$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/0d21ef0d-eada-37df-ba95-470d970f6b7c.roa File: 0d21ef0d-eada-37df-ba95-470d970f6b7c.roa (raw, json) Hash identifier: Uq7rcE2Q2Zt75zDKh4gsbxoSNjbfux9eLUOkzekvV2w= Subject key identifier: 6B:32:77:C0:9D:74:8D:DB:11:6B:3E:5A:99:3D:DC:CF:10:4C:E8:8C Certificate issuer: /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Certificate serial: 010D0C9F43285849BDDA2A1E5A6490CADD8A9100 Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/0d21ef0d-eada-37df-ba95-470d970f6b7c.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 165.1.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2a:1e:5a:64:90:ca:dd:8a:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=4399c812-f02e-487f-86e4-66925e323265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c4:5b:3a:6a:f1:03:0f:2e:c8:77:a8:1d:91: ab:91:b9:7f:9f:50:14:a9:87:d7:38:15:f5:ab:51: c4:44:99:9b:3b:95:b7:4e:6d:32:70:be:94:e8:64: 52:af:ef:35:07:eb:39:9f:4c:29:48:16:81:5e:ef: a8:40:1c:21:79:ed:91:10:1e:f7:10:88:4c:12:7c: a1:d1:bc:70:87:54:7e:58:f2:98:d9:53:a3:a2:6b: 15:e1:d4:41:33:52:08:96:d6:48:f5:f6:62:c7:bc: 66:df:d4:57:f0:23:e9:58:eb:66:53:be:10:3d:99: 72:3c:a6:cb:bf:26:f7:ce:ae:17:cf:47:49:05:ff: a2:1b:dd:25:71:b0:63:70:e3:54:09:c7:32:91:84: 3b:5c:00:9e:24:ae:5c:51:8c:27:a5:b0:cd:de:c1: 11:fb:6f:d9:00:a3:97:4f:7f:2d:93:d7:2e:67:6e: 86:7b:b2:6b:e3:c9:dd:66:19:e5:08:fe:ea:da:f3: a5:37:ad:50:94:7c:60:05:5a:cd:92:d6:cc:fe:99: 28:95:f7:0f:e6:d7:1c:67:9c:73:ef:08:7a:b6:5c: 02:b9:81:bb:53:0f:46:72:e2:a5:5d:67:59:cc:6b: df:18:a8:5e:40:f4:b8:49:fe:57:a7:44:76:0c:91: e9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:32:77:C0:9D:74:8D:DB:11:6B:3E:5A:99:3D:DC:CF:10:4C:E8:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/0d21ef0d-eada-37df-ba95-470d970f6b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl X509v3 Authority Key Identifier: keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer sbgp-ipAddrBlock: critical IPv4: 165.1.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:59:09:72:18:2b:7f:59:68:04:27:a2:5b:8c:f3:dd:4d:fa: 15:98:af:1c:3f:8e:90:89:c5:15:92:62:67:66:07:52:c6:ff: b7:c8:9a:9a:78:fb:4e:6b:55:13:d9:20:98:ac:95:22:81:9a: 32:77:75:3c:aa:ce:b3:ee:71:14:71:d0:ae:e8:de:75:53:13: 4e:6b:d1:50:95:e0:0e:72:6c:12:46:ab:f6:df:d7:55:6c:42: f8:28:4f:42:f2:75:bd:0f:de:d9:bc:1c:ba:41:e2:89:8d:34: 76:32:88:07:ab:7b:4f:3c:0e:ab:26:5e:c3:75:3f:16:a2:39: 94:70:dc:77:67:ed:44:74:31:04:ce:3a:48:5d:27:61:84:1f: 60:69:c2:ff:4b:59:4b:d1:4e:c3:1d:61:1b:04:ff:8b:b7:15: 1f:25:04:de:f0:1f:6e:34:48:46:51:e0:73:ee:28:b3:6f:7f: 4b:e5:f7:21:33:2b:8f:52:bf:e5:58:fc:20:40:65:aa:6d:a2: 2d:64:42:48:9d:fa:48:7c:94:9c:94:da:ec:08:ea:1a:7c:ac: 72:bb:63:e3:06:ce:c7:00:eb:35:a8:49:fd:46:f9:51:f5:a5: f2:db:af:83:8e:d9:42:be:2d:31:84:3b:00:5b:45:34:54:ae: af:08:2f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92ioeWmSQyt2KkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll YTUzMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NDM5OWM4MTItZjAyZS00ODdmLTg2ZTQtNjY5MjVlMzIzMjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcRbOmrxAw8uyHeoHZGrkbl/n1AUqYfXOBX1 q1HERJmbO5W3Tm0ycL6U6GRSr+81B+s5n0wpSBaBXu+oQBwhee2REB73EIhMEnyh 0bxwh1R+WPKY2VOjomsV4dRBM1IIltZI9fZix7xm39RX8CPpWOtmU74QPZlyPKbL vyb3zq4Xz0dJBf+iG90lcbBjcONUCccykYQ7XACeJK5cUYwnpbDN3sER+2/ZAKOX T38tk9cuZ26Ge7Jr48ndZhnlCP7q2vOlN61QlHxgBVrNktbM/pkolfcP5tccZ5xz 7wh6tlwCuYG7Uw9GcuKlXWdZzGvfGKheQPS4Sf5Xp0R2DJHpowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsyd8CddI3bEWs+Wpk93M8QTOiMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvMGQyMWVmMGQtZWFkYS0z N2RmLWJhOTUtNDcwZDk3MGY2YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5 ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1 OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpQEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxZCXIYK39ZaAQnoluM891N+hWYrxw/jpCJxRWSYmdmB1LG/7fImpp4 +05rVRPZIJislSKBmjJ3dTyqzrPucRRx0K7o3nVTE05r0VCV4A5ybBJGq/bf11Vs QvgoT0Lydb0P3tm8HLpB4omNNHYyiAere088DqsmXsN1PxaiOZRw3Hdn7UR0MQTO OkhdJ2GEH2Bpwv9LWUvRTsMdYRsE/4u3FR8lBN7wH240SEZR4HPuKLNvf0vl9yEz K49Sv+VY/CBAZaptoi1kQkid+kh8lJyU2uwI6hp8rHK7Y+MGzscA6zWoSf1G+VH1 pfLbr4OO2UK+LTGEOwBbRTRUrq8IL+Q= -----END CERTIFICATE-----Generated at Mon May 5 20:32:20 2025 by rpki-client