$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/18a4173c-5e7c-306c-be47-3528f8b9f328.roa File: 18a4173c-5e7c-306c-be47-3528f8b9f328.roa (raw, json) Hash identifier: xyyTgEI03V+c/nQRG/gHQ+CC+ZcCdzg+AF3C2z6eH2g= Subject key identifier: DB:F1:51:F8:7C:64:2F:35:53:E1:10:76:C2:AE:6F:BA:F4:46:E2:E9 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F43285849B9AA00E38DBCC521AF9CAA00 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/18a4173c-5e7c-306c-be47-3528f8b9f328.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 396982 IP address blocks: 165.85.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:00:e3:8d:bc:c5:21:af:9c:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=aea31f8d-d8b7-450c-9123-91e4a5e6387b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:5f:ae:e5:6a:c5:57:42:81:00:15:43:cc: c1:4c:60:c9:d3:2d:e3:9b:03:22:42:2d:8b:98:91: 7d:14:39:85:45:cf:05:64:d7:16:20:69:80:a9:3f: ff:2b:76:80:0d:e1:7f:93:93:28:64:be:dc:8a:13: 52:4a:2b:49:c2:5b:8b:15:12:bb:eb:a7:e5:a9:6b: fe:c3:fa:e7:32:02:18:ba:ca:a2:e0:cb:6d:d0:a5: 61:5d:95:08:84:b7:ca:6b:3d:fe:54:bc:7f:29:81: 37:97:e8:80:e4:0e:de:cf:83:0e:43:fc:1e:fd:79: 72:56:fd:db:23:73:b2:2b:21:62:b0:af:96:95:42: a6:4a:78:e8:50:90:2d:a4:e3:9f:f8:73:bc:dd:3d: 32:44:5d:98:94:5a:4d:6a:cd:88:68:ad:70:ac:5e: 45:78:ea:31:73:69:ca:e8:01:69:af:d1:45:1f:aa: 42:b0:d9:0e:eb:1b:28:3d:ab:f0:f1:fd:21:c2:46: 43:83:a7:9d:a6:84:74:13:3f:bf:ff:27:6c:52:ff: e4:98:00:37:79:08:aa:fe:2f:87:38:51:8e:34:75: ec:9d:08:e0:5f:ef:d0:a5:2e:51:db:85:d9:4a:80: 6b:fa:9f:7f:6b:f8:9f:8b:40:0c:5c:6c:ef:1e:f2: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F1:51:F8:7C:64:2F:35:53:E1:10:76:C2:AE:6F:BA:F4:46:E2:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/18a4173c-5e7c-306c-be47-3528f8b9f328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 165.85.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:58:a4:25:b1:8d:e7:53:19:ba:8e:6b:4e:32:c6:17:c0:8e: 7f:62:bb:c4:89:b6:91:fa:6c:c3:2c:89:c2:69:58:61:89:e8: ce:ea:82:23:52:d1:01:79:72:59:07:be:1d:53:1e:14:1a:67: f5:70:8f:97:25:ee:37:d7:f0:c7:30:12:28:ca:f9:d0:d5:25: f1:6e:7d:9e:fa:9e:1e:87:30:40:b0:62:44:ca:02:27:40:92: 11:c1:16:55:c7:7c:28:09:b9:26:8a:93:87:e6:aa:08:7c:88: 88:a6:3a:fd:45:0b:b9:ce:d7:86:06:49:9d:da:d2:0a:3c:57: af:26:48:ec:bc:d7:ab:da:b7:4c:de:a4:de:d8:d7:de:ae:7b: 51:cb:3b:c2:05:a8:9b:28:92:e6:07:fc:e0:d6:59:09:bb:3a: 3e:e8:60:20:13:d8:0a:54:45:85:04:53:c7:d9:d6:33:5f:8e: b3:b1:37:19:84:2e:38:2d:97:84:52:27:a0:46:70:47:8c:d8: ea:55:ff:0e:63:43:31:a8:39:d3:3f:de:4a:69:6d:f6:82:39: 6c:4b:48:6c:56:d7:35:04:b8:1b:b0:9c:c8:05:72:c0:25:0d: 9f:37:b4:dc:6c:bd:88:71:fb:03:c4:b7:96:cc:e5:68:e3:c7: 51:a0:eb:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgDjjbzFIa+cqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk YWVhMzFmOGQtZDhiNy00NTBjLTkxMjMtOTFlNGE1ZTYzODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDNfruVqxVdCgQAVQ8zBTGDJ0y3jmwMiQi2L mJF9FDmFRc8FZNcWIGmAqT//K3aADeF/k5MoZL7cihNSSitJwluLFRK766flqWv+ w/rnMgIYusqi4Mtt0KVhXZUIhLfKaz3+VLx/KYE3l+iA5A7ez4MOQ/we/XlyVv3b I3OyKyFisK+WlUKmSnjoUJAtpOOf+HO83T0yRF2YlFpNas2IaK1wrF5FeOoxc2nK 6AFpr9FFH6pCsNkO6xsoPavw8f0hwkZDg6edpoR0Ez+//ydsUv/kmAA3eQiq/i+H OFGONHXsnQjgX+/QpS5R24XZSoBr+p9/a/ifi0AMXGzvHvKsSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvxUfh8ZC81U+EQdsKub7r0RuLpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMThhNDE3M2MtNWU3Yy0z MDZjLWJlNDctMzUyOGY4YjlmMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApVX9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdYpCWxjedTGbqOa04yxhfAjn9iu8SJtpH6bMMsicJpWGGJ6M7qgiNS 0QF5clkHvh1THhQaZ/Vwj5cl7jfX8McwEijK+dDVJfFufZ76nh6HMECwYkTKAidA khHBFlXHfCgJuSaKk4fmqgh8iIimOv1FC7nO14YGSZ3a0go8V68mSOy816vat0ze pN7Y196ue1HLO8IFqJsokuYH/ODWWQm7Oj7oYCAT2ApURYUEU8fZ1jNfjrOxNxmE Ljgtl4RSJ6BGcEeM2OpV/w5jQzGoOdM/3kppbfaCOWxLSGxW1zUEuBuwnMgFcsAl DZ83tNxsvYhx+wPEt5bM5Wjjx1Gg62w= -----END CERTIFICATE-----Generated at Mon May 5 14:27:43 2025 by rpki-client