$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9378aadf-33bd-3a99-820a-36e781e6798a.roa File: 9378aadf-33bd-3a99-820a-36e781e6798a.roa (raw, json) Hash identifier: slp0sy7oc0c1gBzb6o1DTKM4PifGe6PJ6sglyNIxubQ= Subject key identifier: 5B:38:5E:C7:3E:CA:4D:EC:F3:EA:41:8C:A4:0D:00:9F:9C:A8:03:34 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E5A4A20F1566B290735B86CE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9378aadf-33bd-3a99-820a-36e781e6798a.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 22691 IP address blocks: 165.254.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:20:f1:56:6b:29:07:35:b8:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=98501e7f-f691-401d-9df7-00432c0ef0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:e4:c0:3b:b9:ad:b0:99:0e:3f:6b:36:ca: 4e:d3:28:6e:d9:15:89:16:c6:83:59:de:bc:df:ce: 10:b0:02:17:9b:e7:33:a4:9f:41:1f:c9:08:c2:29: 56:e5:79:5f:69:db:52:4f:00:39:22:da:7d:42:c6: 7c:af:cf:26:c4:d2:16:27:65:df:d9:11:62:d0:60: 57:f6:fc:3c:bf:a5:d8:40:6f:8e:ee:6d:c7:48:b7: 13:40:2c:46:26:9c:a5:ac:dc:07:a5:79:89:00:16: a4:d8:ed:7e:84:92:c1:9e:5b:a0:e1:1b:ee:af:b9: c1:32:bc:8a:f1:6d:8d:f8:38:f6:a0:ad:47:3f:6c: 87:d4:f0:6f:97:1d:2a:c6:56:59:e3:30:0f:ea:fa: 64:7d:64:91:23:ec:c7:a1:b7:77:13:59:3d:49:41: 48:a0:9d:c7:d1:43:77:fa:cb:04:5f:42:4a:57:fa: 02:86:22:9d:ea:11:bb:fc:d5:2d:9b:3a:a6:14:3b: 73:9c:4f:e3:ea:18:22:e3:ad:33:9e:0e:ce:5b:c5: e4:09:13:7f:a3:16:f0:2d:0a:7d:0f:f9:34:12:16: 4c:f3:37:f1:31:09:c5:a9:1e:79:eb:66:ba:39:07: 36:c9:12:04:74:da:01:9a:29:1a:fa:5f:a4:9b:56: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:38:5E:C7:3E:CA:4D:EC:F3:EA:41:8C:A4:0D:00:9F:9C:A8:03:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9378aadf-33bd-3a99-820a-36e781e6798a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:83:db:9c:dc:22:93:a0:f0:65:63:1e:1b:a5:2f:10:bf:9b: e4:86:24:8e:88:fc:86:18:21:c8:53:a6:46:32:5b:ba:5b:46: 18:1c:c6:3e:c4:66:07:7e:a3:e5:ca:83:d0:09:f6:be:40:b5: ca:35:d3:d8:d5:1e:12:ef:b8:39:a5:04:75:bb:5e:23:fe:3f: 95:6f:c5:9c:27:f9:05:61:63:19:ab:07:28:ed:20:06:60:da: d4:7a:72:d1:2a:c6:a7:c2:c2:af:a6:60:03:fa:96:49:d7:7d: 8c:a0:f4:02:cf:26:f2:3d:c7:d3:32:26:3f:11:fe:41:e0:08: 99:17:00:c7:3a:74:8a:f9:c2:06:c5:57:98:15:de:55:04:81: 7d:27:d7:5d:38:ee:b6:ef:d8:58:24:3c:f8:50:63:c0:ac:e4: 4a:3c:ea:82:82:d5:08:b0:90:c4:e5:47:a1:d9:a9:4d:68:98: 9f:ff:ec:41:26:0f:fe:13:43:26:9b:20:ad:de:c5:57:53:36: f6:c8:8d:9a:26:f4:bf:cd:99:7b:79:76:e6:ef:40:66:c8:76: b3:05:24:58:6e:90:5c:3e:bb:17:31:dd:3f:49:ea:df:c5:8f: f5:b3:ad:b9:0e:25:af:88:a7:bd:97:c4:5f:3e:bf:00:1a:d1: 2c:d4:93:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSiDxVmspBzW4bOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk OTg1MDFlN2YtZjY5MS00MDFkLTlkZjctMDA0MzJjMGVmMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtjkwDu5rbCZDj9rNspO0yhu2RWJFsaDWd68 384QsAIXm+czpJ9BH8kIwilW5XlfadtSTwA5Itp9QsZ8r88mxNIWJ2Xf2RFi0GBX 9vw8v6XYQG+O7m3HSLcTQCxGJpylrNwHpXmJABak2O1+hJLBnlug4Rvur7nBMryK 8W2N+Dj2oK1HP2yH1PBvlx0qxlZZ4zAP6vpkfWSRI+zHobd3E1k9SUFIoJ3H0UN3 +ssEX0JKV/oChiKd6hG7/NUtmzqmFDtznE/j6hgi460zng7OW8XkCRN/oxbwLQp9 D/k0EhZM8zfxMQnFqR5562a6OQc2yRIEdNoBmika+l+km1bVkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFs4Xsc+yk3s8+pBjKQNAJ+cqAM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTM3OGFhZGYtMzNiZC0z YTk5LTgyMGEtMzZlNzgxZTY3OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaD25zcIpOg8GVjHhulLxC/m+SGJI6I/IYYIchTpkYyW7pbRhgcxj7E Zgd+o+XKg9AJ9r5Atco109jVHhLvuDmlBHW7XiP+P5VvxZwn+QVhYxmrByjtIAZg 2tR6ctEqxqfCwq+mYAP6lknXfYyg9ALPJvI9x9MyJj8R/kHgCJkXAMc6dIr5wgbF V5gV3lUEgX0n11047rbv2FgkPPhQY8Cs5Eo86oKC1QiwkMTlR6HZqU1omJ//7EEm D/4TQyabIK3exVdTNvbIjZom9L/NmXt5dubvQGbIdrMFJFhukFw+uxcx3T9J6t/F j/WzrbkOJa+Ip72XxF8+vwAa0SzUk/k= -----END CERTIFICATE-----Generated at Thu Jul 16 03:06:24 2026 by rpki-client