$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/adf0ff6f-cc5a-3698-af50-6a48e0b7521f.roa File: adf0ff6f-cc5a-3698-af50-6a48e0b7521f.roa (raw, json) Hash identifier: bZv5tQe5wg0lFYh/Y9569Gex7kThk1UTrUTXMR+U8xg= Subject key identifier: C8:E1:2D:82:12:1D:4C:CB:04:C9:9B:F8:A7:61:15:D6:CC:72:40:27 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AF5214DB588DAC8CA3E39BA40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/adf0ff6f-cc5a-3698-af50-6a48e0b7521f.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 165.254.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4d:b5:88:da:c8:ca:3e:39:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=a295b28a-4dec-4c24-b7a5-57b0a607fd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fd:26:d2:0b:c5:07:f9:cb:0a:5b:75:6a:5f: 40:56:a7:33:24:f3:12:b2:95:b0:1c:c5:1e:e5:18: 33:3b:40:64:df:df:63:cc:f5:9d:1e:02:b3:38:05: 2c:73:33:69:01:f0:d9:3d:66:fb:da:eb:aa:ad:86: 40:62:87:15:2b:fd:a9:f7:97:38:2d:d7:af:0f:5a: 9e:04:54:51:ab:5c:e6:a4:89:c9:fe:02:33:cd:f4: 45:e8:5a:55:a2:fc:d3:0e:0b:a8:f9:af:f9:e1:f9: 7a:84:68:60:9e:88:3a:c8:b6:26:52:5b:0a:a2:ff: cc:12:ce:88:16:48:aa:a8:ae:bf:40:2f:cd:c8:fc: d2:84:11:1c:4f:31:63:4a:a0:bf:e9:8f:15:f8:88: 0d:34:8e:4c:76:e8:81:27:aa:31:c6:fd:19:bf:25: 88:cf:80:a4:d0:d0:a2:1b:e2:5e:4d:55:03:56:29: dc:1e:32:f9:26:ca:28:52:cb:51:96:a9:43:b3:b8: c1:ec:5a:75:b5:90:13:b4:34:d7:14:8e:0c:5d:f6: 42:bb:31:bd:93:ef:0e:03:8f:06:85:84:20:7b:ab: 5b:93:c6:ef:d6:93:61:be:cd:a7:66:3b:51:1c:f0: 92:ed:e9:fd:61:ae:88:0d:6a:74:69:7a:87:24:3a: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E1:2D:82:12:1D:4C:CB:04:C9:9B:F8:A7:61:15:D6:CC:72:40:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/adf0ff6f-cc5a-3698-af50-6a48e0b7521f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:59:bd:e5:a9:2a:cc:ee:eb:5c:77:89:93:67:7c:08:fc:0c: 68:87:11:4b:d6:66:bc:20:27:c7:5c:d4:00:f3:09:fa:67:38: 99:a9:1d:9e:5e:32:5a:a3:43:f0:77:42:90:f3:0f:cc:85:e7: 38:49:0a:cc:0d:1a:95:2b:fb:45:ae:a3:a0:21:b2:2b:dc:47: d4:50:09:ab:a8:66:48:a7:29:03:f3:4c:ff:0a:82:36:b1:0b: 53:db:b8:81:3e:69:9a:8f:26:50:bf:b5:e5:86:70:e3:f5:c3: 89:af:90:58:c2:96:d2:e3:2f:b1:73:09:de:72:8f:31:3f:ba: 84:a5:3d:5a:c1:0d:b6:91:e0:e2:a8:02:09:e5:28:17:b1:ca: 67:80:15:7b:a7:f2:1d:79:7c:8c:17:06:13:84:b7:c8:02:a4: 9c:d7:27:f3:81:8c:a7:af:50:3e:86:1b:f5:02:68:29:a4:a5: ba:0b:fa:99:70:2c:dc:83:a7:3c:9c:05:58:32:d0:2c:c4:11: 6e:d9:e8:d5:6e:df:34:c4:e7:7f:33:6d:93:e7:81:28:18:3e: 5d:d9:e6:77:28:b7:a3:85:7a:c8:5c:65:bb:af:0b:3b:b7:aa: 86:bb:4b:cc:54:b6:40:09:08:48:67:b1:ca:9b:26:a1:c6:3d: af:a2:a4:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IU21iNrIyj45ukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTI5NWIyOGEtNGRlYy00YzI0LWI3YTUtNTdiMGE2MDdmZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP0m0gvFB/nLClt1al9AVqczJPMSspWwHMUe 5RgzO0Bk399jzPWdHgKzOAUsczNpAfDZPWb72uuqrYZAYocVK/2p95c4LdevD1qe BFRRq1zmpInJ/gIzzfRF6FpVovzTDguo+a/54fl6hGhgnog6yLYmUlsKov/MEs6I FkiqqK6/QC/NyPzShBEcTzFjSqC/6Y8V+IgNNI5MduiBJ6oxxv0ZvyWIz4Ck0NCi G+JeTVUDVincHjL5JsooUstRlqlDs7jB7Fp1tZATtDTXFI4MXfZCuzG9k+8OA48G hYQge6tbk8bv1pNhvs2nZjtRHPCS7en9Ya6IDWp0aXqHJDoH0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjhLYISHUzLBMmb+KdhFdbMckAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWRmMGZmNmYtY2M1YS0z Njk4LWFmNTAtNmE0OGUwYjc1MjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf7XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJZveWpKszu61x3iZNnfAj8DGiHEUvWZrwgJ8dc1ADzCfpnOJmpHZ5e MlqjQ/B3QpDzD8yF5zhJCswNGpUr+0Wuo6AhsivcR9RQCauoZkinKQPzTP8Kgjax C1PbuIE+aZqPJlC/teWGcOP1w4mvkFjCltLjL7FzCd5yjzE/uoSlPVrBDbaR4OKo AgnlKBexymeAFXun8h15fIwXBhOEt8gCpJzXJ/OBjKevUD6GG/UCaCmkpboL+plw LNyDpzycBVgy0CzEEW7Z6NVu3zTE538zbZPngSgYPl3Z5ncot6OFeshcZbuvCzu3 qoa7S8xUtkAJCEhnscqbJqHGPa+ipOU= -----END CERTIFICATE-----Generated at Sat Sep 6 01:16:53 2025 by rpki-client