$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa File: bf541b3f-d38b-3716-affa-7307e218a63b.roa (raw, json) Hash identifier: xaopOXMwkiwwTk0mKxGtG0wUwP2v6ptyAuGzq5pEqfQ= Subject key identifier: 8B:B2:92:0C:57:41:A3:33:D6:B0:B8:A2:E3:C6:6A:ED:54:04:37:64 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B16A1587DF8E810957A73FA60 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 25645 IP address blocks: 165.254.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:58:7d:f8:e8:10:95:7a:73:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=47570dec-0436-418b-b467-2f0b72f44726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:d8:23:9a:c9:8b:6a:51:c6:db:a2:80:dc: 6b:15:96:58:f9:fa:05:7d:e9:a5:88:75:7b:58:23: 3e:87:88:ab:49:4a:1a:9c:42:ad:ec:4f:a4:fc:60: 56:2a:1e:36:9a:d2:8e:1e:0c:c2:70:a6:6a:ed:7b: ce:63:69:5a:48:3c:83:f3:fa:bf:ab:56:72:05:c9: 31:45:b3:07:ce:ae:70:5e:43:cc:ee:54:02:72:c8: a8:94:2c:7d:40:6d:5f:eb:da:41:bb:06:88:89:99: 0b:a4:e2:2c:f6:fb:b4:e9:5e:71:69:0b:3f:cd:0f: e7:52:4b:d0:c4:95:22:48:c8:0d:42:b8:79:dd:25: 1d:c8:2f:b9:b1:2f:18:6e:d3:89:ce:61:70:6b:20: b7:3a:92:6d:a3:3f:1c:e8:44:a8:da:74:2b:60:f7: a9:68:21:aa:1c:c5:8d:66:19:70:38:56:03:e9:6c: d6:5b:db:ff:88:a7:70:19:77:84:7c:15:c2:fa:e4: e1:50:4e:3b:2c:80:ea:f9:9f:cc:c3:7e:0c:b6:33: 1f:54:5c:1b:bd:10:48:85:eb:10:cc:2e:2a:24:f1: aa:ce:3c:f1:6e:92:28:23:90:ac:30:4c:3d:a9:1e: 87:99:86:89:73:35:f7:aa:b0:b6:15:09:f2:f1:6b: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B2:92:0C:57:41:A3:33:D6:B0:B8:A2:E3:C6:6A:ED:54:04:37:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6a:1a:5e:bf:de:91:76:c4:b0:ec:37:60:56:f8:c8:d2:a5: d9:3b:9b:52:15:b3:92:80:3d:d2:d0:8c:76:20:0f:9e:ea:df: 47:1d:ea:43:b8:64:e6:d1:5e:8c:a7:59:73:67:92:02:73:b7: f6:ba:6c:86:1d:2e:b7:07:11:5b:5d:d8:d7:b9:23:ff:f2:68: 7e:16:80:de:4f:b9:19:ad:ab:52:e8:c6:79:61:53:65:22:4b: 59:bd:7d:66:de:1f:dc:f0:66:f0:31:98:f4:13:a4:41:03:f3: af:04:56:16:5a:ea:f0:8a:0d:a3:6e:ec:a9:e0:c2:08:4c:69: d6:7c:41:c9:1d:c8:ef:44:a3:bc:a0:70:b3:b4:77:12:7c:79: d6:6e:75:65:44:f7:2b:a1:d0:f5:b9:a2:07:bd:f5:ce:ec:cc: 97:5c:c0:d5:74:c9:19:14:21:b2:49:b5:4c:06:86:90:4e:a0: 01:d9:bb:4d:43:e0:31:dc:c2:71:6d:c2:00:22:30:92:fb:4e: a8:cd:89:a2:90:85:ea:bb:07:43:10:d3:75:a9:85:27:c9:67: 3f:b3:6e:cb:72:94:13:47:90:5f:3e:6b:05:f2:76:e8:d8:25: da:d7:e9:17:6a:cf:d5:7a:db:05:9f:51:6c:ce:d1:30:36:d0: 01:88:f6:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoVh9+OgQlXpz+mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDc1NzBkZWMtMDQzNi00MThiLWI0NjctMmYwYjcyZjQ0NzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1PYI5rJi2pRxtuigNxrFZZY+foFfemliHV7 WCM+h4irSUoanEKt7E+k/GBWKh42mtKOHgzCcKZq7XvOY2laSDyD8/q/q1ZyBckx RbMHzq5wXkPM7lQCcsiolCx9QG1f69pBuwaIiZkLpOIs9vu06V5xaQs/zQ/nUkvQ xJUiSMgNQrh53SUdyC+5sS8YbtOJzmFwayC3OpJtoz8c6ESo2nQrYPepaCGqHMWN ZhlwOFYD6WzWW9v/iKdwGXeEfBXC+uThUE47LIDq+Z/Mw34MtjMfVFwbvRBIhesQ zC4qJPGqzjzxbpIoI5CsMEw9qR6HmYaJczX3qrC2FQny8WvU9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuykgxXQaMz1rC4ouPGau1UBDdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmY1NDFiM2YtZDM4Yi0z NzE2LWFmZmEtNzMwN2UyMThhNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNqGl6/3pF2xLDsN2BW+MjSpdk7m1IVs5KAPdLQjHYgD57q30cd6kO4 ZObRXoynWXNnkgJzt/a6bIYdLrcHEVtd2Ne5I//yaH4WgN5PuRmtq1LoxnlhU2Ui S1m9fWbeH9zwZvAxmPQTpEED868EVhZa6vCKDaNu7KngwghMadZ8QckdyO9Eo7yg cLO0dxJ8edZudWVE9yuh0PW5oge99c7szJdcwNV0yRkUIbJJtUwGhpBOoAHZu01D 4DHcwnFtwgAiMJL7TqjNiaKQheq7B0MQ03WphSfJZz+zbstylBNHkF8+awXydujY JdrX6Rdqz9V62wWfUWzO0TA20AGI9hI= -----END CERTIFICATE-----Generated at Fri Sep 19 01:25:12 2025 by rpki-client