$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/34a45056-bada-3625-b217-57a17938d41f.roa File: 34a45056-bada-3625-b217-57a17938d41f.roa (raw, json) Hash identifier: knCTAEUZI+Nn8y52drb1kMiY7HyDKuCHsaBVqCfhPPk= Subject key identifier: 97:1E:DB:F4:98:0B:01:D1:21:04:1A:65:CF:46:23:B4:E1:53:5B:1E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFE122305FE44755445955F80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/34a45056-bada-3625-b217-57a17938d41f.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 20940 IP address blocks: 165.254.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:23:05:fe:44:75:54:45:95:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=260385af-f54f-4376-8945-954bfc8b8970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2b:4d:3c:59:d5:a4:48:70:14:50:fc:73:35: 54:05:5e:4d:7d:f0:f3:25:99:8a:2d:06:0a:61:50: cd:17:c7:95:4e:e1:ef:3d:6d:2e:b8:29:1e:14:d9: 5f:94:7b:b8:18:1e:f8:07:fa:8b:1a:01:0f:56:b2: 8c:a1:29:b8:91:30:3a:1f:01:71:dc:f9:fd:ac:db: bb:e9:2f:ad:c8:b4:2b:ac:31:6e:d2:ca:80:78:c8: 38:98:6a:83:df:68:05:dc:bc:95:3f:6e:3c:ca:bf: 62:2e:7e:fe:00:82:78:9f:03:6a:3f:4c:da:ad:36: de:a5:28:43:9f:34:9d:4c:66:71:3c:80:25:26:b5: 6e:55:01:5e:1a:7c:85:fc:5c:2a:ed:87:c9:62:32: 8f:c4:ec:83:20:e1:08:44:11:5f:bf:b7:08:b5:f5: 8a:82:d3:32:9a:a6:53:11:47:a2:47:b9:d2:ef:7e: fe:85:7a:d0:b9:8b:03:e0:ea:9b:17:44:dd:e2:f8: cb:e1:c8:18:93:b6:24:39:be:3f:27:db:5c:31:e2: e3:3c:86:b4:6a:74:c0:15:ea:cc:b4:cd:8c:a6:bc: 93:c2:76:98:4b:ba:8f:db:87:d3:66:9d:01:4c:fa: a5:b3:0d:94:b9:c4:c2:1b:01:62:e3:aa:88:6f:81: 90:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1E:DB:F4:98:0B:01:D1:21:04:1A:65:CF:46:23:B4:E1:53:5B:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/34a45056-bada-3625-b217-57a17938d41f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:06:77:9b:8b:ff:bc:07:0e:ed:b7:85:b5:7d:72:d2:be:19: 70:f7:f3:ad:c3:46:72:f2:36:26:23:68:17:5c:03:5a:73:6b: 0f:59:4a:d4:fa:ca:8f:93:f3:9d:b9:12:10:d4:59:b1:da:66: 27:41:ed:0d:84:f7:d0:94:ee:da:02:04:3c:5c:26:14:27:0f: 52:93:b9:6f:cd:0d:09:2f:f1:08:15:21:f6:88:c4:06:63:f8: c7:88:67:05:48:fb:72:bc:fc:af:d1:f4:42:c6:c6:4c:5d:45: 50:9b:67:50:77:ec:e3:f4:46:65:cc:1c:dc:21:c6:24:92:33: 8b:6f:ac:67:36:57:a9:bc:6f:40:2c:94:35:bf:a9:be:a2:c7: 40:6c:38:9c:d3:ed:70:7e:a2:84:d1:ec:59:27:03:8d:de:63: ba:0d:4d:db:f0:a1:5b:0d:b8:0a:1d:55:33:b3:60:35:94:44: b2:b5:3b:0c:76:9e:66:13:ff:93:f7:0b:01:36:d7:b6:b2:1d: d4:05:79:22:a6:3b:85:4f:57:3d:d0:d4:f3:19:f3:bd:78:73: 83:71:8d:57:15:3b:2a:72:57:f9:f9:84:28:f5:22:27:c4:af: 2e:2b:83:7a:02:4d:43:e3:a3:11:a0:1f:30:35:4d:51:53:f8: 2d:b8:37:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EiMF/kR1VEWVX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MjYwMzg1YWYtZjU0Zi00Mzc2LTg5NDUtOTU0YmZjOGI4OTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkitNPFnVpEhwFFD8czVUBV5NffDzJZmKLQYK YVDNF8eVTuHvPW0uuCkeFNlflHu4GB74B/qLGgEPVrKMoSm4kTA6HwFx3Pn9rNu7 6S+tyLQrrDFu0sqAeMg4mGqD32gF3LyVP248yr9iLn7+AIJ4nwNqP0zarTbepShD nzSdTGZxPIAlJrVuVQFeGnyF/Fwq7YfJYjKPxOyDIOEIRBFfv7cItfWKgtMymqZT EUeiR7nS737+hXrQuYsD4OqbF0Td4vjL4cgYk7YkOb4/J9tcMeLjPIa0anTAFerM tM2MpryTwnaYS7qP24fTZp0BTPqlsw2UucTCGwFi46qIb4GQpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJce2/SYCwHRIQQaZc9GI7ThU1seMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzRhNDUwNTYtYmFkYS0z NjI1LWIyMTctNTdhMTc5MzhkNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf7OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwGd5uL/7wHDu23hbV9ctK+GXD3863DRnLyNiYjaBdcA1pzaw9ZStT6 yo+T8525EhDUWbHaZidB7Q2E99CU7toCBDxcJhQnD1KTuW/NDQkv8QgVIfaIxAZj +MeIZwVI+3K8/K/R9ELGxkxdRVCbZ1B37OP0RmXMHNwhxiSSM4tvrGc2V6m8b0As lDW/qb6ix0BsOJzT7XB+ooTR7FknA43eY7oNTdvwoVsNuAodVTOzYDWURLK1Owx2 nmYT/5P3CwE217ayHdQFeSKmO4VPVz3Q1PMZ8714c4NxjVcVOypyV/n5hCj1IifE ry4rg3oCTUPjoxGgHzA1TVFT+C24N3A= -----END CERTIFICATE-----Generated at Thu Sep 3 12:59:23 2026 by rpki-client