$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff697245-030c-3fcd-833e-7c0b0f800208.roa File: ff697245-030c-3fcd-833e-7c0b0f800208.roa (raw, json) Hash identifier: kIA5R5OgfEdD+Gf++6ZnfbKnWAHIPGnpw+PjNRPgtq8= Subject key identifier: 3E:B2:20:1B:94:75:BA:C7:5F:A9:A2:DF:8D:5E:20:A3:CB:C5:29:14 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233C64ACBB4BA3C6319930 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff697245-030c-3fcd-833e-7c0b0f800208.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 393490 IP address blocks: 165.254.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3c:64:ac:bb:4b:a3:c6:31:99:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=a8fdb6dd-f608-4963-8648-879708f9c1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:75:96:52:24:6d:92:08:89:17:b9:24:eb:aa: 77:89:a9:fa:c5:17:05:69:99:07:71:c2:46:88:56: 3c:87:93:c6:d7:55:53:88:be:1c:93:fe:a3:6b:a3: d3:31:c9:29:cf:04:cc:15:c7:c3:b6:4f:0d:35:54: 5a:eb:1e:ec:81:19:9e:81:0a:0d:09:3e:49:12:fc: 4a:c2:b6:92:bb:97:61:4f:d3:0a:ca:9e:3d:c8:21: 16:82:0e:3f:b6:ee:50:e8:53:26:0b:e6:98:43:b2: 53:c2:d1:79:11:8d:81:1c:b7:fa:45:e9:b7:02:6b: bd:13:96:24:64:90:6b:3a:3c:76:94:92:8a:56:a0: 25:4c:19:bb:05:1e:ea:7d:0b:e5:96:ae:71:03:3e: 4e:63:14:34:2d:6f:38:55:12:37:be:62:64:f9:2b: a2:7d:fd:ff:1f:af:49:56:d8:ea:1e:e4:ea:5e:ba: 9d:eb:e3:70:63:93:76:5a:f6:18:f7:dc:61:5b:9b: 1a:3e:ce:cd:7c:15:cd:b6:89:ff:2b:d5:ba:1d:6a: d7:a2:66:b2:a8:74:34:a6:d3:03:fb:ac:20:65:0a: 71:8f:23:99:12:b8:8a:c6:9e:70:ac:46:05:a2:eb: 63:97:4e:fe:b6:39:36:2a:4d:60:84:93:a4:24:4f: 46:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B2:20:1B:94:75:BA:C7:5F:A9:A2:DF:8D:5E:20:A3:CB:C5:29:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff697245-030c-3fcd-833e-7c0b0f800208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:cd:ee:86:f8:61:47:8b:15:9d:e2:6a:85:61:d3:83:34:50: e2:5d:fe:fb:82:f0:3b:a3:ca:a9:40:ed:11:53:e3:22:59:4e: 6e:c9:74:3e:2f:87:e7:f3:c5:ee:b0:0d:5d:83:5e:c9:4d:f5: 80:8c:a6:c3:c0:5c:0b:f9:3c:07:d5:6e:c7:b1:4f:05:80:5f: c2:61:b4:8a:59:ca:9d:d4:8a:48:cd:ff:8f:dc:e2:45:a6:b7: 85:16:f8:a7:c6:6d:57:d0:8e:65:47:b8:d7:94:ad:58:ba:75: 97:2c:b3:8d:96:c0:10:5a:22:71:4d:68:5d:dc:08:f0:1b:b7: e0:a7:83:60:1f:a1:84:7d:0e:2f:40:28:4e:e5:37:8e:06:b4: 6e:01:de:8a:07:9c:98:ad:f7:05:5a:b7:c9:12:3e:f6:f0:25: f9:7e:bf:cb:1e:50:c1:ec:a9:a3:47:ab:a9:50:0a:ad:7b:62: 62:3d:6e:0d:a9:25:66:55:bf:71:81:5e:9d:09:a7:4f:73:aa: ca:6f:66:44:01:6a:b1:e9:51:d1:99:0d:8a:dd:75:4e:86:08: 90:d5:e4:5d:cc:9f:42:5e:5c:93:d1:14:27:fb:c6:8a:fa:fa: 5d:97:4a:7f:75:d5:a1:1c:0c:58:9d:80:0d:b5:b9:7b:4c:db: 61:71:64:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzxkrLtLo8YxmTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk YThmZGI2ZGQtZjYwOC00OTYzLTg2NDgtODc5NzA4ZjljMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3WWUiRtkgiJF7kk66p3ian6xRcFaZkHccJG iFY8h5PG11VTiL4ck/6ja6PTMckpzwTMFcfDtk8NNVRa6x7sgRmegQoNCT5JEvxK wraSu5dhT9MKyp49yCEWgg4/tu5Q6FMmC+aYQ7JTwtF5EY2BHLf6Rem3Amu9E5Yk ZJBrOjx2lJKKVqAlTBm7BR7qfQvllq5xAz5OYxQ0LW84VRI3vmJk+Suiff3/H69J VtjqHuTqXrqd6+NwY5N2WvYY99xhW5saPs7NfBXNton/K9W6HWrXomayqHQ0ptMD +6wgZQpxjyOZEriKxp5wrEYFoutjl07+tjk2Kk1ghJOkJE9GtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6yIBuUdbrHX6mi341eIKPLxSkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmY2OTcyNDUtMDMwYy0z ZmNkLTgzM2UtN2MwYjBmODAwMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf51MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7N7ob4YUeLFZ3iaoVh04M0UOJd/vuC8DujyqlA7RFT4yJZTm7JdD4v h+fzxe6wDV2DXslN9YCMpsPAXAv5PAfVbsexTwWAX8JhtIpZyp3UikjN/4/c4kWm t4UW+KfGbVfQjmVHuNeUrVi6dZcss42WwBBaInFNaF3cCPAbt+Cng2AfoYR9Di9A KE7lN44GtG4B3ooHnJit9wVat8kSPvbwJfl+v8seUMHsqaNHq6lQCq17YmI9bg2p JWZVv3GBXp0Jp09zqspvZkQBarHpUdGZDYrddU6GCJDV5F3Mn0JeXJPRFCf7xor6 +l2XSn911aEcDFidgA21uXtM22FxZJI= -----END CERTIFICATE-----Generated at Thu Sep 17 12:12:50 2026 by rpki-client