$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/533c307d-190d-313d-9dc9-d26717cac75d.roa File: 533c307d-190d-313d-9dc9-d26717cac75d.roa (raw, json) Hash identifier: ladPqgrXV6VfTMNGQsWl8q6FXMt6a52UYM5iqnweiuY= Subject key identifier: F1:B2:7C:F3:D3:14:19:C1:69:7E:8C:5C:93:8E:19:D2:63:F9:31:57 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BC53B0274AA5051B1E6525100 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/533c307d-190d-313d-9dc9-d26717cac75d.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 399469 IP address blocks: 165.254.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:02:74:aa:50:51:b1:e6:52:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=c1ed41fa-c3be-45ce-aee7-4e8a11ebcb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c2:f8:ad:99:6e:b8:72:6c:07:55:df:e6:a4: 0c:b5:7a:af:3a:a1:ed:e9:1c:38:83:23:f9:07:d6: 7b:f1:3a:0d:9b:bb:45:e7:56:a0:cc:02:89:1a:e8: 9b:8f:bc:a1:f7:80:0b:b4:04:40:0d:e0:38:8a:30: 9a:e2:1b:dd:67:de:df:d6:a0:96:6d:fd:11:3a:40: d1:78:0b:4e:55:7f:ec:3a:59:d9:96:11:b4:8e:4e: 11:3e:67:59:80:6f:77:fb:4d:52:24:e2:58:2b:55: 59:60:fd:5a:7c:e4:15:2b:d0:d7:c9:8f:1d:97:ee: 65:c6:6f:fb:25:82:a6:e4:16:48:63:42:03:9c:80: 94:98:e2:33:ab:26:47:40:9a:af:0d:48:08:79:82: 62:55:d7:d9:f0:dd:19:fb:af:8f:c9:48:51:c4:63: 6b:73:99:96:d7:5b:e1:85:bd:37:41:9d:04:cf:36: 38:3d:09:53:86:81:93:e5:60:cd:1c:a6:91:2d:6d: 90:ea:27:39:5f:df:63:14:50:ea:6a:ca:02:37:0e: 5d:d2:d1:c1:aa:21:d8:7e:d4:38:17:95:e6:66:68: f6:57:62:07:52:e9:f1:9a:d5:06:ca:fc:d6:b5:a6: 53:6b:1d:60:72:f2:2a:12:3b:43:a7:76:99:cc:08: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B2:7C:F3:D3:14:19:C1:69:7E:8C:5C:93:8E:19:D2:63:F9:31:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/533c307d-190d-313d-9dc9-d26717cac75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e2:e7:da:b3:7e:42:4a:f1:ca:94:5c:b1:eb:e9:8b:c3:1e: b9:dc:31:7d:4c:39:0f:04:c1:9f:8f:53:a5:bb:0a:35:63:fc: 97:d7:0d:a6:3e:1e:ee:ea:3c:91:1e:e4:cd:a1:df:43:ea:7c: 8c:42:09:54:ab:51:de:61:73:9c:a8:87:13:ba:7c:a3:48:93: de:bb:56:8d:05:45:69:11:da:3a:79:2e:81:5a:ca:6d:b4:16: 1e:c0:77:a6:22:3c:0f:08:a6:35:12:4a:b1:86:a5:de:5d:8e: 48:ed:0a:af:fd:09:13:54:18:3b:a9:09:d2:8e:0c:4e:10:38: 51:50:86:b6:41:30:f0:9c:63:e0:57:a4:55:bd:f8:ca:5d:d1: 1d:dd:a2:ca:25:c2:ff:1e:6c:d9:51:ed:85:6f:c3:40:65:72: e4:79:6b:02:41:9f:77:c1:11:41:ba:2d:3f:d0:43:9a:98:6b: fc:98:2c:16:76:3c:49:83:e6:7d:de:ab:76:d0:cc:2b:2b:59: 22:4a:e3:82:04:0b:e6:6d:e2:19:9f:3b:13:f3:9e:74:38:9b: 6c:d7:3b:02:a5:4d:d3:eb:f0:f2:d2:1c:b0:08:07:5f:b7:bc: 3d:20:85:18:dc:20:5e:8d:af:bb:ca:7d:34:0c:52:2b:ad:c4: 76:f5:7a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOwJ0qlBRseZSUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YzFlZDQxZmEtYzNiZS00NWNlLWFlZTctNGU4YTExZWJjYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsL4rZluuHJsB1Xf5qQMtXqvOqHt6Rw4gyP5 B9Z78ToNm7tF51agzAKJGuibj7yh94ALtARADeA4ijCa4hvdZ97f1qCWbf0ROkDR eAtOVX/sOlnZlhG0jk4RPmdZgG93+01SJOJYK1VZYP1afOQVK9DXyY8dl+5lxm/7 JYKm5BZIY0IDnICUmOIzqyZHQJqvDUgIeYJiVdfZ8N0Z+6+PyUhRxGNrc5mW11vh hb03QZ0EzzY4PQlThoGT5WDNHKaRLW2Q6ic5X99jFFDqasoCNw5d0tHBqiHYftQ4 F5XmZmj2V2IHUunxmtUGyvzWtaZTax1gcvIqEjtDp3aZzAh3MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGyfPPTFBnBaX6MXJOOGdJj+TFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTMzYzMwN2QtMTkwZC0z MTNkLTlkYzktZDI2NzE3Y2FjNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpf5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFni59qzfkJK8cqUXLHr6YvDHrncMX1MOQ8EwZ+PU6W7CjVj/JfXDaY+ Hu7qPJEe5M2h30PqfIxCCVSrUd5hc5yohxO6fKNIk967Vo0FRWkR2jp5LoFaym20 Fh7Ad6YiPA8IpjUSSrGGpd5djkjtCq/9CRNUGDupCdKODE4QOFFQhrZBMPCcY+BX pFW9+Mpd0R3dosolwv8ebNlR7YVvw0BlcuR5awJBn3fBEUG6LT/QQ5qYa/yYLBZ2 PEmD5n3eq3bQzCsrWSJK44IEC+Zt4hmfOxPznnQ4m2zXOwKlTdPr8PLSHLAIB1+3 vD0ghRjcIF6Nr7vKfTQMUiutxHb1evM= -----END CERTIFICATE-----Generated at Sat Nov 15 08:28:02 2025 by rpki-client