$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d9b878f-26f6-3527-969c-2bb3f4921e48.roa File: 3d9b878f-26f6-3527-969c-2bb3f4921e48.roa (raw, json) Hash identifier: 1Yx7T432Kv6F24rFHxUcBxrxI3xX0jH6eydmu4a4CYA= Subject key identifier: 8E:12:76:12:88:28:3C:02:94:0B:41:87:5C:F2:44:B0:EF:E9:3E:1C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849CE9A65EF6127EA035A9FCA80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d9b878f-26f6-3527-969c-2bb3f4921e48.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 35885 IP address blocks: 165.254.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:65:ef:61:27:ea:03:5a:9f:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=d43a4183-eac7-41fe-b0b1-18cf7020e1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:60:10:4c:77:76:fa:53:54:b4:87:6a:8a: 47:a2:b5:23:c8:b9:2d:59:e8:ff:9f:cc:26:f4:fc: 86:d7:e9:05:b6:03:0f:d5:0a:71:c8:a0:eb:35:90: 76:10:35:dc:3c:b5:8c:5b:db:01:16:15:2b:bf:a0: 80:df:b6:ad:bc:f7:e6:74:4a:29:0a:5c:ed:44:c2: 80:d2:bc:2c:12:ee:46:71:30:41:1e:f1:7e:91:13: 19:f6:83:54:01:fc:cc:5f:7a:c3:26:db:10:58:7c: 24:ab:e8:2d:0d:2e:93:e7:ef:fb:dc:d9:4b:bc:22: b1:ba:1f:34:17:22:da:fe:2e:11:33:85:c4:7a:59: 5c:ba:91:27:93:cd:b2:a3:58:14:3f:d0:7d:39:52: c6:36:df:29:cc:c4:11:e8:f2:f7:e0:a3:b7:61:5b: ad:37:91:f7:bf:41:fc:b6:b5:b9:70:52:69:8d:b5: 19:73:8c:76:8a:d1:8f:5f:6f:00:e2:b5:ea:74:c6: 11:f1:74:ce:e2:a9:da:b9:e8:3f:87:08:b3:40:a2: c4:f9:6f:b9:00:f0:3b:57:b1:0e:de:21:a7:2d:5f: 4e:2a:ee:88:d5:2a:bc:f0:c8:27:5f:f8:c6:bb:ca: 1f:f5:39:7e:fc:33:57:18:63:13:67:e8:79:e1:b7: 03:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:12:76:12:88:28:3C:02:94:0B:41:87:5C:F2:44:B0:EF:E9:3E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d9b878f-26f6-3527-969c-2bb3f4921e48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:36:02:f9:be:b0:01:48:90:6a:06:05:c8:ad:a7:cf:4b:d0: 0e:44:0e:62:9d:55:9f:3e:49:e8:82:4f:a6:20:47:02:4b:d5: ba:39:90:03:b3:22:8c:b7:b7:78:15:d6:d9:68:13:9e:64:d4: 3f:5c:8c:50:65:d3:4c:0a:58:75:d7:22:4c:c6:bc:99:ed:65: 9d:08:22:16:e1:8e:a4:1a:2a:9e:6e:23:de:63:7b:95:e6:0e: 88:f5:e6:f4:2a:81:65:a9:e8:08:12:91:a4:48:54:73:04:ca: ab:56:ad:2b:0b:22:c0:3a:3a:4c:d5:72:d4:20:7d:a4:bf:41: 07:9a:b7:76:e9:82:6a:ff:57:6d:5d:0f:3e:fa:b7:bf:20:6a: 6e:3c:d4:ee:76:86:5a:14:be:3e:2d:ac:63:b0:9c:6a:c7:c2: 3b:e6:73:4f:e5:a2:6c:37:ff:14:8f:9a:2b:9e:bb:68:a9:94: a4:24:6b:10:8e:ac:bb:92:5c:a5:0d:5a:69:38:b2:01:6c:db: 79:8e:31:6f:8b:fb:fe:4e:f0:0c:ff:79:1f:38:ee:7f:a7:b7: c4:6f:95:1a:b3:50:cb:ab:3d:99:ce:41:8c:12:63:02:0c:99: 43:70:f1:ff:71:fc:35:ef:1e:6e:31:4e:6d:a1:ee:c7:87:90: 2b:cd:1b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmXvYSfqA1qfyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZDQzYTQxODMtZWFjNy00MWZlLWIwYjEtMThjZjcwMjBlMWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK9gEEx3dvpTVLSHaopHorUjyLktWej/n8wm 9PyG1+kFtgMP1QpxyKDrNZB2EDXcPLWMW9sBFhUrv6CA37atvPfmdEopClztRMKA 0rwsEu5GcTBBHvF+kRMZ9oNUAfzMX3rDJtsQWHwkq+gtDS6T5+/73NlLvCKxuh80 FyLa/i4RM4XEellcupEnk82yo1gUP9B9OVLGNt8pzMQR6PL34KO3YVutN5H3v0H8 trW5cFJpjbUZc4x2itGPX28A4rXqdMYR8XTO4qnaueg/hwizQKLE+W+5APA7V7EO 3iGnLV9OKu6I1Sq88MgnX/jGu8of9Tl+/DNXGGMTZ+h54bcDQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4SdhKIKDwClAtBh1zyRLDv6T4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2Q5Yjg3OGYtMjZmNi0z NTI3LTk2OWMtMmJiM2Y0OTIxZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQ2Avm+sAFIkGoGBcitp89L0A5EDmKdVZ8+SeiCT6YgRwJL1bo5kAOz Ioy3t3gV1tloE55k1D9cjFBl00wKWHXXIkzGvJntZZ0IIhbhjqQaKp5uI95je5Xm Doj15vQqgWWp6AgSkaRIVHMEyqtWrSsLIsA6OkzVctQgfaS/QQeat3bpgmr/V21d Dz76t78gam481O52hloUvj4trGOwnGrHwjvmc0/lomw3/xSPmiueu2iplKQkaxCO rLuSXKUNWmk4sgFs23mOMW+L+/5O8Az/eR847n+nt8RvlRqzUMurPZnOQYwSYwIM mUNw8f9x/DXvHm4xTm2h7seHkCvNGwE= -----END CERTIFICATE-----Generated at Sun Jun 29 13:50:08 2025 by rpki-client