$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/533c307d-190d-313d-9dc9-d26717cac75d.roa File: 533c307d-190d-313d-9dc9-d26717cac75d.roa (raw, json) Hash identifier: lXRuQiLKbgDpqlsDMAPwxtE5oVHnHtIg8jt3Th6jPOs= Subject key identifier: 13:C5:B3:9B:20:3B:C6:0E:41:E2:70:A9:44:EC:08:FE:7E:B9:F7:05 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F093CE70B976DFD5FAD0996C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/533c307d-190d-313d-9dc9-d26717cac75d.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 399469 IP address blocks: 165.254.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e7:0b:97:6d:fd:5f:ad:09:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=fda71f3c-d29f-42ed-b9cc-5133247d4459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:80:0a:cf:de:21:07:14:57:35:56:a3:60: e8:93:30:c7:2f:ae:2c:49:19:8f:b8:7c:37:8e:cc: 93:e0:73:7f:b9:7c:9d:d9:d6:ad:6d:3c:6c:02:3d: 99:c8:75:e0:63:ee:fc:23:42:9e:4b:5d:ba:ef:5d: c0:02:ce:49:62:98:79:bc:81:18:5a:37:55:4c:3d: d7:a0:1e:7d:0d:20:14:9a:52:2c:8e:19:57:b0:8d: 61:2c:5e:f1:c0:e8:6f:c6:9c:18:28:fa:7d:db:51: be:28:2e:dc:83:48:42:4c:a8:32:18:61:ba:91:d6: 81:40:fe:ed:90:b2:9b:54:4b:a6:bf:22:e7:42:89: 6a:f3:b2:1c:de:d0:ee:25:3c:28:fe:74:5b:23:cd: a9:e0:fe:c2:90:fe:ef:d9:91:78:96:6d:c1:66:2d: 2c:19:57:4a:52:96:cb:f6:97:07:f0:08:23:57:39: a5:e8:53:53:54:46:21:33:75:59:07:15:39:57:45: 71:e4:6f:e4:53:70:fe:af:42:4b:65:f5:45:80:c0: 11:d0:75:37:c3:5e:ef:de:0a:64:3b:c4:8f:27:37: 52:92:47:c3:1b:9a:8e:91:4f:4b:b0:d8:c5:03:b7: 78:41:72:81:a8:31:08:28:90:c3:4b:e3:cb:9d:1c: 91:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C5:B3:9B:20:3B:C6:0E:41:E2:70:A9:44:EC:08:FE:7E:B9:F7:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/533c307d-190d-313d-9dc9-d26717cac75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ab:04:f0:ab:a9:14:a1:3e:b1:ae:89:08:15:9e:18:59:9f: f8:51:62:93:20:f0:62:48:35:fa:82:be:a3:3e:65:95:90:e5: ce:3c:fd:c8:12:f7:20:0e:05:cb:c7:ec:6e:a9:78:99:bc:9c: 8b:b9:67:c0:f9:96:15:ee:f3:d5:53:35:9f:66:37:3c:59:96: 4f:b0:96:ce:7e:7f:cb:56:9e:79:4d:b5:24:ba:66:9c:30:ae: ce:af:90:ab:cf:68:f3:22:66:87:ba:1d:44:b4:e5:9c:38:ac: ec:51:ac:32:7e:d7:33:98:19:95:fe:15:c9:71:5a:8a:d5:d4: 45:1b:43:00:1b:29:44:1d:16:96:c6:19:1b:cd:50:85:03:25: 75:cd:d0:c7:cb:7a:87:95:30:99:a1:90:88:93:c1:62:be:f8: 03:d3:6c:79:ce:99:dc:39:26:20:bb:c4:82:33:8b:22:5a:f5: ac:f0:e8:0e:2f:71:c6:50:ce:95:b3:c3:58:6d:5d:a6:9b:2c: c0:cd:f3:40:f6:ad:7c:8d:ee:e7:e2:9e:bb:dc:e1:2f:31:51: cf:7e:3e:b6:84:02:49:34:28:c8:9c:92:8e:46:be:f5:f2:ef: b1:08:12:f0:14:f8:6e:51:b0:04:a5:b3:fe:54:2a:b0:e1:70: 3d:2f:65:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOcLl239X60JlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZmRhNzFmM2MtZDI5Zi00MmVkLWI5Y2MtNTEzMzI0N2Q0NDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCmACs/eIQcUVzVWo2DokzDHL64sSRmPuHw3 jsyT4HN/uXyd2datbTxsAj2ZyHXgY+78I0KeS126713AAs5JYph5vIEYWjdVTD3X oB59DSAUmlIsjhlXsI1hLF7xwOhvxpwYKPp921G+KC7cg0hCTKgyGGG6kdaBQP7t kLKbVEumvyLnQolq87Ic3tDuJTwo/nRbI82p4P7CkP7v2ZF4lm3BZi0sGVdKUpbL 9pcH8AgjVzml6FNTVEYhM3VZBxU5V0Vx5G/kU3D+r0JLZfVFgMAR0HU3w17v3gpk O8SPJzdSkkfDG5qOkU9LsNjFA7d4QXKBqDEIKJDDS+PLnRyRtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPFs5sgO8YOQeJwqUTsCP5+ufcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTMzYzMwN2QtMTkwZC0z MTNkLTlkYzktZDI2NzE3Y2FjNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpf5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyrBPCrqRShPrGuiQgVnhhZn/hRYpMg8GJINfqCvqM+ZZWQ5c48/cgS 9yAOBcvH7G6peJm8nIu5Z8D5lhXu89VTNZ9mNzxZlk+wls5+f8tWnnlNtSS6Zpww rs6vkKvPaPMiZoe6HUS05Zw4rOxRrDJ+1zOYGZX+FclxWorV1EUbQwAbKUQdFpbG GRvNUIUDJXXN0MfLeoeVMJmhkIiTwWK++APTbHnOmdw5JiC7xIIziyJa9azw6A4v ccZQzpWzw1htXaabLMDN80D2rXyN7ufinrvc4S8xUc9+PraEAkk0KMicko5GvvXy 77EIEvAU+G5RsASls/5UKrDhcD0vZSk= -----END CERTIFICATE-----Generated at Thu Sep 17 12:12:42 2026 by rpki-client