$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/409cf6f8-483a-3c61-a454-9e18624649fa.roa File: 409cf6f8-483a-3c61-a454-9e18624649fa.roa (raw, json) Hash identifier: UEP1zaagfM3KC7uZuxzPUGxHOEzAKGxjF/zoT5IvJuE= Subject key identifier: BB:DF:B0:0F:6F:7D:9B:B7:09:09:EA:CC:E4:D7:1C:BC:00:CB:70:12 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BCD9B110338CD4694820F2740 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/409cf6f8-483a-3c61-a454-9e18624649fa.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 393560 IP address blocks: 168.143.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:11:03:38:cd:46:94:82:0f:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=9de14122-8ce6-44b2-8084-9e536cd660bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:d5:3d:10:50:d5:e4:2e:cb:c8:78:c6:15: f8:84:51:2f:b6:77:8c:4e:85:6e:98:98:8a:92:fe: 56:f1:df:03:fe:48:fa:89:f0:a7:66:47:23:f3:48: a2:1a:94:f6:81:bd:b1:80:92:89:b9:67:ee:2a:70: 72:94:03:11:d9:30:58:94:c8:76:95:dc:bc:5a:9f: d8:a2:d1:48:28:89:69:22:33:24:ca:66:a8:4d:71: 06:6c:d0:8e:19:6e:d8:28:57:88:2b:0f:97:21:08: 93:48:a5:9c:e0:dc:b2:50:02:98:cb:e6:86:18:18: a4:24:f7:90:e8:94:f9:f6:64:ad:24:65:74:e7:2b: 31:a8:36:63:64:a4:61:5e:47:14:0d:38:49:fb:09: 00:3d:97:6e:7f:d8:f7:2a:dc:38:8f:5b:fe:19:ec: f9:09:d9:64:4a:94:4f:73:d0:27:25:2c:bf:03:38: 94:82:b7:a9:d2:57:0f:2e:db:4f:71:55:97:f6:eb: 06:72:1d:53:f2:bf:70:66:5c:66:93:d5:16:5d:49: 9b:a1:ac:3c:54:e4:dd:95:80:35:9e:8b:84:61:f7: f1:d6:db:d0:10:98:fc:9d:f2:1a:65:83:90:a0:aa: d0:41:06:fe:51:3e:cc:0a:55:e8:ba:9f:81:ca:44: b8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DF:B0:0F:6F:7D:9B:B7:09:09:EA:CC:E4:D7:1C:BC:00:CB:70:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/409cf6f8-483a-3c61-a454-9e18624649fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5f:f6:53:00:42:d0:56:6d:97:e9:1b:9a:d1:cf:8e:bb:f9: 37:76:9f:c7:00:80:77:d6:55:45:36:5e:81:94:28:ff:f1:83: 46:50:53:d2:c6:f3:cf:6c:f7:5e:20:4f:af:e9:6c:e6:8c:0e: 69:60:a9:8a:83:6f:57:b0:7d:e0:c5:b5:74:5c:c0:29:8a:c6: 5d:c2:e4:fd:a3:51:34:d0:e4:ca:d3:5f:2a:65:cb:41:9f:e1: 59:6c:a6:79:95:8f:26:14:2d:03:23:c1:be:ee:8d:bd:8f:d2: 69:88:26:01:ea:69:07:80:f2:3e:42:ce:0d:02:d1:75:31:db: ea:98:68:1b:cc:fc:15:b9:c2:5a:20:58:71:4c:fe:cb:7e:07: ee:df:fa:ac:42:48:dc:be:18:a4:7e:22:11:8b:30:e4:86:84: 9a:b6:a7:e4:bb:f8:da:d8:9a:48:d0:cb:05:27:3c:63:88:ea: da:60:b2:70:1a:3a:41:a1:a0:cc:d2:8d:10:c0:12:8f:50:3a: cb:c3:ad:c2:b8:16:f8:9c:4c:be:f2:64:ab:e6:cc:8c:bd:a6: a7:5d:1f:eb:1b:ba:fa:55:86:e9:54:66:da:fe:5a:f8:47:22: a0:d2:c9:51:45:5f:0f:23:8d:47:bc:11:2e:8b:2f:a9:16:53: 75:11:fb:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxEDOM1GlIIPJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk OWRlMTQxMjItOGNlNi00NGIyLTgwODQtOWU1MzZjZDY2MGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdLVPRBQ1eQuy8h4xhX4hFEvtneMToVumJiK kv5W8d8D/kj6ifCnZkcj80iiGpT2gb2xgJKJuWfuKnBylAMR2TBYlMh2ldy8Wp/Y otFIKIlpIjMkymaoTXEGbNCOGW7YKFeIKw+XIQiTSKWc4NyyUAKYy+aGGBikJPeQ 6JT59mStJGV05ysxqDZjZKRhXkcUDThJ+wkAPZduf9j3Ktw4j1v+Gez5CdlkSpRP c9AnJSy/AziUgrep0lcPLttPcVWX9usGch1T8r9wZlxmk9UWXUmboaw8VOTdlYA1 nouEYffx1tvQEJj8nfIaZYOQoKrQQQb+UT7MClXoup+BykS4lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvfsA9vfZu3CQnqzOTXHLwAy3ASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDA5Y2Y2ZjgtNDgzYS0z YzYxLWE0NTQtOWUxODYyNDY0OWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqI/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElf9lMAQtBWbZfpG5rRz467+Td2n8cAgHfWVUU2XoGUKP/xg0ZQU9LG 889s914gT6/pbOaMDmlgqYqDb1ewfeDFtXRcwCmKxl3C5P2jUTTQ5MrTXyply0Gf 4VlspnmVjyYULQMjwb7ujb2P0mmIJgHqaQeA8j5Czg0C0XUx2+qYaBvM/BW5wlog WHFM/st+B+7f+qxCSNy+GKR+IhGLMOSGhJq2p+S7+NrYmkjQywUnPGOI6tpgsnAa OkGhoMzSjRDAEo9QOsvDrcK4FvicTL7yZKvmzIy9pqddH+sbuvpVhulUZtr+WvhH IqDSyVFFXw8jjUe8ES6LL6kWU3UR+9o= -----END CERTIFICATE-----Generated at Sat Nov 15 08:25:49 2025 by rpki-client