$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2597be61-7dab-3bf6-9c85-234ddf818e78.roa File: 2597be61-7dab-3bf6-9c85-234ddf818e78.roa (raw, json) Hash identifier: b4OSchDV7YXOVaIJynfFsJs6Tf8lxPLjbOVWVW1XkN8= Subject key identifier: A7:AC:67:BB:28:D1:6D:E4:DE:90:F6:B6:83:86:C0:ED:0C:F8:1E:A9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849FCAA7F84C437C06D72635900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2597be61-7dab-3bf6-9c85-234ddf818e78.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 20940 IP address blocks: 165.254.238.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7f:84:c4:37:c0:6d:72:63:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=ab84ef09-efdb-4718-a683-a1df17a12bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:61:8e:09:91:7a:e8:a4:89:05:99:c6:3f:5b: 60:a3:c7:d8:a0:94:24:66:58:d5:cb:f7:a9:5f:b6: d7:a7:59:06:77:17:a4:70:55:79:2a:e7:f1:6e:f1: 7d:7f:79:d6:5a:c3:44:92:1f:a1:75:61:58:38:14: 38:c4:a4:ae:a1:0c:98:60:3b:0c:e6:e2:9d:1c:6b: 97:57:69:3a:4c:09:7d:75:0f:eb:ca:5b:14:95:a4: e1:07:17:30:dc:89:83:23:a1:73:a3:1a:31:23:16: 25:3b:c3:03:17:e0:c3:8f:c4:76:41:ba:d8:15:53: 33:44:d2:e2:2e:97:3f:95:4b:1e:36:ac:c5:6d:ee: b5:79:77:91:80:f8:ed:58:e9:0d:f9:89:e6:69:d1: 14:d7:78:a3:ea:ab:59:ed:cd:5d:38:ad:c6:68:38: f1:52:fa:59:d9:a6:1f:68:c8:38:16:75:59:a6:03: 16:34:1a:b6:12:ce:e6:d2:cb:b1:ca:98:c2:3f:61: 61:be:e1:7c:f1:0f:44:3f:f7:5a:20:3b:42:f7:74: dc:82:f7:8a:3c:70:85:94:94:be:c0:1d:3f:65:c1: 15:88:12:39:91:5f:ed:36:f9:6f:9e:40:2c:4d:b5: e9:c2:06:97:2a:ac:f1:36:9e:a8:cf:f7:ef:8f:9f: 3d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AC:67:BB:28:D1:6D:E4:DE:90:F6:B6:83:86:C0:ED:0C:F8:1E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2597be61-7dab-3bf6-9c85-234ddf818e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.238.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a3:a6:9e:b5:b5:5f:b3:cf:96:10:84:e2:b8:b2:a9:14:ae: 24:f8:d5:2f:02:e1:05:f9:0f:4e:bb:e5:78:95:e4:13:a8:80: 8d:00:e1:24:d9:99:aa:83:2f:75:0f:57:d4:d3:07:b0:b0:e4: 42:b7:cf:4a:dc:e2:41:55:3a:77:9b:1a:85:58:ea:2c:e9:4e: 79:e7:7e:31:51:19:17:98:c9:e2:fc:85:3f:e5:0a:89:2f:ca: 6a:0a:bb:16:7c:eb:71:d3:cf:e3:ba:8e:c5:3e:a1:17:ff:a3: 2b:15:55:e4:91:17:65:18:64:57:40:e5:1b:34:63:c2:69:99: d4:dd:74:b7:ad:44:33:8d:8e:d6:8d:3d:fa:fe:b2:2f:5a:f0: f2:9b:76:84:bd:39:9c:6d:54:a1:aa:66:2e:a9:78:fe:79:ee: ef:88:5f:b7:25:6c:7c:c7:d2:fa:79:00:eb:08:ea:48:2d:fc: 84:3d:59:b7:8d:c7:d3:64:ae:12:88:e9:ec:14:a3:e9:ea:08: 61:34:dc:20:4e:b9:4c:a6:5d:35:46:7c:9d:3d:9d:e5:ba:8e: 50:e4:48:3d:40:6a:b2:2f:42:e7:59:95:3c:9f:c8:71:be:b2: a8:36:95:05:e4:63:20:0b:39:53:50:1d:91:db:fe:a7:58:98: 7f:63:f2:ba -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn8qn+ExDfAbXJjWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk YWI4NGVmMDktZWZkYi00NzE4LWE2ODMtYTFkZjE3YTEyYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2GOCZF66KSJBZnGP1tgo8fYoJQkZljVy/ep X7bXp1kGdxekcFV5KufxbvF9f3nWWsNEkh+hdWFYOBQ4xKSuoQyYYDsM5uKdHGuX V2k6TAl9dQ/rylsUlaThBxcw3ImDI6FzoxoxIxYlO8MDF+DDj8R2QbrYFVMzRNLi Lpc/lUseNqzFbe61eXeRgPjtWOkN+YnmadEU13ij6qtZ7c1dOK3GaDjxUvpZ2aYf aMg4FnVZpgMWNBq2Es7m0suxypjCP2FhvuF88Q9EP/daIDtC93TcgveKPHCFlJS+ wB0/ZcEViBI5kV/tNvlvnkAsTbXpwgaXKqzxNp6oz/fvj589xwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKesZ7so0W3k3pD2toOGwO0M+B6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjU5N2JlNjEtN2RhYi0z YmY2LTljODUtMjM0ZGRmODE4ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf7ugDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAio6aetbVfs8+WEITiuLKpFK4k+NUvAuEF+Q9Ou+V4leQTqICNAOEk 2Zmqgy91D1fU0wewsORCt89K3OJBVTp3mxqFWOos6U55534xURkXmMni/IU/5QqJ L8pqCrsWfOtx08/juo7FPqEX/6MrFVXkkRdlGGRXQOUbNGPCaZnU3XS3rUQzjY7W jT36/rIvWvDym3aEvTmcbVShqmYuqXj+ee7viF+3JWx8x9L6eQDrCOpILfyEPVm3 jcfTZK4SiOnsFKPp6ghhNNwgTrlMpl01RnydPZ3luo5Q5Eg9QGqyL0LnWZU8n8hx vrKoNpUF5GMgCzlTUB2R2/6nWJh/Y/K6 -----END CERTIFICATE-----Generated at Tue Jul 1 00:35:21 2025 by rpki-client