$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5097f6be-dbe0-3d70-a70a-8aa258e8f423.roa File: 5097f6be-dbe0-3d70-a70a-8aa258e8f423.roa (raw, json) Hash identifier: h4/XPhYC0bmkxenNAQst5W5QeR9uh79+Frr4SU/2T/I= Subject key identifier: 8A:2D:85:07:9A:57:EF:BF:F8:29:93:3D:18:3A:6F:30:E1:19:3E:A3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233C12D137D48D5C2D1AC8 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5097f6be-dbe0-3d70-a70a-8aa258e8f423.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 97 IP address blocks: 165.254.164.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3c:12:d1:37:d4:8d:5c:2d:1a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=b7b93092-736d-490f-bf9f-8a02240edf6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5b:d3:f0:1b:04:95:48:a4:cc:78:d3:ff:d5: 45:f2:7a:8a:cd:60:a1:3d:38:32:71:96:c3:c8:5c: a4:8d:20:4c:da:8b:35:a2:e1:ac:89:cc:5e:ad:3f: 8f:59:f5:b8:42:2c:9e:39:ef:86:aa:79:b8:ae:87: dd:d5:07:25:32:ff:3a:1a:55:4b:72:6a:85:47:a9: 9c:0f:bb:74:31:a6:d4:bb:b7:05:f0:56:5f:a9:a6: c2:40:9c:41:e1:2e:ac:50:fd:8c:36:6f:17:a3:1a: 20:5e:6c:9b:2e:46:ab:1e:e6:67:37:94:8b:0e:83: 5c:5a:75:26:71:49:ae:ff:5c:9a:66:2b:20:ab:37: cf:8e:1b:db:48:f1:72:81:d0:1a:2d:5a:86:ec:cd: 7e:29:c9:ac:7f:d3:cc:4f:1c:f7:45:8a:c9:6b:c6: 2d:0a:05:ce:5c:ca:7e:15:77:d9:fd:9f:0b:8f:64: a4:52:fe:9b:aa:f6:c3:ea:3b:68:56:ed:48:00:50: 3d:c7:5c:cb:5d:80:b8:f1:c1:2b:78:e2:89:0d:6e: 4f:c3:88:d0:e6:9b:d9:55:1c:22:18:a8:0d:83:f1: 7c:af:fd:85:06:6e:d1:6f:67:a8:71:34:4c:09:c9: 62:f6:4a:3f:b3:84:36:4a:19:c4:cc:38:32:4b:f2: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2D:85:07:9A:57:EF:BF:F8:29:93:3D:18:3A:6F:30:E1:19:3E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5097f6be-dbe0-3d70-a70a-8aa258e8f423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:aa:f7:78:a6:3c:5e:db:88:dd:b9:6c:f9:a8:b4:f3:24:91: d0:63:1a:57:2a:93:1b:c5:36:a0:cc:25:4b:80:90:4d:7b:35: a8:27:d6:c3:cc:04:6f:b5:c1:71:69:ed:cc:33:99:e3:7b:03: 59:b3:69:72:45:a2:5b:19:18:b7:f6:af:15:4c:57:da:88:28: 0f:6b:34:a3:6e:fe:12:5f:23:b8:85:9a:b6:db:73:17:89:79: 51:0e:d5:58:ae:98:52:3f:99:a3:67:1c:48:4d:47:94:7c:1e: 48:e9:55:78:ec:3c:60:c0:65:8b:dd:91:00:21:aa:43:fd:dd: 32:1c:fc:ac:71:ea:b0:3e:ed:2e:16:7e:93:ae:96:bc:56:32: 53:7c:05:8b:65:dd:58:ba:84:6c:e1:be:9a:30:ea:ef:c9:60: f4:cf:5d:9e:42:34:5b:ab:df:5a:95:a2:75:6f:ad:82:2d:ec: 3f:02:2e:32:9f:78:e9:ea:73:11:ef:4b:59:0b:ba:40:e9:e2: 81:3f:d6:65:09:71:86:86:dc:a4:f6:00:9e:61:f4:a8:c7:ad: 9d:c4:81:9d:2b:dd:6e:69:6f:22:12:86:c6:89:09:3d:97:30: 5a:03:f1:64:13:9f:2a:7e:43:0e:b5:20:22:91:1c:8d:8b:49: b5:69:07:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzwS0TfUjVwtGsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk YjdiOTMwOTItNzM2ZC00OTBmLWJmOWYtOGEwMjI0MGVkZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVvT8BsElUikzHjT/9VF8nqKzWChPTgycZbD yFykjSBM2os1ouGsicxerT+PWfW4QiyeOe+Gqnm4rofd1QclMv86GlVLcmqFR6mc D7t0MabUu7cF8FZfqabCQJxB4S6sUP2MNm8XoxogXmybLkarHuZnN5SLDoNcWnUm cUmu/1yaZisgqzfPjhvbSPFygdAaLVqG7M1+Kcmsf9PMTxz3RYrJa8YtCgXOXMp+ FXfZ/Z8Lj2SkUv6bqvbD6jtoVu1IAFA9x1zLXYC48cEreOKJDW5Pw4jQ5pvZVRwi GKgNg/F8r/2FBm7Rb2eocTRMCcli9ko/s4Q2ShnEzDgyS/L5pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIothQeaV++/+CmTPRg6bzDhGT6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTA5N2Y2YmUtZGJlMC0z ZDcwLWE3MGEtOGFhMjU4ZThmNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf6kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOq93imPF7biN25bPmotPMkkdBjGlcqkxvFNqDMJUuAkE17Nagn1sPM BG+1wXFp7cwzmeN7A1mzaXJFolsZGLf2rxVMV9qIKA9rNKNu/hJfI7iFmrbbcxeJ eVEO1ViumFI/maNnHEhNR5R8HkjpVXjsPGDAZYvdkQAhqkP93TIc/Kxx6rA+7S4W fpOulrxWMlN8BYtl3Vi6hGzhvpow6u/JYPTPXZ5CNFur31qVonVvrYIt7D8CLjKf eOnqcxHvS1kLukDp4oE/1mUJcYaG3KT2AJ5h9KjHrZ3EgZ0r3W5pbyIShsaJCT2X MFoD8WQTnyp+Qw61ICKRHI2LSbVpB54= -----END CERTIFICATE-----Generated at Thu Sep 17 16:51:03 2026 by rpki-client