$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa File: ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa (raw, json) Hash identifier: 1obcaq9iBCz6q8GzGJz1R36GgXzXNICo6nqcQmijq4U= Subject key identifier: 54:D3:13:D0:28:7B:EB:49:12:C5:B4:5A:85:EC:57:24:F2:79:00:D8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584ED001F2FFF09F0766BE80B500 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 398202 IP address blocks: 165.254.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f2:ff:f0:9f:07:66:be:80:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=50c789b8-af7d-4049-9c25-5cff96be6233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:83:cb:f0:7f:a2:c2:ce:8b:e1:a0:66:46: 8f:70:0d:b0:0f:3f:5c:f4:e3:70:dc:8c:a0:16:1e: c5:80:5a:41:d6:b1:d9:8f:65:5b:01:9b:c6:fb:e5: 56:09:1d:ba:c3:58:2c:7a:1e:2d:e0:52:13:a6:0a: 44:33:c6:fd:de:22:33:eb:3d:b1:07:17:7a:ec:64: 3f:41:1c:78:7d:eb:28:bb:65:d9:63:fa:28:67:59: c2:e9:23:7c:60:b4:25:50:ed:9f:46:81:04:b1:6e: 09:ab:e0:f8:09:90:4f:a6:b4:32:86:77:0a:be:09: c6:80:aa:f4:36:94:32:d4:ec:5c:2e:7d:58:21:4d: 74:ec:9b:42:3b:bb:cb:ca:5f:4c:67:18:ee:8f:54: e5:04:1f:8c:76:ea:a0:a9:ff:88:e9:44:34:05:33: 70:1b:83:b5:b7:11:c7:96:bd:bc:0a:eb:fc:a5:05: 2a:8a:40:42:b3:05:e2:30:d3:8b:ab:a0:f2:12:45: 04:92:df:1a:ad:da:fa:81:d5:14:09:fc:fa:da:1a: ab:93:59:94:7d:08:c7:c1:15:6b:6a:dc:09:cc:9c: 9d:3e:57:d1:44:38:88:63:3b:f1:2c:79:bd:4b:f8: f7:ac:8c:ac:58:86:80:8f:fa:7e:3f:6e:b5:f9:0f: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D3:13:D0:28:7B:EB:49:12:C5:B4:5A:85:EC:57:24:F2:79:00:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:91:3e:eb:91:d1:be:ca:33:44:3f:53:4e:28:8b:42:54:c1: d4:d8:73:98:cd:62:80:7d:f5:a3:a0:3e:09:b1:c1:35:ed:26: 7c:aa:40:df:cb:07:71:a6:62:8c:58:7c:03:53:99:b4:f7:de: 3e:b7:ae:f0:1b:d3:cb:70:b2:e7:eb:1e:fa:f3:c1:ac:34:be: 42:d4:d2:2f:a7:27:dc:e0:fa:62:69:a1:af:85:10:16:c8:a4: d3:80:06:75:72:a7:83:b6:a3:af:b6:88:7c:11:6a:87:03:70: 35:d2:1e:e6:bf:09:a2:a0:10:39:dd:08:a0:60:79:53:6a:1d: 47:65:62:ea:1b:5c:0e:a4:e7:17:ae:25:20:90:9e:9e:34:c0: e5:ee:0f:8e:e6:09:e7:c4:8b:ef:88:21:d5:70:eb:97:0d:01: e6:0a:f5:8f:6a:b2:dd:59:a7:5b:b7:b4:d6:6d:00:01:76:44: 9b:3f:9d:46:5d:58:77:6a:62:3a:4e:e0:3a:2e:46:c3:bc:e8: 53:0c:6b:24:f8:00:c9:c7:15:64:b1:f3:5a:2b:3e:04:92:8f: 2c:79:3a:00:f0:e1:b2:93:f7:d1:82:24:5c:a7:8c:b3:88:ef: e8:cb:80:6f:8e:35:4e:ca:ca:63:cf:bd:3d:7f:85:18:9a:e6: 86:8b:d5:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfL/8J8HZr6AtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NTBjNzg5YjgtYWY3ZC00MDQ5LTljMjUtNWNmZjk2YmU2MjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnSDy/B/osLOi+GgZkaPcA2wDz9c9ONw3Iyg Fh7FgFpB1rHZj2VbAZvG++VWCR26w1gseh4t4FITpgpEM8b93iIz6z2xBxd67GQ/ QRx4fesou2XZY/ooZ1nC6SN8YLQlUO2fRoEEsW4Jq+D4CZBPprQyhncKvgnGgKr0 NpQy1OxcLn1YIU107JtCO7vLyl9MZxjuj1TlBB+Mduqgqf+I6UQ0BTNwG4O1txHH lr28Cuv8pQUqikBCswXiMNOLq6DyEkUEkt8ardr6gdUUCfz62hqrk1mUfQjHwRVr atwJzJydPlfRRDiIYzvxLHm9S/j3rIysWIaAj/p+P261+Q/XqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTTE9Aoe+tJEsW0WoXsVyTyeQDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGRmODJlMjEtZTk0Zi0z MTI3LWE0NDItYjljYjc3ZWU2ZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqRPuuR0b7KM0Q/U04oi0JUwdTYc5jNYoB99aOgPgmxwTXtJnyqQN/L B3GmYoxYfANTmbT33j63rvAb08twsufrHvrzwaw0vkLU0i+nJ9zg+mJpoa+FEBbI pNOABnVyp4O2o6+2iHwRaocDcDXSHua/CaKgEDndCKBgeVNqHUdlYuobXA6k5xeu JSCQnp40wOXuD47mCefEi++IIdVw65cNAeYK9Y9qst1Zp1u3tNZtAAF2RJs/nUZd WHdqYjpO4DouRsO86FMMayT4AMnHFWSx81orPgSSjyx5OgDw4bKT99GCJFynjLOI 7+jLgG+ONU7KymPPvT1/hRia5oaL1cQ= -----END CERTIFICATE-----Generated at Thu Sep 3 09:23:50 2026 by rpki-client