$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/baa5e1cb-359c-36d6-81d8-2c4aed65dad2.roa File: baa5e1cb-359c-36d6-81d8-2c4aed65dad2.roa (raw, json) Hash identifier: oTqb9F9gV1LfCJMzwF0xHm8iQFiwH2UJSg+zpm7s8wo= Subject key identifier: 24:58:94:D5:75:4F:5F:D1:64:88:88:37:98:F7:F3:CA:22:ED:1B:37 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858499829D2EDC0DFCF03271BA800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/baa5e1cb-359c-36d6-81d8-2c4aed65dad2.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 396168 IP address blocks: 165.254.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d2:ed:c0:df:cf:03:27:1b:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=078a6ae6-9a28-44ed-af67-16b994706bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:32:e0:b4:f7:ec:da:ff:d3:21:04:b0:a1: d1:b5:ca:09:a8:c7:4e:b5:70:12:cb:b3:6b:c8:64: 79:f3:35:5d:ef:8f:b0:86:9b:3c:42:dc:b4:8f:cf: 71:cd:ec:0a:b0:d2:e1:90:a7:94:68:a8:b8:fd:14: d7:ae:1c:74:1d:df:07:3a:b6:ff:47:43:0f:4f:b6: 3a:14:46:9b:9f:4f:45:d3:1e:6d:70:8e:0d:91:eb: 47:ac:68:62:b7:e4:3b:b3:e2:66:1f:ab:d8:c7:e0: 12:88:17:6b:dd:da:01:0a:d8:71:67:09:34:51:41: 0d:c8:c2:51:13:12:9f:1c:ce:69:dd:d6:fc:93:2c: e4:44:8a:18:10:fe:78:c8:8d:7f:08:89:25:1a:6a: 82:56:b9:03:9c:b5:63:58:e9:c4:7b:ad:44:8c:58: b9:30:b3:b4:84:f6:5d:0b:81:95:16:e1:17:b3:d3: a3:80:11:64:22:a8:74:f6:6f:79:7d:9a:99:ee:79: 61:58:b4:9c:cb:59:16:d1:48:e8:a3:f4:92:ce:fc: 6c:05:7a:9d:62:bd:39:93:a8:8b:e4:32:1f:33:73: b0:1a:6d:f5:af:33:b2:f3:79:a5:7d:a3:43:28:0e: 91:21:90:4f:e7:d5:aa:9d:30:d0:e3:75:36:69:d8: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:58:94:D5:75:4F:5F:D1:64:88:88:37:98:F7:F3:CA:22:ED:1B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/baa5e1cb-359c-36d6-81d8-2c4aed65dad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:79:8c:15:62:3c:b5:83:6e:97:da:1f:de:b2:59:71:d7:5c: 49:c9:86:33:e5:4c:72:2d:2d:57:48:4c:d3:04:cd:c1:ec:49: 2f:b3:84:ae:e8:f7:70:5c:41:6b:38:e7:71:f7:93:fa:56:26: 1e:8e:84:ad:33:4d:0e:80:9e:e5:25:e2:bd:02:ea:2a:04:3a: b3:ac:d1:fd:3f:4a:77:48:53:c2:a1:fe:7c:1c:fb:28:a3:4f: 90:89:e2:d0:b2:b6:8e:93:48:5f:d7:b0:af:1f:48:2f:7c:88: 82:92:9d:eb:b4:53:f8:0e:e9:2a:1a:b4:3f:6a:a5:bd:79:3c: 03:33:e5:5c:a0:cd:61:7d:69:31:69:2b:55:13:94:f4:18:15: 1f:f5:bd:d1:3f:ca:3c:5d:49:02:18:5c:aa:b3:bb:e2:30:c8: a4:bd:b1:52:22:f1:4a:b1:15:3e:ea:cf:df:e8:a9:2a:90:fa: 65:d8:af:f7:19:29:dd:ae:5e:1a:67:ef:c5:68:d6:15:68:3d: 80:e5:50:c2:5a:4a:d0:ee:16:9d:94:c5:e8:ef:3c:5a:79:ca: a1:86:51:a6:4a:37:ef:ec:3f:ee:a4:e7:d0:ed:f6:d9:0e:4b: 78:7e:ad:b8:eb:35:b6:0d:16:f0:8b:44:99:c3:91:33:f9:8d: d0:a3:f9:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdLtwN/PAycbqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MDc4YTZhZTYtOWEyOC00NGVkLWFmNjctMTZiOTk0NzA2YmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWAy4LT37Nr/0yEEsKHRtcoJqMdOtXASy7Nr yGR58zVd74+whps8Qty0j89xzewKsNLhkKeUaKi4/RTXrhx0Hd8HOrb/R0MPT7Y6 FEabn09F0x5tcI4NketHrGhit+Q7s+JmH6vYx+ASiBdr3doBCthxZwk0UUENyMJR ExKfHM5p3db8kyzkRIoYEP54yI1/CIklGmqCVrkDnLVjWOnEe61EjFi5MLO0hPZd C4GVFuEXs9OjgBFkIqh09m95fZqZ7nlhWLScy1kW0Ujoo/SSzvxsBXqdYr05k6iL 5DIfM3OwGm31rzOy83mlfaNDKA6RIZBP59WqnTDQ43U2adi7FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRYlNV1T1/RZIiIN5j388oi7Rs3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmFhNWUxY2ItMzU5Yy0z NmQ2LTgxZDgtMmM0YWVkNjVkYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJ5jBViPLWDbpfaH96yWXHXXEnJhjPlTHItLVdITNMEzcHsSS+zhK7o 93BcQWs453H3k/pWJh6OhK0zTQ6AnuUl4r0C6ioEOrOs0f0/SndIU8Kh/nwc+yij T5CJ4tCyto6TSF/XsK8fSC98iIKSneu0U/gO6SoatD9qpb15PAMz5VygzWF9aTFp K1UTlPQYFR/1vdE/yjxdSQIYXKqzu+IwyKS9sVIi8UqxFT7qz9/oqSqQ+mXYr/cZ Kd2uXhpn78Vo1hVoPYDlUMJaStDuFp2UxejvPFp5yqGGUaZKN+/sP+6k59Dt9tkO S3h+rbjrNbYNFvCLRJnDkTP5jdCj+R8= -----END CERTIFICATE-----Generated at Tue May 6 01:29:27 2025 by rpki-client