$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8a1de28-459a-32ed-bceb-f9281719f01d.roa File: d8a1de28-459a-32ed-bceb-f9281719f01d.roa (raw, json) Hash identifier: bNts2AhXgdIWZtnmOuC1Fmq04I+7nIb0GvVxpgEEAjQ= Subject key identifier: AF:EF:CC:8A:AF:DB:3F:1A:22:C9:25:6B:59:10:41:A1:D0:38:25:F3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACC83F983449C5C5E75A40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8a1de28-459a-32ed-bceb-f9281719f01d.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 3949 IP address blocks: 165.254.178.64/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c8:3f:98:34:49:c5:c5:e7:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=60202b2c-014c-4a65-b457-d9919c5a5514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1e:fc:44:1a:a1:66:11:1e:1b:34:58:2d:43: f7:5c:19:61:99:64:ee:3c:5f:96:75:54:d5:92:a7: fa:89:e1:c8:ef:91:58:5f:82:e0:90:4d:12:28:91: 2a:0a:de:1d:3f:c1:56:7c:9f:24:27:94:c3:d4:15: 3d:38:40:23:60:5b:51:50:f6:1f:03:61:a2:59:1f: 32:84:fa:c1:a8:5a:15:2a:76:3e:dc:f3:55:d4:e0: f6:ce:9f:c0:76:41:35:94:e8:26:4d:f8:26:90:ad: 82:51:08:12:6a:24:f6:75:6f:c0:0c:13:d8:94:1a: 72:1f:9d:a6:f6:6e:c2:17:57:52:3d:14:68:a6:17: ca:74:12:0e:de:4c:3f:04:d8:bf:35:32:6d:21:19: 23:44:bd:ba:3d:09:22:c4:29:dc:0d:02:13:a0:76: 92:37:71:b1:62:41:09:3a:63:ca:91:b3:29:41:26: 56:94:e8:53:7c:2b:73:62:a7:e8:2c:93:fc:d0:ab: 56:00:32:9e:5e:e9:43:f0:7c:9c:37:3a:42:cf:a9: 48:c8:4e:79:ca:f6:4a:23:16:d8:f4:88:b9:96:32: 57:63:61:f1:d9:ef:ad:26:9f:24:1b:12:b0:56:02: b5:3a:1d:a8:c8:0b:ad:3f:4a:8c:16:15:f4:09:bb: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EF:CC:8A:AF:DB:3F:1A:22:C9:25:6B:59:10:41:A1:D0:38:25:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8a1de28-459a-32ed-bceb-f9281719f01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.178.64/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:17:b7:5b:3d:61:a2:5e:15:be:77:26:7d:be:7c:87:fe:22: 60:63:02:66:b9:ee:58:86:f5:54:be:bf:71:7a:bf:9a:c2:ca: cd:32:29:b4:75:51:ca:10:4e:89:7b:c6:ab:67:24:70:62:f9: 22:4a:95:81:96:81:c8:8a:c2:12:07:87:ba:b8:51:f2:f8:78: a0:24:b3:70:76:96:b8:50:a5:72:9b:96:97:9b:3f:32:3b:2e: 6d:57:00:d0:c0:71:da:e0:c3:18:fc:4a:a3:0a:c4:94:dc:b0: 6b:8d:cd:97:96:e0:44:50:90:9c:80:d9:e4:14:56:c3:9f:a3: 96:13:85:fc:3a:08:23:58:87:c1:10:af:8d:4c:1c:8d:a3:6c: e4:7a:fe:a0:3b:66:08:40:1f:c2:26:aa:da:36:c3:bb:7c:29: 96:4d:18:53:06:d9:83:24:3d:e8:52:46:e9:ac:9b:26:d0:f6: aa:3a:06:20:4c:3b:7f:e0:2a:e9:bb:9f:30:c9:d2:28:22:6c: 03:38:b3:7b:f1:29:2b:4e:be:41:5a:4a:7e:5e:ca:e0:ee:8a: 48:f3:99:a7:f4:e7:8e:24:b8:58:48:1b:4d:73:39:f5:86:d6: 91:53:81:8e:e1:b5:8c:ca:63:06:ea:ba:61:13:de:1c:aa:99: e9:cf:2d:d9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE78rMg/mDRJxcXnWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NjAyMDJiMmMtMDE0Yy00YTY1LWI0NTctZDk5MTljNWE1NTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh78RBqhZhEeGzRYLUP3XBlhmWTuPF+WdVTV kqf6ieHI75FYX4LgkE0SKJEqCt4dP8FWfJ8kJ5TD1BU9OEAjYFtRUPYfA2GiWR8y hPrBqFoVKnY+3PNV1OD2zp/AdkE1lOgmTfgmkK2CUQgSaiT2dW/ADBPYlBpyH52m 9m7CF1dSPRRophfKdBIO3kw/BNi/NTJtIRkjRL26PQkixCncDQIToHaSN3GxYkEJ OmPKkbMpQSZWlOhTfCtzYqfoLJP80KtWADKeXulD8HycNzpCz6lIyE55yvZKIxbY 9Ii5ljJXY2Hx2e+tJp8kGxKwVgK1Oh2oyAutP0qMFhX0CbsSIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK/vzIqv2z8aIskla1kQQaHQOCXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDhhMWRlMjgtNDU5YS0z MmVkLWJjZWItZjkyODE3MTlmMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEpf6yQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB5F7dbPWGiXhW+dyZ9vnyH/iJgYwJmue5YhvVUvr9xer+awsrNMim0 dVHKEE6Je8arZyRwYvkiSpWBloHIisISB4e6uFHy+HigJLNwdpa4UKVym5aXmz8y Oy5tVwDQwHHa4MMY/EqjCsSU3LBrjc2XluBEUJCcgNnkFFbDn6OWE4X8OggjWIfB EK+NTByNo2zkev6gO2YIQB/CJqraNsO7fCmWTRhTBtmDJD3oUkbprJsm0PaqOgYg TDt/4Crpu58wydIoImwDOLN78SkrTr5BWkp+Xsrg7opI85mn9OeOJLhYSBtNczn1 htaRU4GO4bWMymMG6rphE94cqpnpzy3Z -----END CERTIFICATE-----Generated at Fri Sep 25 23:40:28 2026 by rpki-client