$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6b396c8-4e68-3290-98cc-6d3add02bcdd.roa File: f6b396c8-4e68-3290-98cc-6d3add02bcdd.roa (raw, json) Hash identifier: 1JmSh3sx/1EXwDl0CMHYpV3CeXWBXc/qvd7WS+ZA/fg= Subject key identifier: 55:63:AF:7C:22:79:6C:68:58:2C:B9:03:52:1D:20:5C:E8:4C:97:87 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F02422B9DE7DDBFFA8C79AC00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6b396c8-4e68-3290-98cc-6d3add02bcdd.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 20940 IP address blocks: 165.254.237.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:2b:9d:e7:dd:bf:fa:8c:79:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=b4db30ed-818e-4a8e-b2f4-7a9e579326af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d5:9a:fd:38:0b:a3:44:12:d4:2d:d2:67:5f: c0:49:ee:10:07:26:35:51:f2:a0:33:75:6b:56:e0: 5e:8a:bc:ad:0b:bf:c0:e2:8c:e3:e7:15:e6:33:22: 49:18:e3:3a:16:33:1a:23:17:6c:e7:02:27:86:97: ce:d9:f5:ff:6b:26:0d:08:4c:c4:ca:fa:66:ba:e3: 3b:70:96:24:b2:83:b0:4c:46:50:02:d6:e5:14:4f: 92:26:49:d3:47:b0:dd:3b:35:f7:95:04:d0:69:01: f5:65:1d:a6:d1:59:8e:54:7d:92:e4:0f:82:79:53: 3e:dc:6b:98:5d:34:0e:0d:21:df:83:70:59:70:32: a3:c2:ed:0c:c9:d8:da:0c:1b:1c:ce:d0:a1:a0:a4: 52:74:30:89:ee:c3:98:5c:b8:ee:a6:d3:1c:ed:d1: bc:55:19:11:a7:52:ad:30:48:c5:3a:dc:7c:75:bd: ad:7d:33:5f:1e:53:28:51:a0:1f:f0:f6:a0:bf:05: 17:6d:fb:a4:cb:8a:df:e8:30:b5:9d:86:1f:ac:51: 27:ee:44:a9:57:6c:60:16:63:e5:e7:10:54:d6:c7: d0:a6:8a:21:a2:6b:31:a4:8e:ab:70:f6:10:9c:58: 72:da:c2:5f:d8:ae:20:a8:c4:cc:f6:95:a9:b0:5b: 06:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:63:AF:7C:22:79:6C:68:58:2C:B9:03:52:1D:20:5C:E8:4C:97:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6b396c8-4e68-3290-98cc-6d3add02bcdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.237.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:d4:81:32:a3:ef:6a:35:7a:7a:fe:2a:b7:cf:c7:76:a4:e7: a7:f9:7f:57:5c:87:5b:dd:d4:b2:fc:c6:a4:d4:c8:51:88:e6: a0:4d:90:d4:1e:61:9a:df:81:72:89:60:d4:4f:ad:a1:f3:55: 00:1f:95:83:63:04:d4:71:78:09:5c:ae:a3:96:03:f3:c6:62: 14:d1:85:54:d3:93:52:f3:c1:81:12:17:ff:9b:4c:bd:fa:75: fb:e6:14:4b:13:cb:34:67:12:75:6b:a6:4f:02:20:48:0b:5b: 6b:25:0a:7f:2f:39:25:8d:f8:62:8b:02:9d:90:25:71:65:59: 52:62:b5:73:c5:1e:79:d2:ef:55:84:3e:c8:76:ce:7e:dd:a5: 21:f7:5e:f5:6f:f6:87:68:b2:6f:df:2e:6a:9a:ae:e0:9e:29: 1c:cd:0f:64:22:f8:fc:f4:b3:e3:2d:98:9d:48:04:b8:c4:81: e4:7d:e8:77:50:4d:89:8f:01:fd:74:8b:32:c2:ff:62:76:9e: 8c:ef:48:9c:0a:7a:08:ab:c3:3e:32:8f:a6:64:9c:9e:ea:a7: 48:71:42:af:29:37:71:49:2b:f1:18:8b:eb:4e:b1:1d:62:9c: 03:fc:61:62:58:fc:fd:e6:60:1d:8d:32:4f:6a:e7:7d:6c:1b: fc:62:f9:2b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8CQiud592/+ox5rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YjRkYjMwZWQtODE4ZS00YThlLWIyZjQtN2E5ZTU3OTMyNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdWa/TgLo0QS1C3SZ1/ASe4QByY1UfKgM3Vr VuBeirytC7/A4ozj5xXmMyJJGOM6FjMaIxds5wInhpfO2fX/ayYNCEzEyvpmuuM7 cJYksoOwTEZQAtblFE+SJknTR7DdOzX3lQTQaQH1ZR2m0VmOVH2S5A+CeVM+3GuY XTQODSHfg3BZcDKjwu0MydjaDBscztChoKRSdDCJ7sOYXLjuptMc7dG8VRkRp1Kt MEjFOtx8db2tfTNfHlMoUaAf8PagvwUXbfuky4rf6DC1nYYfrFEn7kSpV2xgFmPl 5xBU1sfQpoohomsxpI6rcPYQnFhy2sJf2K4gqMTM9pWpsFsG4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFVjr3wieWxoWCy5A1IdIFzoTJeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjZiMzk2YzgtNGU2OC0z MjkwLTk4Y2MtNmQzYWRkMDJiY2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf7tgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC41IEyo+9qNXp6/iq3z8d2pOen+X9XXIdb3dSy/Mak1MhRiOagTZDU HmGa34FyiWDUT62h81UAH5WDYwTUcXgJXK6jlgPzxmIU0YVU05NS88GBEhf/m0y9 +nX75hRLE8s0ZxJ1a6ZPAiBIC1trJQp/LzkljfhiiwKdkCVxZVlSYrVzxR550u9V hD7Ids5+3aUh9171b/aHaLJv3y5qmq7gnikczQ9kIvj89LPjLZidSAS4xIHkfeh3 UE2JjwH9dIsywv9idp6M70icCnoIq8M+Mo+mZJye6qdIcUKvKTdxSSvxGIvrTrEd YpwD/GFiWPz95mAdjTJPaud9bBv8Yvkr -----END CERTIFICATE-----Generated at Thu Sep 3 08:29:15 2026 by rpki-client