$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa File: 0eddf336-ce40-3272-ba3f-78607f29de84.roa (raw, json) Hash identifier: L3c2vAIzHJSSev07qe1veQSC0pXe+mjLnCVt4lfM3PQ= Subject key identifier: 2D:6C:CB:0A:E5:BA:56:35:96:76:C5:0F:61:6E:90:B0:28:D1:BF:05 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849F87A8C253A113EBA6B63BE00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 20940 IP address blocks: 165.254.23.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:8c:25:3a:11:3e:ba:6b:63:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=6c9441eb-54a6-4a7d-90a9-5145f617bfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:c6:2b:10:fe:d3:04:44:d2:fe:1c:49:04: f6:ae:b6:47:53:79:36:ac:40:10:cc:16:60:87:a0: ef:8f:a7:e9:67:91:c5:bb:46:01:11:3c:52:3a:fb: a9:39:eb:b1:c3:62:3e:0d:2f:31:28:56:22:1b:10: f7:b2:ec:2e:15:3d:9b:47:3b:a3:12:ac:6b:1d:f5: 11:75:98:6e:0e:9b:9c:d1:61:02:d2:dc:6f:62:73: 9c:42:33:0a:23:3e:87:2f:94:37:4d:96:69:4f:8d: bf:c6:a8:51:40:55:a3:f9:fa:0a:e4:86:57:91:e5: 99:ad:14:80:be:8c:08:11:db:59:0d:c4:ee:03:2d: b1:34:7b:d3:c2:f6:bb:02:2f:aa:4a:8e:11:3e:09: f7:fe:6c:34:f2:15:75:a0:37:91:b5:41:92:fb:83: 1f:ac:3e:41:e7:d7:04:88:62:10:c7:6c:da:fa:f4: 6a:2d:35:3d:9a:b1:7d:2f:09:3a:b1:23:1d:18:3f: 1f:41:4c:23:2d:1c:24:1c:cf:4e:5d:d0:d5:66:3b: 13:89:a7:91:ab:cf:cf:ce:23:a0:b7:42:cb:75:fa: 61:36:51:98:33:2a:ac:1f:ea:f1:d1:99:b7:7c:40: f2:94:c8:84:1a:b8:c9:08:97:96:e9:d5:82:35:ff: 5d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6C:CB:0A:E5:BA:56:35:96:76:C5:0F:61:6E:90:B0:28:D1:BF:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.23.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d2:66:4d:52:d8:d9:0b:9c:99:2e:42:62:61:f3:0b:e2:fb: 96:40:b7:90:7a:d1:37:be:b0:fe:a1:5b:97:ed:7c:62:7a:5a: d6:d8:7a:bd:32:88:8f:27:99:ed:53:70:f8:d8:60:d8:0e:41: cc:e1:35:18:42:ae:e7:41:9c:ce:1d:6b:92:70:72:75:b1:09: 86:77:2a:be:68:b0:ca:55:30:87:1d:f2:6e:1d:d9:06:f1:75: cd:eb:f3:0e:f0:8e:08:a5:80:64:41:ac:1f:4d:29:a6:6e:b0: 26:7e:74:59:7b:e3:2e:05:ea:ae:69:9e:e0:b1:99:1a:64:2f: 0f:a8:a3:e9:e9:ba:88:77:18:78:6a:31:ae:82:31:03:e1:e2: 72:b1:f3:53:70:22:4b:48:48:2e:32:65:a2:f4:04:af:5f:de: 66:1d:8c:2b:af:ed:19:bb:e2:fa:3c:4c:b3:b1:87:ec:54:79: db:a2:68:bc:38:b1:6a:ea:a4:28:06:aa:4d:ed:02:32:95:7d: ca:65:b7:6e:54:f4:f4:ae:a9:7a:1d:3e:0e:94:c1:61:7e:f0: 95:df:66:10:f7:a7:5e:c5:13:0a:8f:01:95:38:4c:56:ce:80: c7:ca:3f:73:fb:ea:bf:a9:fe:4b:d3:99:95:96:29:fe:60:78: 31:9a:5b:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn4eowlOhE+umtjvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NmM5NDQxZWItNTRhNi00YTdkLTkwYTktNTE0NWY2MTdiZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQXGKxD+0wRE0v4cSQT2rrZHU3k2rEAQzBZg h6Dvj6fpZ5HFu0YBETxSOvupOeuxw2I+DS8xKFYiGxD3suwuFT2bRzujEqxrHfUR dZhuDpuc0WEC0txvYnOcQjMKIz6HL5Q3TZZpT42/xqhRQFWj+foK5IZXkeWZrRSA vowIEdtZDcTuAy2xNHvTwva7Ai+qSo4RPgn3/mw08hV1oDeRtUGS+4MfrD5B59cE iGIQx2za+vRqLTU9mrF9Lwk6sSMdGD8fQUwjLRwkHM9OXdDVZjsTiaeRq8/PziOg t0LLdfphNlGYMyqsH+rx0Zm3fEDylMiEGrjJCJeW6dWCNf9d5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC1sywrlulY1lnbFD2FukLAo0b8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGVkZGYzMzYtY2U0MC0z MjcyLWJhM2YtNzg2MDdmMjlkZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf4XADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBs0mZNUtjZC5yZLkJiYfML4vuWQLeQetE3vrD+oVuX7XxielrW2Hq9 MoiPJ5ntU3D42GDYDkHM4TUYQq7nQZzOHWuScHJ1sQmGdyq+aLDKVTCHHfJuHdkG 8XXN6/MO8I4IpYBkQawfTSmmbrAmfnRZe+MuBequaZ7gsZkaZC8PqKPp6bqIdxh4 ajGugjED4eJysfNTcCJLSEguMmWi9ASvX95mHYwrr+0Zu+L6PEyzsYfsVHnbomi8 OLFq6qQoBqpN7QIylX3KZbduVPT0rql6HT4OlMFhfvCV32YQ96dexRMKjwGVOExW zoDHyj9z++q/qf5L05mVlin+YHgxmlsz -----END CERTIFICATE-----Generated at Mon Jun 16 09:57:30 2025 by rpki-client