$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7b37bfaa-0a94-38d4-b4ec-ad823e736c70.roa File: 7b37bfaa-0a94-38d4-b4ec-ad823e736c70.roa (raw, json) Hash identifier: BLqaSbGVwFvyvb/Idciz9b6wxNJXcnjdFFwNFjN116c= Subject key identifier: 9C:B3:2E:1B:BA:A5:35:4A:41:3B:E0:4B:30:B4:38:C5:D1:58:E8:8F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D086DF68AA68D1018F580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7b37bfaa-0a94-38d4-b4ec-ad823e736c70.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 22691 IP address blocks: 165.254.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:08:6d:f6:8a:a6:8d:10:18:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=9411b065-4b2e-4176-8762-b78777edaac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:78:a4:96:28:2e:0d:42:8a:13:2b:df:30: 67:36:12:ac:2d:71:65:97:dc:f9:5a:77:1a:dd:70: de:88:f4:5e:9a:05:2f:f7:c1:9e:65:9c:85:80:32: 12:5c:d2:2b:2b:33:b4:ee:6b:df:0e:59:99:19:b6: 29:0a:a4:89:ca:81:cc:3f:87:2b:5e:4b:e9:16:82: 39:1a:6e:b3:cd:2d:ec:f9:07:f1:50:12:6a:c0:5e: a6:22:69:c7:f0:a1:5a:8e:39:1b:d4:8f:4c:39:55: 7d:27:62:75:ad:7d:88:88:53:82:42:ff:62:0a:0d: 78:cb:3c:17:77:4d:ed:96:5b:c3:68:c1:6b:24:e5: 39:a3:b8:e4:8d:21:06:b2:a0:5b:28:35:7b:fa:c0: ba:99:fd:e6:40:32:74:d3:e2:53:17:4a:65:0f:50: 1e:b7:4e:6b:15:92:f7:78:51:4c:1a:26:d6:07:81: 86:1c:3a:3d:8f:9c:23:50:d9:0d:7c:ab:32:2d:ff: 42:4f:99:e1:13:cd:11:79:b0:b7:4a:ec:37:b9:5e: 04:01:dd:81:b0:25:a9:01:3f:f5:6a:47:03:d6:32: 14:2d:1f:cf:19:ab:ca:88:b5:46:d2:d3:44:41:3e: f0:03:e2:6a:1d:f1:11:63:a5:a7:72:76:fe:41:aa: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B3:2E:1B:BA:A5:35:4A:41:3B:E0:4B:30:B4:38:C5:D1:58:E8:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7b37bfaa-0a94-38d4-b4ec-ad823e736c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:9f:fa:a1:15:94:6b:a1:3c:df:bc:d4:38:0f:a2:48:3c:f1: bd:49:e4:95:4b:bb:7b:ca:cb:ce:e4:92:d4:ee:69:e6:03:b8: 8c:6e:be:a3:02:0a:89:8a:ea:d4:52:59:48:5f:af:b7:82:a0: 03:3f:58:4e:64:f6:7e:a2:c8:a1:f6:89:21:ac:07:c5:b9:ad: f0:b2:b4:c3:ce:62:fb:fc:5a:b2:35:b6:8d:8b:c8:6d:32:7c: 5d:60:2f:b2:87:2c:9f:d9:78:99:cb:68:a9:fb:53:da:ae:c0: c5:1d:21:e8:ef:21:93:e0:00:da:da:13:9f:90:19:6e:3c:6c: bd:b3:e7:2a:18:68:1b:85:07:95:78:94:46:3e:c4:11:96:1d: c4:41:c5:a4:8c:fd:05:3f:15:7b:04:d4:73:f3:97:8e:3b:9b: b6:00:5e:5e:fd:76:b5:ec:af:bb:07:93:e6:df:a2:cd:6a:8b: 12:70:bc:a1:ce:2e:74:48:39:ec:ba:0c:b2:ab:5f:d8:7e:2e: 82:a0:5a:08:3a:d9:c7:9a:98:42:bb:8e:78:90:93:b8:85:7b: 16:ca:37:e7:26:32:30:db:9a:ac:dc:47:c3:33:1e:51:51:4b: 8d:37:54:7b:52:18:d2:95:ff:1f:b6:02:94:0a:f5:e2:98:9b: cf:a3:53:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQht9oqmjRAY9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTQxMWIwNjUtNGIyZS00MTc2LTg3NjItYjc4Nzc3ZWRhYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzh4pJYoLg1CihMr3zBnNhKsLXFll9z5Wnca 3XDeiPRemgUv98GeZZyFgDISXNIrKzO07mvfDlmZGbYpCqSJyoHMP4crXkvpFoI5 Gm6zzS3s+QfxUBJqwF6mImnH8KFajjkb1I9MOVV9J2J1rX2IiFOCQv9iCg14yzwX d03tllvDaMFrJOU5o7jkjSEGsqBbKDV7+sC6mf3mQDJ00+JTF0plD1Aet05rFZL3 eFFMGibWB4GGHDo9j5wjUNkNfKsyLf9CT5nhE80RebC3Suw3uV4EAd2BsCWpAT/1 akcD1jIULR/PGavKiLVG0tNEQT7wA+JqHfERY6Wncnb+QarzwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyzLhu6pTVKQTvgSzC0OMXRWOiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvN2IzN2JmYWEtMGE5NC0z OGQ0LWI0ZWMtYWQ4MjNlNzM2YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSf+qEVlGuhPN+81DgPokg88b1J5JVLu3vKy87kktTuaeYDuIxuvqMC ComK6tRSWUhfr7eCoAM/WE5k9n6iyKH2iSGsB8W5rfCytMPOYvv8WrI1to2LyG0y fF1gL7KHLJ/ZeJnLaKn7U9quwMUdIejvIZPgANraE5+QGW48bL2z5yoYaBuFB5V4 lEY+xBGWHcRBxaSM/QU/FXsE1HPzl447m7YAXl79drXsr7sHk+bfos1qixJwvKHO LnRIOey6DLKrX9h+LoKgWgg62ceamEK7jniQk7iFexbKN+cmMjDbmqzcR8MzHlFR S403VHtSGNKV/x+2ApQK9eKYm8+jUyk= -----END CERTIFICATE-----Generated at Sun Nov 2 23:49:59 2025 by rpki-client