$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a9d4cc9-27cb-3c00-9636-84f6b4fda619.roa File: 8a9d4cc9-27cb-3c00-9636-84f6b4fda619.roa (raw, json) Hash identifier: 94hreAjI9uRZ3aLVGPxxu3AvxPK1/i4XsCMhq4da5XU= Subject key identifier: D6:10:5B:5E:98:1B:19:A0:B3:61:1F:98:A6:A8:BE:49:B8:C1:74:1B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AF5214DD9529579226A476C40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a9d4cc9-27cb-3c00-9636-84f6b4fda619.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 165.254.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4d:d9:52:95:79:22:6a:47:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=c077d7e8-1216-4a85-b226-d8677366343e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:d5:85:8b:06:d6:e7:6c:e7:fd:56:ae:b2: ae:f7:07:00:fe:04:81:fa:c4:8e:32:80:ff:33:20: 6c:97:56:fc:e1:54:b5:c3:17:46:fb:bd:5d:84:49: e2:d8:b7:d3:71:a6:14:66:df:73:55:e4:78:c2:68: a7:8e:d5:a9:12:c8:1f:d4:fd:bf:76:9a:35:57:f8: db:f0:45:c0:54:c0:ce:51:a0:8d:53:c3:3b:2e:60: c9:30:d4:5a:79:82:05:bd:90:09:d4:bb:20:74:e8: 57:57:17:25:6a:58:3a:1b:4e:79:11:0f:d1:63:d1: 44:8b:87:a8:11:a8:4c:09:71:db:33:da:06:bc:22: 67:90:a4:44:c1:97:1a:57:99:50:83:90:25:ce:8b: 46:fb:38:ce:ad:42:c4:b2:4d:e6:89:ac:e6:97:06: 89:ff:9f:3b:b6:82:ea:9b:6d:bf:ad:d7:67:bd:7c: eb:ec:d5:3b:c0:00:04:a3:af:9b:3b:a3:31:97:e3: 2c:43:e8:5d:e4:3a:eb:13:97:73:56:41:ea:7e:df: 22:32:1f:09:0c:2c:90:97:8c:71:34:0e:d0:61:d5: 43:f9:b8:5e:71:96:eb:db:93:ed:fb:3d:ca:b5:a8: 4e:7f:5e:ca:75:47:f2:eb:57:75:86:a4:4a:ab:09: c8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:10:5B:5E:98:1B:19:A0:B3:61:1F:98:A6:A8:BE:49:B8:C1:74:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a9d4cc9-27cb-3c00-9636-84f6b4fda619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b1:74:04:79:97:a6:e3:f8:bd:3d:5f:bf:b7:36:f4:c9:c1: 9d:cc:0f:d6:66:b8:d9:47:c9:1d:2a:bd:b0:b6:e6:db:11:03: 8a:df:fe:a1:7b:0b:8b:d0:b6:0e:84:89:b8:34:9b:89:40:e7: b5:66:56:93:c5:d1:03:ec:71:8e:0c:3c:e5:84:f8:99:b2:35: b8:78:16:99:46:44:23:c0:06:d6:69:1f:0f:5c:11:b4:6c:17: 27:c9:ef:c9:5a:6f:fd:55:b0:57:5d:89:82:5a:a1:fa:7a:89: 2b:86:25:05:56:82:27:95:a2:a3:15:f2:20:10:d9:ad:ff:3e: 85:e0:7b:25:fa:c2:32:6b:05:5b:77:bf:ed:95:79:92:99:e3: ca:0f:a2:45:c8:f9:27:cd:2e:73:3c:53:3e:f1:04:2d:6b:bf: 71:4a:b3:2a:3c:b6:88:59:a2:8c:bc:11:48:5a:99:c2:35:90: 5e:68:2d:05:8f:87:4c:74:73:e1:d9:8b:20:da:47:09:4a:b7: 60:bf:b9:90:8e:00:f4:c8:a5:25:97:25:0c:b9:32:ad:11:05: 72:3c:18:4b:64:5e:b8:18:35:e8:6e:b1:1b:7a:82:f9:8f:62: ad:a4:d4:da:be:ac:7d:be:bd:a7:bc:a2:a7:49:63:17:9b:f1: a3:64:bd:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IU3ZUpV5ImpHbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzA3N2Q3ZTgtMTIxNi00YTg1LWIyMjYtZDg2NzczNjYzNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNzVhYsG1uds5/1WrrKu9wcA/gSB+sSOMoD/ MyBsl1b84VS1wxdG+71dhEni2LfTcaYUZt9zVeR4wminjtWpEsgf1P2/dpo1V/jb 8EXAVMDOUaCNU8M7LmDJMNRaeYIFvZAJ1LsgdOhXVxclalg6G055EQ/RY9FEi4eo EahMCXHbM9oGvCJnkKREwZcaV5lQg5AlzotG+zjOrULEsk3miazmlwaJ/587toLq m22/rddnvXzr7NU7wAAEo6+bO6Mxl+MsQ+hd5DrrE5dzVkHqft8iMh8JDCyQl4xx NA7QYdVD+bhecZbr25Pt+z3KtahOf17KdUfy61d1hqRKqwnIKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYQW16YGxmgs2EfmKaovkm4wXQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGE5ZDRjYzktMjdjYi0z YzAwLTk2MzYtODRmNmI0ZmRhNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaxdAR5l6bj+L09X7+3NvTJwZ3MD9ZmuNlHyR0qvbC25tsRA4rf/qF7 C4vQtg6Eibg0m4lA57VmVpPF0QPscY4MPOWE+JmyNbh4FplGRCPABtZpHw9cEbRs FyfJ78lab/1VsFddiYJaofp6iSuGJQVWgieVoqMV8iAQ2a3/PoXgeyX6wjJrBVt3 v+2VeZKZ48oPokXI+SfNLnM8Uz7xBC1rv3FKsyo8tohZooy8EUhamcI1kF5oLQWP h0x0c+HZiyDaRwlKt2C/uZCOAPTIpSWXJQy5Mq0RBXI8GEtkXrgYNehusRt6gvmP Yq2k1Nq+rH2+vae8oqdJYxeb8aNkvYw= -----END CERTIFICATE-----Generated at Sat Sep 6 01:19:28 2025 by rpki-client