$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa File: 66cb728c-d2d4-30fc-9ad1-2039318ab524.roa (raw, json) Hash identifier: +n8I7sZXDvuSW0d6irS6nUFnD+PBmMOSWeS6Y/C8e9w= Subject key identifier: F9:CF:23:AF:AD:12:30:D7:89:1C:8D:86:C6:BE:D7:F3:4B:6A:25:A9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858491D7185C97E5D0B409B419980 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 165.254.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:85:c9:7e:5d:0b:40:9b:41:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=f2a3581b-5394-449d-826d-683b95668586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:78:c4:df:f9:e6:93:77:ee:e2:5e:68:0d:71: 15:9f:ca:3d:71:26:b9:aa:c8:59:02:ed:47:0c:92: 2e:19:0a:42:d7:7f:7f:e5:14:8f:ba:41:db:bd:37: e7:83:e0:44:b2:52:ce:99:6a:db:3d:53:c4:47:02: eb:1c:cd:9b:97:b3:21:33:4b:80:ea:e4:58:ff:30: 31:ca:10:f8:c0:a0:30:6a:e4:8c:52:07:f4:6a:15: bc:0d:84:5f:37:23:ff:5e:33:58:35:b9:dc:08:18: 40:b4:19:bf:ca:13:90:86:a4:dc:9f:61:29:71:eb: 8b:de:83:05:04:f2:7b:33:cb:44:e9:0a:17:eb:c0: 3a:00:6a:4c:69:78:ca:71:be:2f:4f:01:60:d7:4b: 8b:e4:30:7d:33:56:86:b9:38:73:6d:fc:fd:80:3f: 0b:89:72:83:f2:98:25:de:3d:e2:c0:c2:b1:49:01: a1:3d:8e:8e:8a:85:0a:38:bc:79:41:22:e8:02:9d: 9d:c3:30:3a:98:f8:d0:7c:ca:71:95:77:1f:a9:a5: 72:1f:ff:36:49:65:c0:2e:8e:03:e5:83:cf:88:25: ed:b5:6d:ee:f5:da:64:a3:1f:0c:6a:97:15:50:0e: 0d:fd:54:51:d3:ec:4b:59:3f:d7:3d:ba:83:78:ea: 49:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:23:AF:AD:12:30:D7:89:1C:8D:86:C6:BE:D7:F3:4B:6A:25:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a7:aa:3f:1f:91:1e:6f:94:4d:c4:6d:c2:61:da:a5:0f:85: 53:fa:6d:2f:3b:31:37:59:a6:ca:3e:6f:ef:cb:93:e2:96:c3: f9:8b:f0:c1:8a:76:51:42:8e:04:7b:3c:25:a7:a1:38:34:a1: bb:a5:45:a8:c5:6c:3a:89:5b:1b:9a:bf:9f:d9:07:03:e0:18: 92:49:0d:1d:53:1a:95:3b:ea:84:6e:09:e4:ab:c1:60:c5:cb: 5f:f5:06:b7:cc:b3:40:ef:45:57:75:3f:d8:20:89:05:40:f5: 1d:10:28:fe:45:7b:b3:27:2b:63:8e:24:c2:b3:87:94:2b:d2: 58:ff:1a:42:66:a9:b4:4e:ef:43:bf:dd:69:1d:e0:15:2c:07: de:59:47:6e:ce:c6:8d:a8:9e:1d:53:26:dc:d3:d6:de:30:d5: b8:66:28:03:6c:e3:08:c9:fb:a4:01:e3:7a:9d:da:67:70:6b: 13:5f:28:c6:29:07:8a:4a:89:d5:75:8b:b4:29:5b:bc:24:51: 70:68:66:5c:df:b6:b1:91:8f:31:a4:09:6b:87:98:56:58:62: a9:53:ff:a0:b4:ed:bb:73:97:26:e6:0a:3d:02:21:16:bb:e2: 88:fd:1b:b0:14:bf:4f:90:11:42:11:c9:d2:e8:65:fa:6a:ce: f6:7d:43:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYXJfl0LQJtBmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZjJhMzU4MWItNTM5NC00NDlkLTgyNmQtNjgzYjk1NjY4NTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XjE3/nmk3fu4l5oDXEVn8o9cSa5qshZAu1H DJIuGQpC139/5RSPukHbvTfng+BEslLOmWrbPVPERwLrHM2bl7MhM0uA6uRY/zAx yhD4wKAwauSMUgf0ahW8DYRfNyP/XjNYNbncCBhAtBm/yhOQhqTcn2EpceuL3oMF BPJ7M8tE6QoX68A6AGpMaXjKcb4vTwFg10uL5DB9M1aGuThzbfz9gD8LiXKD8pgl 3j3iwMKxSQGhPY6OioUKOLx5QSLoAp2dwzA6mPjQfMpxlXcfqaVyH/82SWXALo4D 5YPPiCXttW3u9dpkox8MapcVUA4N/VRR0+xLWT/XPbqDeOpJOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnPI6+tEjDXiRyNhsa+1/NLaiWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjZjYjcyOGMtZDJkNC0z MGZjLTlhZDEtMjAzOTMxOGFiNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADinqj8fkR5vlE3EbcJh2qUPhVP6bS87MTdZpso+b+/Lk+KWw/mL8MGK dlFCjgR7PCWnoTg0obulRajFbDqJWxuav5/ZBwPgGJJJDR1TGpU76oRuCeSrwWDF y1/1BrfMs0DvRVd1P9ggiQVA9R0QKP5Fe7MnK2OOJMKzh5Qr0lj/GkJmqbRO70O/ 3Wkd4BUsB95ZR27Oxo2onh1TJtzT1t4w1bhmKANs4wjJ+6QB43qd2mdwaxNfKMYp B4pKidV1i7QpW7wkUXBoZlzftrGRjzGkCWuHmFZYYqlT/6C07btzlybmCj0CIRa7 4oj9G7AUv0+QEUIRydLoZfpqzvZ9Q7k= -----END CERTIFICATE-----Generated at Mon May 5 12:26:22 2025 by rpki-client