$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/345182d6-86f7-3e2e-99c6-7781be6bcce1.roa File: 345182d6-86f7-3e2e-99c6-7781be6bcce1.roa (raw, json) Hash identifier: GpO5qzpItHeD8Oru/s+Wuyz+jMwxr+/9x0BxCS4v+hg= Subject key identifier: 32:4C:C0:70:34:B7:34:69:33:2C:CB:C1:B9:68:51:D8:F6:E2:73:0C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D98BAB24706643FE53F3A66C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/345182d6-86f7-3e2e-99c6-7781be6bcce1.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 3949 IP address blocks: 165.254.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b2:47:06:64:3f:e5:3f:3a:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=ed5d72d3-02a0-44e9-9a32-19699b29b59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:84:a0:31:53:d4:bd:a3:ae:f5:86:4c:8e:8b: b6:de:00:cb:6d:33:af:7d:38:81:94:0b:48:c5:11: 7a:5f:0f:d7:6f:84:6d:2b:d3:9e:3e:07:a1:b5:d9: 3d:53:d1:f4:75:e4:e5:19:86:c6:f0:1e:aa:cf:54: 46:ab:f3:12:3d:14:7d:62:08:d7:18:53:db:69:cc: be:48:67:4b:ca:f0:8f:f3:04:5a:ad:70:30:62:56: 73:18:c4:96:1b:ce:e6:58:5c:cb:b2:00:11:01:5b: e8:83:ee:14:79:97:3b:9c:7f:0a:62:9f:53:93:14: a7:c5:41:4c:12:69:31:c2:2e:3a:89:a5:b1:e7:47: 66:66:d9:ef:f4:8c:7b:f7:69:8f:4a:b6:35:24:74: a7:59:fe:c1:7b:fd:8a:05:41:76:1a:19:cf:a8:d8: e2:ce:16:87:c3:39:4f:d0:ee:3a:50:97:e5:86:58: ff:90:13:bd:73:ce:02:88:17:43:91:d9:29:79:78: ca:13:23:79:93:6c:7c:19:ed:c3:a9:c7:24:d8:d3: 3a:70:97:dc:cc:4e:c6:88:ba:a0:d1:d5:9d:69:db: 29:b0:d6:ed:31:09:2e:d9:32:c0:94:70:ed:4a:18: 2e:c5:32:4d:71:8f:42:57:ca:92:b7:19:26:f5:23: fc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4C:C0:70:34:B7:34:69:33:2C:CB:C1:B9:68:51:D8:F6:E2:73:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/345182d6-86f7-3e2e-99c6-7781be6bcce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ef:c8:54:a9:66:f4:33:26:36:f3:26:fc:bd:2c:67:1f:33: ed:e0:16:7e:ae:95:3d:1d:1b:aa:52:57:ea:1b:69:b4:e9:15: 6c:eb:5a:7b:ab:5c:5e:f5:ba:13:9d:a4:93:62:ae:3f:ed:1e: d9:e7:ba:32:81:e2:38:63:28:1c:ac:0c:5e:fe:ad:f3:f1:35: d7:85:db:7b:7d:7e:28:58:10:de:66:69:91:f5:08:30:60:b3: 88:5e:9f:8c:c3:c0:76:16:83:96:4c:f8:12:21:e3:51:d7:47: 6e:ed:c5:23:c0:f4:56:94:ad:a9:cf:d8:78:73:e7:52:63:17: 3d:29:d9:42:2f:83:d7:e9:70:2b:61:0c:14:fa:7f:8c:b3:fe: 34:8d:16:eb:1e:22:f3:b5:a2:c7:58:fd:5e:7f:81:9f:c6:bf: e9:c7:7b:25:d5:ab:d1:82:2c:97:46:cf:ed:07:c5:3b:4e:d8: c8:23:72:ba:8b:64:f4:59:dd:70:48:a1:b7:56:bc:10:87:33: f0:d8:b2:6c:9e:2b:57:f0:94:af:45:2b:27:74:19:51:f2:12: e1:93:8d:cb:74:c7:4b:84:6e:b4:4a:7b:f4:f4:b8:5a:2e:4d: bc:1b:af:8f:2c:5c:2f:ac:9d:c0:94:aa:ae:72:11:48:53:7e: e5:ff:a8:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YurJHBmQ/5T86ZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk ZWQ1ZDcyZDMtMDJhMC00NGU5LTlhMzItMTk2OTliMjliNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoSgMVPUvaOu9YZMjou23gDLbTOvfTiBlAtI xRF6Xw/Xb4RtK9OePgehtdk9U9H0deTlGYbG8B6qz1RGq/MSPRR9YgjXGFPbacy+ SGdLyvCP8wRarXAwYlZzGMSWG87mWFzLsgARAVvog+4UeZc7nH8KYp9TkxSnxUFM Emkxwi46iaWx50dmZtnv9Ix792mPSrY1JHSnWf7Be/2KBUF2GhnPqNjizhaHwzlP 0O46UJflhlj/kBO9c84CiBdDkdkpeXjKEyN5k2x8Ge3Dqcck2NM6cJfczE7GiLqg 0dWdadspsNbtMQku2TLAlHDtShguxTJNcY9CV8qStxkm9SP8hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJMwHA0tzRpMyzLwbloUdj24nMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzQ1MTgyZDYtODZmNy0z ZTJlLTk5YzYtNzc4MWJlNmJjY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf42MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvvyFSpZvQzJjbzJvy9LGcfM+3gFn6ulT0dG6pSV+obabTpFWzrWnur XF71uhOdpJNirj/tHtnnujKB4jhjKBysDF7+rfPxNdeF23t9fihYEN5maZH1CDBg s4hen4zDwHYWg5ZM+BIh41HXR27txSPA9FaUranP2Hhz51JjFz0p2UIvg9fpcCth DBT6f4yz/jSNFuseIvO1osdY/V5/gZ/Gv+nHeyXVq9GCLJdGz+0HxTtO2MgjcrqL ZPRZ3XBIobdWvBCHM/DYsmyeK1fwlK9FKyd0GVHyEuGTjct0x0uEbrRKe/T0uFou Tbwbr48sXC+sncCUqq5yEUhTfuX/qPE= -----END CERTIFICATE-----Generated at Tue Apr 28 03:24:31 2026 by rpki-client