$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2087e3-ca3d-3e7f-a491-0731c7927092.roa File: 3d2087e3-ca3d-3e7f-a491-0731c7927092.roa (raw, json) Hash identifier: 0Mbn6Q/q8p2ilehf4eSLRZJV67kgrgd6iuTa06BSukU= Subject key identifier: 51:82:93:96:4E:98:6B:76:73:C0:FB:8B:FD:3F:7F:4B:50:3F:85:D5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233C4CD3E56FA26CB25600 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2087e3-ca3d-3e7f-a491-0731c7927092.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 7019 IP address blocks: 165.254.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3c:4c:d3:e5:6f:a2:6c:b2:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=d2253644-c34d-456c-a5a3-1cee63a5d08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:de:93:4e:e2:ad:48:8a:05:e9:19:fa:66: aa:86:3d:9f:01:c9:12:dc:22:a6:ee:61:dd:83:18: 78:b8:00:37:b0:47:25:2d:44:54:1c:59:e6:06:87: 89:1a:0f:fc:3a:76:5f:bb:bf:3a:7e:9a:49:59:be: a5:48:7e:13:6c:e3:e1:26:d8:56:b9:45:4a:f1:dc: 74:ab:81:f6:f4:9d:30:da:e9:3b:d6:cd:e2:f7:02: 16:f7:32:a7:a8:2a:a3:90:cc:39:4b:1b:7f:50:62: 22:b9:fc:18:bb:d0:34:66:b5:0a:b0:a9:32:20:8c: b9:c3:53:8a:6e:01:02:18:71:0d:c3:d6:9d:41:95: 79:9e:2d:a1:3e:6f:4e:4e:67:d0:82:5d:6c:df:6e: 4a:b0:6f:0e:54:27:2a:aa:d4:ee:52:3c:11:6b:1f: e3:11:f3:f0:2e:be:2b:f0:88:a8:26:5b:00:a6:c2: 69:d8:38:43:68:5f:8d:79:f6:f6:e7:0b:4b:34:5d: 7f:a0:f2:83:8d:c1:72:5a:fc:b6:39:80:c2:3c:20: 93:27:cb:e9:4d:b2:55:eb:56:62:cc:64:83:1f:58: 29:d1:df:79:41:e3:19:b7:05:2d:36:90:3c:c7:c2: d8:60:e2:eb:c8:59:b3:2a:68:a9:75:cc:22:07:d2: 8e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:82:93:96:4E:98:6B:76:73:C0:FB:8B:FD:3F:7F:4B:50:3F:85:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2087e3-ca3d-3e7f-a491-0731c7927092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:d3:86:76:2e:d3:20:7f:35:61:8e:2c:5d:77:2e:df:2c:27: a1:86:cc:1d:dd:c0:57:be:98:b4:1a:c0:9c:33:b9:e3:9e:b5: d0:c3:11:c4:e4:13:50:a2:5b:c2:95:a5:e7:8e:36:6f:2e:f7: 78:01:3c:b4:8f:ac:ad:a0:d8:cf:11:24:32:15:7d:bf:06:e8: a7:88:56:b5:2c:2e:14:7d:48:c0:47:f1:d2:7f:bf:cf:fc:89: a9:9b:50:2c:f3:8b:35:1e:70:99:2a:a4:36:71:a4:e8:fb:65: 85:b5:08:d6:51:72:2d:10:9e:8b:32:49:7e:3c:42:9e:89:f9: 8b:f3:0f:3a:23:b1:77:7d:82:b8:ec:15:fc:b0:f8:89:e2:7e: 7c:08:a9:3f:65:98:bf:b6:de:df:26:80:b8:90:9d:f2:84:fb: 7d:5a:1f:55:bf:2d:7b:2b:77:2c:0b:1a:bd:8a:c3:3f:d9:a1: 49:97:d1:8b:98:36:7b:02:bf:c8:63:6a:a1:47:c1:e3:4e:fa: 8b:00:9e:8a:7d:f2:f2:54:a4:cd:69:be:88:93:37:6d:97:00: ac:f8:32:f2:21:0c:b2:16:0c:e5:ca:df:59:72:b0:5d:a8:0f: 5a:b1:28:28:7b:e7:83:ea:51:26:1d:2b:7b:cc:71:fc:42:44: a5:65:e9:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzxM0+VvomyyVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZDIyNTM2NDQtYzM0ZC00NTZjLWE1YTMtMWNlZTYzYTVkMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB7ek07irUiKBekZ+maqhj2fAckS3CKm7mHd gxh4uAA3sEclLURUHFnmBoeJGg/8OnZfu786fppJWb6lSH4TbOPhJthWuUVK8dx0 q4H29J0w2uk71s3i9wIW9zKnqCqjkMw5Sxt/UGIiufwYu9A0ZrUKsKkyIIy5w1OK bgECGHENw9adQZV5ni2hPm9OTmfQgl1s325KsG8OVCcqqtTuUjwRax/jEfPwLr4r 8IioJlsApsJp2DhDaF+Nefb25wtLNF1/oPKDjcFyWvy2OYDCPCCTJ8vpTbJV61Zi zGSDH1gp0d95QeMZtwUtNpA8x8LYYOLryFmzKmipdcwiB9KOMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGCk5ZOmGt2c8D7i/0/f0tQP4XVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2QyMDg3ZTMtY2EzZC0z ZTdmLWE0OTEtMDczMWM3OTI3MDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf4rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMvThnYu0yB/NWGOLF13Lt8sJ6GGzB3dwFe+mLQawJwzueOetdDDEcTk E1CiW8KVpeeONm8u93gBPLSPrK2g2M8RJDIVfb8G6KeIVrUsLhR9SMBH8dJ/v8/8 iambUCzzizUecJkqpDZxpOj7ZYW1CNZRci0QnosySX48Qp6J+YvzDzojsXd9grjs Ffyw+InifnwIqT9lmL+23t8mgLiQnfKE+31aH1W/LXsrdywLGr2Kwz/ZoUmX0YuY NnsCv8hjaqFHweNO+osAnop98vJUpM1pvoiTN22XAKz4MvIhDLIWDOXK31lysF2o D1qxKCh754PqUSYdK3vMcfxCRKVl6ak= -----END CERTIFICATE-----Generated at Thu Sep 17 13:35:53 2026 by rpki-client