$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa File: bf541b3f-d38b-3716-affa-7307e218a63b.roa (raw, json) Hash identifier: 0+eFgxp6bhroibel26UquVQdvlNv1Ggxa+DyeaiaN6w= Subject key identifier: AE:E2:B8:10:99:D7:8F:F6:6B:CF:FB:04:9A:BF:DF:D6:20:41:69:17 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A35E58ABA7AC016B52C576980 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 25645 IP address blocks: 165.254.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:8a:ba:7a:c0:16:b5:2c:57:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=cc4682e7-9a43-42bd-ac0f-c9dfcbe73e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:75:4a:2c:f0:32:50:fb:1f:d2:39:53:0f:27: a8:94:dc:4b:8c:cd:a1:0b:7a:32:93:36:20:9a:12: 1f:2b:ad:7b:7b:aa:2d:73:60:f2:94:8b:8f:c8:a8: 55:e7:e0:69:12:3f:2e:8c:c7:63:76:d7:4c:eb:02: d0:4c:64:50:4f:2f:5b:da:ba:84:14:aa:8a:b4:fc: 44:f3:c9:64:3f:a6:dc:06:bf:83:8e:b5:3e:47:d1: 08:14:9f:a5:cc:00:ad:a1:64:1d:33:65:96:50:73: 2f:dd:ac:bd:90:c6:8b:02:cd:42:2b:91:24:d8:6e: ef:dc:e7:6e:9a:2b:16:73:8e:7f:6c:81:24:d2:c2: 4b:11:f3:c9:c7:26:73:b6:ac:f2:c6:aa:f3:46:21: bf:65:82:f1:2c:ec:36:bf:9d:87:93:06:89:92:16: 1b:8c:a7:e2:68:cf:cb:ea:a6:20:ca:12:ea:a4:ac: 88:59:84:eb:8b:2f:f7:05:59:45:24:04:c4:7a:1e: 7f:e4:3a:ef:20:9e:b8:18:42:d1:84:b1:bc:1c:b6: 72:d9:3c:1e:68:a7:8f:8e:a2:59:61:8c:3d:fc:43: 08:d1:d5:48:9f:d0:ad:ba:27:da:9d:c4:12:d7:de: 34:27:e0:ab:1d:e9:a2:4f:9a:32:b5:fc:9f:41:4e: bb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E2:B8:10:99:D7:8F:F6:6B:CF:FB:04:9A:BF:DF:D6:20:41:69:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:2e:9c:3f:b7:b4:6c:eb:98:b9:6c:6e:40:b6:c5:46:09:92: 61:49:59:29:47:c5:34:da:9b:50:44:09:84:ea:e2:42:3d:8f: 8f:9d:5a:79:e2:1f:17:f2:26:6e:80:58:08:45:00:42:52:60: 1f:85:63:41:ce:b8:fa:85:23:52:42:3b:2a:54:44:48:71:6c: cc:17:37:b2:7c:90:19:d4:87:28:24:71:77:83:f0:0c:24:19: 68:24:53:af:33:4e:e2:fe:4b:ed:f2:d0:16:01:e7:0b:17:3d: c3:fa:b4:83:7a:94:07:c2:39:b4:f0:7c:48:91:13:f0:cc:01: 97:a8:a9:15:06:0e:47:1c:13:8f:34:ca:3a:fa:52:29:f1:b9: 0c:68:0a:f8:ab:cc:77:7c:bd:0c:6c:13:fb:7f:79:6f:b2:1a: 88:95:b4:a6:e2:55:01:db:b6:93:34:47:f3:47:f8:07:d5:51: ac:bf:02:ed:87:1a:7f:d1:01:85:4e:04:02:a6:7d:9d:53:52: 0e:6f:44:12:03:dc:3d:93:2a:f8:5e:8d:38:b7:c9:2f:43:44: 37:99:9b:c2:62:ad:f4:b0:8c:d6:ef:b9:c1:ec:93:80:13:e4: 97:e1:ca:9b:27:b5:25:f8:c7:9c:82:32:e1:89:0b:2b:ca:a6: 1e:45:fe:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15Yq6esAWtSxXaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk Y2M0NjgyZTctOWE0My00MmJkLWFjMGYtYzlkZmNiZTczZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3VKLPAyUPsf0jlTDyeolNxLjM2hC3oykzYg mhIfK617e6otc2DylIuPyKhV5+BpEj8ujMdjdtdM6wLQTGRQTy9b2rqEFKqKtPxE 88lkP6bcBr+DjrU+R9EIFJ+lzACtoWQdM2WWUHMv3ay9kMaLAs1CK5Ek2G7v3Odu misWc45/bIEk0sJLEfPJxyZztqzyxqrzRiG/ZYLxLOw2v52HkwaJkhYbjKfiaM/L 6qYgyhLqpKyIWYTriy/3BVlFJATEeh5/5DrvIJ64GELRhLG8HLZy2TweaKePjqJZ YYw9/EMI0dVIn9CtuifancQS1940J+CrHemiT5oytfyfQU67IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7iuBCZ14/2a8/7BJq/39YgQWkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmY1NDFiM2YtZDM4Yi0z NzE2LWFmZmEtNzMwN2UyMThhNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcunD+3tGzrmLlsbkC2xUYJkmFJWSlHxTTam1BECYTq4kI9j4+dWnni HxfyJm6AWAhFAEJSYB+FY0HOuPqFI1JCOypUREhxbMwXN7J8kBnUhygkcXeD8Awk GWgkU68zTuL+S+3y0BYB5wsXPcP6tIN6lAfCObTwfEiRE/DMAZeoqRUGDkccE480 yjr6UinxuQxoCvirzHd8vQxsE/t/eW+yGoiVtKbiVQHbtpM0R/NH+AfVUay/Au2H Gn/RAYVOBAKmfZ1TUg5vRBID3D2TKvhejTi3yS9DRDeZm8JirfSwjNbvucHsk4AT 5JfhypsntSX4x5yCMuGJCyvKph5F/gs= -----END CERTIFICATE-----Generated at Sun Jun 29 17:52:29 2025 by rpki-client