$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43c7a08d-ae79-3dfe-95bc-7a11607f911b.roa File: 43c7a08d-ae79-3dfe-95bc-7a11607f911b.roa (raw, json) Hash identifier: DjBYmxAYHMF47JHSm4rrIanEBiS5rDXqEqPzCC0cJ/k= Subject key identifier: CF:C3:34:9D:68:0B:D1:03:D9:DE:D6:55:46:29:58:19:9B:80:56:15 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A146575BE348993BF04638E00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43c7a08d-ae79-3dfe-95bc-7a11607f911b.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 165.254.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:75:be:34:89:93:bf:04:63:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=b7a8c1a3-3027-4af9-81b1-66b2f600e27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:73:7f:ee:1e:11:44:35:18:b9:73:03:7a: 21:e2:c2:ad:4f:89:4b:b7:7f:5b:2d:0c:1d:d6:ea: 00:cb:6d:ac:01:42:ca:2f:67:7b:0f:78:8a:9f:f8: 21:27:e5:8b:17:8a:64:85:a7:ef:ea:7a:72:d2:6b: 2f:35:b5:7b:54:81:4a:61:10:6e:85:d1:98:a2:e3: e7:6d:ea:e0:f3:25:c9:e4:cb:8d:10:06:5b:ed:3d: bc:de:f5:e8:97:d2:23:b2:8d:fd:22:22:2f:18:bb: 1d:91:46:8a:47:4e:39:a3:dd:88:ee:39:f0:4a:61: d7:47:d8:80:9b:3c:b1:8e:57:63:06:90:21:7c:02: 36:11:e7:d5:d8:8b:63:39:87:c9:d2:89:f6:83:0c: df:7c:3a:a4:94:f8:58:a8:be:d1:99:b7:cb:4a:5c: 65:84:da:92:68:4e:ba:e5:b8:79:5d:76:fc:a2:06: 17:7a:6e:c0:c6:ea:8d:52:d5:ba:ed:44:bd:67:fc: 1a:87:2e:43:d1:07:67:18:07:13:06:1c:7f:ef:df: d8:bc:59:6d:7d:bc:f6:64:d7:a0:a2:4b:36:37:b2: 05:f1:96:51:2b:10:51:d1:e7:c8:d3:6e:d3:41:5a: e5:fd:38:c6:f5:3a:ab:aa:3e:c2:82:23:23:ed:d4: 87:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C3:34:9D:68:0B:D1:03:D9:DE:D6:55:46:29:58:19:9B:80:56:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43c7a08d-ae79-3dfe-95bc-7a11607f911b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4a:e9:48:b4:a2:31:29:fe:57:37:38:47:0c:36:ae:6d:48: a5:23:50:21:7e:05:cf:2e:a6:a3:c5:5c:89:4b:1b:de:c6:aa: dd:98:35:de:f2:66:b4:cd:1d:b9:bb:99:3d:3e:65:64:4f:ed: 2b:e0:da:3b:f7:44:ca:a3:3d:e7:d2:c4:05:4a:31:2c:73:94: 9f:ab:56:b0:45:09:fd:0c:c8:d7:cb:c5:e0:7b:22:0b:e6:db: 0e:c6:4b:fc:de:1c:7e:27:fa:14:17:7a:7f:95:26:9c:fc:9c: 6a:50:60:0b:93:e8:69:e8:13:e7:0e:61:8f:68:a0:1e:4a:de: 8f:29:3c:a8:64:f4:b8:e8:e8:a6:70:09:9c:9b:bf:cf:4d:70: c2:b8:14:e7:6c:43:96:dc:95:37:4a:9a:0b:28:bf:10:d4:00: 11:ec:09:cf:79:67:17:d0:ba:57:28:18:c0:c2:a8:fa:33:f9: ef:49:f0:bb:80:4b:51:97:85:c5:7f:5b:bc:d2:5f:dc:d9:f6: 70:86:4f:eb:89:72:a9:ad:8e:1d:eb:40:c7:81:84:cb:96:84: ed:7c:bb:b2:be:cf:a4:54:91:c5:99:f7:be:dd:00:b1:e8:71: e7:24:08:b6:78:5b:d4:93:80:95:1a:a9:f4:70:12:63:84:e3: 34:aa:f6:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXW+NImTvwRjjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YjdhOGMxYTMtMzAyNy00YWY5LTgxYjEtNjZiMmY2MDBlMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7Vzf+4eEUQ1GLlzA3oh4sKtT4lLt39bLQwd 1uoAy22sAULKL2d7D3iKn/ghJ+WLF4pkhafv6npy0msvNbV7VIFKYRBuhdGYouPn berg8yXJ5MuNEAZb7T283vXol9Ijso39IiIvGLsdkUaKR045o92I7jnwSmHXR9iA mzyxjldjBpAhfAI2EefV2ItjOYfJ0on2gwzffDqklPhYqL7RmbfLSlxlhNqSaE66 5bh5XXb8ogYXem7AxuqNUtW67US9Z/wahy5D0QdnGAcTBhx/79/YvFltfbz2ZNeg oks2N7IF8ZZRKxBR0efI027TQVrl/TjG9Tqrqj7CgiMj7dSHiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/DNJ1oC9ED2d7WVUYpWBmbgFYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDNjN2EwOGQtYWU3OS0z ZGZlLTk1YmMtN2ExMTYwN2Y5MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExK6Ui0ojEp/lc3OEcMNq5tSKUjUCF+Bc8upqPFXIlLG97Gqt2YNd7y ZrTNHbm7mT0+ZWRP7Svg2jv3RMqjPefSxAVKMSxzlJ+rVrBFCf0MyNfLxeB7Igvm 2w7GS/zeHH4n+hQXen+VJpz8nGpQYAuT6GnoE+cOYY9ooB5K3o8pPKhk9Ljo6KZw CZybv89NcMK4FOdsQ5bclTdKmgsovxDUABHsCc95ZxfQulcoGMDCqPoz+e9J8LuA S1GXhcV/W7zSX9zZ9nCGT+uJcqmtjh3rQMeBhMuWhO18u7K+z6RUkcWZ977dALHo ceckCLZ4W9STgJUaqfRwEmOE4zSq9ro= -----END CERTIFICATE-----Generated at Sun Jun 15 13:00:40 2025 by rpki-client