$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/554b1d4f-8fac-3a58-ad87-bcd99f24e829.roa File: 554b1d4f-8fac-3a58-ad87-bcd99f24e829.roa (raw, json) Hash identifier: rVq6b7GN7vww+7xQAOwos+4Sa9EmpwLh09KAEP2pidY= Subject key identifier: DD:0A:91:E8:1E:EF:93:D4:A4:FC:0A:32:F8:27:3E:FF:AA:93:8A:7E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233C360E8845C48A3120B0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/554b1d4f-8fac-3a58-ad87-bcd99f24e829.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 1407 IP address blocks: 165.254.16.200/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3c:36:0e:88:45:c4:8a:31:20:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=ebc22844-70de-4afd-bfa1-a478f01341f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f3:0a:0f:d8:b4:fa:15:37:a4:82:8d:18:55: 37:3f:b0:f1:5d:4b:72:12:c3:86:7f:68:f5:c2:50: 82:22:56:76:c7:8c:60:d2:b3:a4:7a:09:f6:9d:bb: 96:81:e9:43:15:00:7b:38:02:ea:71:e6:b4:02:f4: 81:13:70:93:bf:a4:d6:94:9a:5b:d2:b0:80:cd:9f: ce:27:df:a1:69:68:02:31:63:e1:39:f9:cd:bc:30: 7f:cf:32:d8:67:bf:eb:2d:1b:5a:16:32:44:9b:d7: 2c:ba:5b:c0:79:03:7b:98:8f:be:42:31:0c:af:16: 44:3c:d3:d0:7c:f1:f2:ac:19:51:aa:59:58:01:ef: ce:c5:be:86:30:e8:90:30:ad:53:1e:23:5f:37:54: 77:e5:65:4b:4b:4f:35:d7:08:e7:96:2b:f2:2c:38: f5:0b:e2:fb:00:aa:8d:bd:b0:13:a5:ec:7e:73:ff: fa:6e:b5:a8:07:79:98:32:f0:a6:6b:f1:83:02:44: 39:a4:8d:5b:c2:02:7d:3f:ea:c6:de:d3:7d:fe:20: f1:4b:3a:41:35:5c:92:e2:e9:3d:88:6a:81:6a:31: f7:c5:7e:05:78:99:38:d2:02:43:d0:87:68:cf:ab: d4:b0:eb:f4:97:b5:88:28:e4:79:04:ad:79:77:cc: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0A:91:E8:1E:EF:93:D4:A4:FC:0A:32:F8:27:3E:FF:AA:93:8A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/554b1d4f-8fac-3a58-ad87-bcd99f24e829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.16.200/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8b:dd:04:d7:a9:15:2c:34:ee:85:43:91:3c:4b:10:a0:91: e1:e3:1f:c4:aa:b4:d6:d4:da:64:b9:f4:65:12:cc:b7:f0:af: ee:1a:1f:1e:90:ad:63:47:96:37:e1:05:e3:ed:b3:b5:e7:a9: 65:85:d2:97:74:5a:5e:dd:97:15:34:aa:81:ae:81:f2:c7:8f: fa:7a:43:9a:bc:a6:e6:25:a7:fa:20:b1:08:c4:1f:42:9a:3e: 09:f9:2a:2a:01:91:d3:0a:d7:30:75:cc:a6:b9:09:78:d5:14: 4b:67:b9:f3:a0:51:53:2f:1a:4e:71:82:86:86:8b:73:89:3c: 27:ec:50:66:e6:79:09:df:7d:c5:d1:73:29:35:43:01:35:09: 0a:4e:8f:ff:aa:c6:42:a5:a5:ac:3a:ec:63:fb:39:1a:46:bb: 1f:a7:ac:2b:a5:bc:ba:be:16:23:fb:1a:03:f0:b9:7d:a5:fc: 45:dd:18:8e:de:f4:6c:68:b1:29:2d:82:35:78:3e:d5:8e:9b: 39:ad:55:cc:62:53:63:c4:e3:eb:ca:db:9d:2e:b8:19:60:3b: a4:75:ea:de:d7:ca:d4:b9:a9:06:6c:bd:7e:51:bc:d1:5f:5a: ca:8c:6f:7b:50:22:17:10:a4:f5:a9:5b:93:1d:cc:a3:6b:50: 24:46:c9:b1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7kIzw2DohFxIoxILAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZWJjMjI4NDQtNzBkZS00YWZkLWJmYTEtYTQ3OGYwMTM0MWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/MKD9i0+hU3pIKNGFU3P7DxXUtyEsOGf2j1 wlCCIlZ2x4xg0rOkegn2nbuWgelDFQB7OALqcea0AvSBE3CTv6TWlJpb0rCAzZ/O J9+haWgCMWPhOfnNvDB/zzLYZ7/rLRtaFjJEm9csulvAeQN7mI++QjEMrxZEPNPQ fPHyrBlRqllYAe/Oxb6GMOiQMK1THiNfN1R35WVLS0811wjnlivyLDj1C+L7AKqN vbATpex+c//6brWoB3mYMvCma/GDAkQ5pI1bwgJ9P+rG3tN9/iDxSzpBNVyS4uk9 iGqBajH3xX4FeJk40gJD0Idoz6vUsOv0l7WIKOR5BK15d8z7fwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN0Kkege75PUpPwKMvgnPv+qk4p+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTU0YjFkNGYtOGZhYy0z YTU4LWFkODctYmNkOTlmMjRlODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDpf4QyDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAri90E16kVLDTuhUORPEsQoJHh4x/EqrTW1NpkufRlEsy38K/uGh8e kK1jR5Y34QXj7bO156llhdKXdFpe3ZcVNKqBroHyx4/6ekOavKbmJaf6ILEIxB9C mj4J+SoqAZHTCtcwdcymuQl41RRLZ7nzoFFTLxpOcYKGhotziTwn7FBm5nkJ333F 0XMpNUMBNQkKTo//qsZCpaWsOuxj+zkaRrsfp6wrpby6vhYj+xoD8Ll9pfxF3RiO 3vRsaLEpLYI1eD7Vjps5rVXMYlNjxOPrytudLrgZYDukdere18rUuakGbL1+UbzR X1rKjG97UCIXEKT1qVuTHcyja1AkRsmx -----END CERTIFICATE-----Generated at Thu Sep 3 09:24:19 2026 by rpki-client