$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa File: ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa (raw, json) Hash identifier: YkpIUW0Nsdk8oUuCYzrJPNxJUr7/YB341Ik4RllfdZE= Subject key identifier: 9D:8C:A8:64:3A:82:19:79:39:EA:08:F4:15:86:39:A4:4C:49:B7:DA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E2D9F25B00AF43A7E9E9DBEA0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 398202 IP address blocks: 165.254.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:25:b0:0a:f4:3a:7e:9e:9d:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=e8dfecb2-a951-4aa6-b031-56e4aa2ab6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:7f:e6:75:d9:0f:62:bc:2b:56:02:1f:68: 73:82:07:77:26:34:c2:7c:21:aa:3b:2f:54:c6:9b: 99:1f:b3:4d:9d:50:e3:f4:53:d4:fd:b3:e7:64:1a: 7c:75:75:94:db:7b:fe:ec:82:41:ef:51:47:ba:ba: 42:08:8a:43:93:96:64:7a:6a:87:ec:a6:b6:ff:71: 2c:d3:1e:80:e1:58:44:d2:0d:72:b7:34:97:d0:ab: ff:cd:0c:ea:24:76:31:49:be:50:be:12:64:a5:89: a6:f2:74:ab:89:4b:a9:d6:46:5a:55:26:f3:fb:6b: c5:1a:26:3f:df:61:b3:6d:80:8a:98:2f:95:5d:c5: 7f:52:31:4a:73:76:ec:4f:19:d6:de:b5:8d:9a:f5: 9b:f2:d0:fa:0e:9b:0a:60:2b:59:13:70:c9:aa:d5: a6:df:d6:84:57:bb:cd:8c:c8:83:e2:8e:e1:fc:dd: 8b:1c:45:5f:6d:3d:ff:f4:78:f1:af:c8:6d:84:0b: e7:73:9b:34:2f:f9:4e:c2:4e:a6:61:74:08:81:5b: 21:3d:c2:8b:1a:a9:84:05:2a:8b:45:e8:93:a9:36: b7:ce:cf:60:13:16:cc:72:21:bf:c5:fb:df:f7:a3: 6c:a0:f3:47:8d:b0:96:49:f1:2e:0d:ec:43:0b:69: d9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8C:A8:64:3A:82:19:79:39:EA:08:F4:15:86:39:A4:4C:49:B7:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddf82e21-e94f-3127-a442-b9cb77ee6d10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a8:8a:14:31:eb:79:18:69:a4:17:de:f2:96:36:d7:3d:17: 24:39:a1:1c:7b:6c:24:f1:23:fd:07:d0:db:e1:9c:f2:37:df: 80:2a:48:5a:a7:51:45:8f:c8:58:3c:06:e0:a9:44:45:ea:af: 1a:3a:66:4c:38:d2:7c:ba:d8:ab:16:9e:c2:6a:cf:e9:23:df: 3d:6b:ee:bd:ac:08:f1:b1:3c:c7:ce:5f:c3:66:f0:6c:32:47: 8b:d2:a0:d9:73:3e:f3:c1:18:b7:bf:cc:4c:b9:b6:ca:55:f3: 08:3d:05:5a:35:cc:2f:1a:3f:2d:fa:a4:65:dd:8b:26:cf:96: 1f:02:ee:88:0d:cc:b1:7c:c4:46:2c:82:5f:a2:31:52:52:1b: 2b:7d:1e:d7:15:2c:b1:e2:0b:b6:b7:34:01:57:cd:ea:b1:0f: de:98:3a:de:8c:40:ed:e2:81:d9:5e:63:61:cc:86:bd:5e:85: 86:30:e3:cb:e4:01:bf:8c:aa:de:0b:ca:e6:ab:0b:e7:cf:d0: 28:1a:62:aa:4c:fa:be:0a:66:3d:b0:41:44:c9:fd:64:53:2c: ba:fe:cd:c0:be:5a:5e:03:a2:d2:6e:9f:90:70:75:03:bc:0b: d2:dd:ed:e8:a8:1d:db:b2:f5:79:a0:0a:ef:93:67:e2:17:d3: 9d:e9:73:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnyWwCvQ6fp6dvqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk ZThkZmVjYjItYTk1MS00YWE2LWIwMzEtNTZlNGFhMmFiNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqR/5nXZD2K8K1YCH2hzggd3JjTCfCGqOy9U xpuZH7NNnVDj9FPU/bPnZBp8dXWU23v+7IJB71FHurpCCIpDk5ZkemqH7Ka2/3Es 0x6A4VhE0g1ytzSX0Kv/zQzqJHYxSb5QvhJkpYmm8nSriUup1kZaVSbz+2vFGiY/ 32GzbYCKmC+VXcV/UjFKc3bsTxnW3rWNmvWb8tD6DpsKYCtZE3DJqtWm39aEV7vN jMiD4o7h/N2LHEVfbT3/9Hjxr8hthAvnc5s0L/lOwk6mYXQIgVshPcKLGqmEBSqL ReiTqTa3zs9gExbMciG/xfvf96NsoPNHjbCWSfEuDexDC2nZrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2MqGQ6ghl5OeoI9BWGOaRMSbfaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGRmODJlMjEtZTk0Zi0z MTI3LWE0NDItYjljYjc3ZWU2ZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqoihQx63kYaaQX3vKWNtc9FyQ5oRx7bCTxI/0H0NvhnPI334AqSFqn UUWPyFg8BuCpREXqrxo6Zkw40ny62KsWnsJqz+kj3z1r7r2sCPGxPMfOX8Nm8Gwy R4vSoNlzPvPBGLe/zEy5tspV8wg9BVo1zC8aPy36pGXdiybPlh8C7ogNzLF8xEYs gl+iMVJSGyt9HtcVLLHiC7a3NAFXzeqxD96YOt6MQO3igdleY2HMhr1ehYYw48vk Ab+Mqt4LyuarC+fP0CgaYqpM+r4KZj2wQUTJ/WRTLLr+zcC+Wl4DotJun5BwdQO8 C9Ld7eioHduy9XmgCu+TZ+IX053pc0s= -----END CERTIFICATE-----Generated at Thu Jul 16 03:01:24 2026 by rpki-client