052e1dbe6.roa (raw, json) Hash identifier: Oetvqjvo/3YXP5ZsA7Bu4mI7KotdqZzlsyM30fd6T+c= Subject key identifier: 17:BD:8D:B6:12:6C:81:BF:9E:78:4A:D4:92:2B:4C:D1:55:7B:A4:D8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E5FDF605FA29B87FE30C10C40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e89a162-ec07-3fce-9bb8-b47052e1dbe6.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 20940 IP address blocks: 165.254.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:60:5f:a2:9b:87:fe:30:c1:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=a021e0a5-d45a-42dd-9b2d-2fdac622fedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7c:da:08:c6:ac:0c:95:69:2a:df:cf:6c:9a: 93:6f:bb:68:96:3d:34:c5:9d:64:44:39:0c:2a:c3: 86:47:96:cc:57:99:93:d7:55:2b:8f:93:5f:51:3f: f3:c0:7f:4b:a5:02:1f:e7:fd:ed:34:67:60:20:27: b1:1d:29:d3:0b:d3:e5:2d:6d:6e:0c:f6:b4:33:23: 03:1f:ca:f7:b5:6b:1e:15:cd:90:f0:98:dc:50:80: 0f:b2:01:47:7e:f8:57:5e:c7:2b:df:27:24:8d:7d: d3:c5:04:c5:d8:25:a0:39:49:c2:f9:0b:2c:4a:46: ef:70:27:40:d6:6f:48:79:4f:cf:54:29:fb:9d:23: 92:4d:96:d8:3e:6a:87:d2:03:6f:1a:7a:5d:f3:0c: cd:83:6e:99:87:17:8a:0f:93:ef:68:ad:56:de:5d: fd:2d:58:45:45:05:4c:9f:c8:88:33:54:d1:47:7f: a9:e6:31:2a:9a:64:51:be:12:1b:5e:eb:a7:8b:d6: f2:b7:19:bd:15:37:54:ab:ba:d7:9e:f9:7e:8a:a3: bd:dd:4d:ac:75:b9:f0:5b:18:2b:fe:94:41:6a:4e: 04:25:12:80:33:86:4c:2b:e8:1b:cb:e9:86:56:c7: 4e:51:28:86:a2:66:00:00:c8:fd:f2:ef:13:be:4d: 9d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BD:8D:B6:12:6C:81:BF:9E:78:4A:D4:92:2B:4C:D1:55:7B:A4:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e89a162-ec07-3fce-9bb8-b47052e1dbe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:2c:0b:eb:aa:ea:73:e7:0a:eb:7f:ae:82:e0:c2:0d:48:1b: e2:76:d1:be:d2:56:f8:5f:1b:c7:50:f6:c2:dd:e6:ee:3c:1d: 72:0b:5f:e3:fb:8f:bd:c2:4f:16:f1:68:8c:98:b9:4f:d4:cc: c1:b2:e6:bc:3b:cb:ee:14:12:03:35:70:e6:ce:3b:6d:dc:d8: 91:eb:73:45:70:a8:03:a5:f1:5a:55:94:58:59:f5:b9:45:a8: 67:f4:ee:11:69:aa:58:62:96:7c:92:07:bb:c9:bc:58:8f:29: b7:ba:c5:ab:83:55:3f:da:75:e9:cf:55:8f:77:e3:fd:a0:27: d4:db:46:31:36:0a:e7:cd:eb:53:4a:65:10:a8:b2:4b:54:1a: 75:0f:c7:96:75:65:bd:05:ce:30:d6:1e:9b:a1:d5:6b:d2:2e: 55:16:5f:61:a1:0e:4c:f6:a1:70:8d:62:4c:39:96:71:d3:58: c4:16:fc:8c:52:4d:99:82:e8:ba:2a:36:73:eb:ff:32:68:69: 0c:51:a8:81:0a:80:26:60:3b:8f:30:5a:1a:36:09:06:75:3e: 31:ab:3b:75:7b:be:f4:3d:28:7c:b2:05:1e:64:01:f2:da:42: f4:bc:c2:83:97:0b:60:46:5a:7e:ba:a2:56:bf:b3:a3:4a:da: 08:05:d9:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32BfopuH/jDBDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk YTAyMWUwYTUtZDQ1YS00MmRkLTliMmQtMmZkYWM2MjJmZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHzaCMasDJVpKt/PbJqTb7tolj00xZ1kRDkM KsOGR5bMV5mT11Urj5NfUT/zwH9LpQIf5/3tNGdgICexHSnTC9PlLW1uDPa0MyMD H8r3tWseFc2Q8JjcUIAPsgFHfvhXXscr3yckjX3TxQTF2CWgOUnC+QssSkbvcCdA 1m9IeU/PVCn7nSOSTZbYPmqH0gNvGnpd8wzNg26ZhxeKD5PvaK1W3l39LVhFRQVM n8iIM1TRR3+p5jEqmmRRvhIbXuuni9bytxm9FTdUq7rXnvl+iqO93U2sdbnwWxgr /pRBak4EJRKAM4ZMK+gby+mGVsdOUSiGomYAAMj98u8Tvk2ddQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe9jbYSbIG/nnhK1JIrTNFVe6TYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmU4OWExNjItZWMwNy0z ZmNlLTliYjgtYjQ3MDUyZTFkYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQsC+uq6nPnCut/roLgwg1IG+J20b7SVvhfG8dQ9sLd5u48HXILX+P7 j73CTxbxaIyYuU/UzMGy5rw7y+4UEgM1cObOO23c2JHrc0VwqAOl8VpVlFhZ9blF qGf07hFpqlhilnySB7vJvFiPKbe6xauDVT/adenPVY934/2gJ9TbRjE2CufN61NK ZRCosktUGnUPx5Z1Zb0FzjDWHpuh1WvSLlUWX2GhDkz2oXCNYkw5lnHTWMQW/IxS TZmC6LoqNnPr/zJoaQxRqIEKgCZgO48wWho2CQZ1PjGrO3V7vvQ9KHyyBR5kAfLa QvS8woOXC2BGWn66ola/s6NK2ggF2fo= -----END CERTIFICATE-----Generated at Thu Jul 16 03:02:54 2026 by rpki-client