$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7cc02203-158d-396c-b655-061c5cbbf221.roa File: 7cc02203-158d-396c-b655-061c5cbbf221.roa (raw, json) Hash identifier: UlmvZ9UkwODb+AR3Vu0BEYwmaXN8mVWX3WNC/iysm1A= Subject key identifier: 3E:35:7D:9B:5C:D0:A3:AB:DF:86:D6:4E:62:17:41:EA:7F:83:17:10 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BDA2B0C69730651D74B37DF60 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7cc02203-158d-396c-b655-061c5cbbf221.roa Signing time: Fri 14 Nov 2025 02:00:30 +0000 ROA not before: Fri 14 Nov 2025 02:00:30 +0000 ROA not after: Thu 12 Feb 2026 02:00:30 +0000 asID: 26004 IP address blocks: 165.254.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:2b:0c:69:73:06:51:d7:4b:37:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 14 02:00:30 2025 GMT Not After : Feb 12 02:00:30 2026 GMT Subject: CN=7b9728dc-d6b0-4392-9d5e-9940ff87e3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:98:fb:57:25:ba:48:75:95:d9:8e:7d:b7: 9c:1f:ed:75:78:af:ee:75:32:d8:5a:95:12:e8:9f: 83:4c:04:f8:52:52:25:29:ad:75:2f:ca:63:5d:fb: f4:78:37:e4:0e:3a:87:7d:cb:c6:6a:c3:79:26:a0: 83:74:5b:79:47:73:ba:ee:c4:bd:b5:53:7c:00:ec: 97:ac:7c:c5:f7:fd:70:de:1f:07:84:40:bd:62:8b: 76:11:3b:60:6e:41:47:0d:72:7e:a9:31:50:c0:2a: 4e:f6:1b:52:63:d4:c4:ee:9a:ce:d5:6b:e3:5d:39: 94:e3:f7:69:8d:af:5a:56:e8:4f:45:dc:e7:60:cd: 87:93:35:34:85:88:b7:5f:83:4f:33:9f:8d:96:0a: 25:70:a7:bc:e6:0b:e0:e9:66:87:4c:01:43:c7:22: 71:2e:1e:1a:32:d6:d4:d1:b4:f4:00:a0:f2:34:38: 5b:8b:d4:38:8c:42:66:61:3d:2e:ec:5b:4e:58:68: ce:45:69:71:90:e4:e1:d1:08:55:59:df:f1:7b:ba: 58:48:a1:7c:86:f7:b5:a4:81:98:08:c0:07:0d:17: 8f:51:29:64:d1:ca:ad:f2:05:87:13:97:5e:21:05: 2c:cc:e8:75:5e:0e:d4:7d:b1:44:21:03:31:fb:34: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:35:7D:9B:5C:D0:A3:AB:DF:86:D6:4E:62:17:41:EA:7F:83:17:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7cc02203-158d-396c-b655-061c5cbbf221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:13:ee:fb:c5:87:b5:db:6e:03:6a:c3:e1:77:2d:d2:9c:ba: 0b:14:90:ba:68:41:8e:8d:bc:44:4e:2f:93:1f:1e:3c:4f:7c: e2:2a:c4:10:ff:74:c1:4d:84:ea:d5:7f:f2:35:9d:69:78:3a: eb:9c:16:ba:51:26:62:a9:e5:db:6b:bf:e8:5d:c5:f5:8a:e1: 6f:af:ec:a6:3a:89:3d:4e:49:56:ca:2b:0f:dd:65:19:48:c3: f8:c1:c1:75:9d:50:7b:92:aa:f6:6e:1a:c4:3d:50:09:25:01: e7:a7:5d:6b:18:61:2e:a2:eb:fc:62:29:73:81:53:b2:09:f0: 67:47:87:e4:e8:48:97:31:24:c1:95:6d:34:1b:90:4b:ac:11: 37:74:19:c6:ee:5b:88:be:6c:9c:65:95:ad:bc:f9:de:0b:5e: 8d:55:a6:f3:72:c8:1a:44:6b:a1:08:cc:e6:f1:4e:30:d7:d6: 57:18:5f:1f:c3:e1:75:23:2a:88:9a:df:0b:6a:9f:9b:b5:65: 38:8d:e3:a6:c1:eb:94:1f:30:fe:f6:e5:c7:8f:3b:8e:cd:f2: 79:89:f2:99:49:b0:c3:9a:b8:d6:c1:50:b3:82:72:ff:0b:bf: ec:fc:cc:4f:57:61:01:8f:07:de:18:42:79:75:01:9d:ff:78: 0b:83:37:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvaKwxpcwZR10s332AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk N2I5NzI4ZGMtZDZiMC00MzkyLTlkNWUtOTk0MGZmODdlM2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1haY+1clukh1ldmOfbecH+11eK/udTLYWpUS 6J+DTAT4UlIlKa11L8pjXfv0eDfkDjqHfcvGasN5JqCDdFt5R3O67sS9tVN8AOyX rHzF9/1w3h8HhEC9Yot2ETtgbkFHDXJ+qTFQwCpO9htSY9TE7prO1WvjXTmU4/dp ja9aVuhPRdznYM2HkzU0hYi3X4NPM5+NlgolcKe85gvg6WaHTAFDxyJxLh4aMtbU 0bT0AKDyNDhbi9Q4jEJmYT0u7FtOWGjORWlxkOTh0QhVWd/xe7pYSKF8hve1pIGY CMAHDRePUSlk0cqt8gWHE5deIQUszOh1Xg7UfbFEIQMx+zTMzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD41fZtc0KOr34bWTmIXQep/gxcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvN2NjMDIyMDMtMTU4ZC0z OTZjLWI2NTUtMDYxYzVjYmJmMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpf7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUT7vvFh7XbbgNqw+F3LdKcugsUkLpoQY6NvEROL5MfHjxPfOIqxBD/ dMFNhOrVf/I1nWl4OuucFrpRJmKp5dtrv+hdxfWK4W+v7KY6iT1OSVbKKw/dZRlI w/jBwXWdUHuSqvZuGsQ9UAklAeenXWsYYS6i6/xiKXOBU7IJ8GdHh+ToSJcxJMGV bTQbkEusETd0GcbuW4i+bJxlla28+d4LXo1VpvNyyBpEa6EIzObxTjDX1lcYXx/D 4XUjKoia3wtqn5u1ZTiN46bB65QfMP725cePO47N8nmJ8plJsMOauNbBULOCcv8L v+z8zE9XYQGPB94YQnl1AZ3/eAuDNzE= -----END CERTIFICATE-----Generated at Sat Nov 15 08:28:03 2025 by rpki-client