$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a9d4cc9-27cb-3c00-9636-84f6b4fda619.roa File: 8a9d4cc9-27cb-3c00-9636-84f6b4fda619.roa (raw, json) Hash identifier: 2xW+AinbKR7x6b483g2OUKkLckkN32QqSUI5dRuT9i8= Subject key identifier: 3E:19:6A:D5:9E:43:C6:BF:90:A0:CB:F3:7D:19:8A:B6:EC:53:0B:C2 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E7634DD4F906B2CAB016D0D40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a9d4cc9-27cb-3c00-9636-84f6b4fda619.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 20940 IP address blocks: 165.254.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:dd:4f:90:6b:2c:ab:01:6d:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=576da650-7523-445b-8b25-989904281b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:19:5c:d4:7e:2b:e8:34:aa:b5:d2:1c:7d: 48:34:3f:51:76:ae:67:8c:4f:53:e5:ac:68:cc:2d: b2:36:e5:b9:7c:19:6f:c1:a7:4f:3c:ff:5a:d5:74: a9:76:35:49:df:a2:fd:0c:4b:7e:35:f4:96:72:78: 02:f4:63:f9:08:e8:5c:78:4d:f2:e6:67:50:44:4e: 71:f4:4d:01:a2:44:98:4e:a0:86:d9:5a:5a:c0:31: ec:91:b9:bc:e6:55:09:e1:12:f7:a4:9e:58:e5:5a: 4a:74:c5:30:c4:ac:c4:d1:f4:ac:b7:07:7c:58:9e: 89:32:7b:b0:21:76:29:f5:1b:d9:21:66:c9:77:4c: 10:4a:a9:cb:b3:e3:bf:07:fe:8e:cb:83:68:98:1a: d3:4d:d8:dd:45:dc:b9:60:36:1a:d2:02:43:25:96: 84:d2:9e:9c:ad:52:44:c1:c6:87:bb:03:eb:14:7a: 0c:a4:85:39:1b:69:8d:35:ce:32:00:8f:a9:8e:58: 49:b1:0f:68:57:c3:be:12:0a:e0:96:1d:ed:3d:e4: f3:1f:0f:93:db:99:20:6e:0e:82:ac:4d:82:e0:3d: ea:0f:18:73:6a:78:7f:08:8d:30:0f:d6:d2:24:d1: 34:57:cf:08:6e:2d:ca:a1:b7:dc:0a:4a:2f:5b:fd: 79:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:19:6A:D5:9E:43:C6:BF:90:A0:CB:F3:7D:19:8A:B6:EC:53:0B:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a9d4cc9-27cb-3c00-9636-84f6b4fda619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:66:13:0a:dc:a5:63:62:34:ef:9f:ed:b5:e4:b6:db:1d:a0: 47:82:54:b1:c0:68:5d:a3:5c:db:61:69:e3:bd:54:3a:81:ae: 43:a8:6d:76:87:84:44:82:b1:3b:e6:74:87:f1:86:12:b6:a3: 25:fb:d9:76:91:82:68:e9:ad:24:1a:d7:ee:40:99:c5:9d:ff: 5a:25:d9:01:8b:19:c4:9c:43:c7:64:e8:bf:51:56:b0:ba:64: a5:8c:c6:31:54:32:5a:fd:eb:66:19:a2:6e:97:33:67:22:b6: e8:0a:24:02:0c:b7:0e:aa:a0:7b:a0:ae:3b:30:6b:6d:d7:79: 5d:47:38:62:99:4d:41:6d:d7:a4:54:ca:8c:65:cc:3d:67:c3: 2e:d0:e3:32:1a:77:ee:d2:7f:57:0f:01:c4:27:ac:6a:02:e1: ca:b0:ed:ff:fb:ac:63:05:dc:62:2c:38:d0:5c:0a:35:ec:51: a0:08:b7:6e:ad:67:cf:68:72:17:45:2c:75:63:2b:72:06:a4: ff:dd:e2:9d:02:aa:24:90:3c:1a:ff:5e:5a:1c:5a:c5:6f:a4: 1a:d8:3c:b6:53:a5:8f:f6:a4:9e:b9:34:e6:33:ea:24:bc:0c: 15:1a:e6:a3:04:55:3c:c8:0c:25:86:35:7a:09:76:c2:8b:38: 98:cb:47:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NN1PkGssqwFtDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk NTc2ZGE2NTAtNzUyMy00NDViLThiMjUtOTg5OTA0MjgxYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1AZXNR+K+g0qrXSHH1IND9Rdq5njE9T5axo zC2yNuW5fBlvwadPPP9a1XSpdjVJ36L9DEt+NfSWcngC9GP5COhceE3y5mdQRE5x 9E0BokSYTqCG2VpawDHskbm85lUJ4RL3pJ5Y5VpKdMUwxKzE0fSstwd8WJ6JMnuw IXYp9RvZIWbJd0wQSqnLs+O/B/6Oy4NomBrTTdjdRdy5YDYa0gJDJZaE0p6crVJE wcaHuwPrFHoMpIU5G2mNNc4yAI+pjlhJsQ9oV8O+Egrglh3tPeTzHw+T25kgbg6C rE2C4D3qDxhzanh/CI0wD9bSJNE0V88Ibi3KobfcCkovW/15HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4ZatWeQ8a/kKDL830ZirbsUwvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGE5ZDRjYzktMjdjYi0z YzAwLTk2MzYtODRmNmI0ZmRhNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1mEwrcpWNiNO+f7bXkttsdoEeCVLHAaF2jXNthaeO9VDqBrkOobXaH hESCsTvmdIfxhhK2oyX72XaRgmjprSQa1+5AmcWd/1ol2QGLGcScQ8dk6L9RVrC6 ZKWMxjFUMlr962YZom6XM2citugKJAIMtw6qoHugrjswa23XeV1HOGKZTUFt16RU yoxlzD1nwy7Q4zIad+7Sf1cPAcQnrGoC4cqw7f/7rGMF3GIsONBcCjXsUaAIt26t Z89ochdFLHVjK3IGpP/d4p0CqiSQPBr/XlocWsVvpBrYPLZTpY/2pJ65NOYz6iS8 DBUa5qMEVTzIDCWGNXoJdsKLOJjLRxA= -----END CERTIFICATE-----Generated at Thu Jul 16 03:03:20 2026 by rpki-client