$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4a8389c0-05b5-3cc9-9a47-2f2467400b31.roa File: 4a8389c0-05b5-3cc9-9a47-2f2467400b31.roa (raw, json) Hash identifier: FQu606y3tcqx7glkDbY1CA2Zk7WmIxoSTfoVaE8wy90= Subject key identifier: DA:54:63:80:5E:F5:6E:01:8B:E9:9C:B5:CD:74:A9:97:B2:35:BC:6C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849244E84CFDB52D4068BF15500 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4a8389c0-05b5-3cc9-9a47-2f2467400b31.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 399469 IP address blocks: 165.254.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:84:cf:db:52:d4:06:8b:f1:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=904c2d47-bf2c-4a7b-aa7d-cb93aecae2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8e:6b:83:a0:74:a9:3a:71:1c:97:1f:4b:b8: af:89:e4:e1:f2:0b:b0:1e:d1:1b:45:9a:37:51:47: 0e:3f:5c:9c:9e:4a:68:09:4e:36:16:36:c9:91:34: e3:30:11:2c:97:4f:02:a9:a3:2f:96:97:8c:44:79: 00:16:71:20:9e:9d:63:1a:a1:7f:6b:aa:2f:a2:31: 58:f6:4e:17:6e:c8:df:0d:b3:31:c4:bd:1c:f6:d8: 09:4c:d2:c2:46:40:b7:56:5b:58:e8:36:b6:43:dd: b9:7f:cc:35:28:ed:aa:1c:62:e2:eb:81:29:a0:91: 63:f3:c3:35:d3:f5:b2:1c:6b:6c:e6:92:95:aa:3b: d0:96:9a:f4:b7:81:90:e6:0c:36:1c:45:23:5f:71: ff:d3:6a:d5:07:e6:9d:e0:b1:3a:f5:41:b0:3d:b8: e8:c0:94:c3:e6:fc:5b:e7:48:9f:9f:70:62:c1:8f: b7:89:d2:70:df:6b:db:a5:af:8b:96:07:2e:3a:bb: 05:b9:74:da:75:f0:d8:f8:4f:09:83:8c:f7:47:c4: eb:06:c4:1c:3e:d5:7f:7f:dd:d5:a1:d9:e0:01:e5: 76:ad:7d:c0:16:01:2a:af:b4:44:f3:ed:6e:5d:01: ce:42:15:5c:a9:a9:cb:bc:76:19:be:12:bb:47:17: 35:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:54:63:80:5E:F5:6E:01:8B:E9:9C:B5:CD:74:A9:97:B2:35:BC:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4a8389c0-05b5-3cc9-9a47-2f2467400b31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:75:22:f4:76:83:c6:cb:06:06:d5:a7:ae:d9:90:b9:c3:f1: e6:b6:70:1c:e4:df:8a:24:49:4d:12:db:d5:9b:e1:55:63:c8: 37:cb:c1:75:61:b3:2e:cc:8c:4b:89:e2:0f:ac:52:f6:dd:01: bc:3f:58:a7:80:65:f0:6f:d0:63:6e:05:a3:72:82:e1:80:92: 81:4e:55:6d:08:25:91:fa:d7:11:00:84:a0:a1:a4:d7:f4:59: e9:59:6a:e1:a4:4e:29:12:cc:d0:31:85:12:8e:29:a3:a7:b8: a0:3c:de:2e:4d:33:70:0c:d4:18:1a:b7:42:81:6a:2c:39:05: b3:94:c9:d8:35:4a:d5:4e:f1:08:ab:c0:f0:30:f1:c1:a1:75: 70:cb:27:50:9d:e4:ab:0a:b1:34:d0:1f:2d:ff:10:5e:63:4c: 86:50:9d:df:ae:f3:00:56:1e:f8:2d:8a:56:5b:79:9d:66:2f: 1c:9c:6c:ac:7c:fd:d0:4f:8f:15:c3:45:db:6f:b6:a9:e6:a4: ac:07:3d:0c:4a:50:ff:58:32:68:f8:21:66:7a:cb:99:13:66: ec:14:33:33:75:f5:5f:52:a6:2b:8b:28:6d:25:58:c5:48:64: 27:e1:8f:6b:d3:33:e8:fb:10:50:5d:6b:f2:b6:97:6c:dc:ba: 0f:71:8d:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToTP21LUBovxVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk OTA0YzJkNDctYmYyYy00YTdiLWFhN2QtY2I5M2FlY2FlMmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI5rg6B0qTpxHJcfS7ivieTh8guwHtEbRZo3 UUcOP1ycnkpoCU42FjbJkTTjMBEsl08CqaMvlpeMRHkAFnEgnp1jGqF/a6ovojFY 9k4XbsjfDbMxxL0c9tgJTNLCRkC3VltY6Da2Q925f8w1KO2qHGLi64EpoJFj88M1 0/WyHGts5pKVqjvQlpr0t4GQ5gw2HEUjX3H/02rVB+ad4LE69UGwPbjowJTD5vxb 50ifn3BiwY+3idJw32vbpa+LlgcuOrsFuXTadfDY+E8Jg4z3R8TrBsQcPtV/f93V odngAeV2rX3AFgEqr7RE8+1uXQHOQhVcqanLvHYZvhK7Rxc1kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpUY4Be9W4Bi+mctc10qZeyNbxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGE4Mzg5YzAtMDViNS0z Y2M5LTlhNDctMmYyNDY3NDAwYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN1IvR2g8bLBgbVp67ZkLnD8ea2cBzk34okSU0S29Wb4VVjyDfLwXVh sy7MjEuJ4g+sUvbdAbw/WKeAZfBv0GNuBaNyguGAkoFOVW0IJZH61xEAhKChpNf0 WelZauGkTikSzNAxhRKOKaOnuKA83i5NM3AM1Bgat0KBaiw5BbOUydg1StVO8Qir wPAw8cGhdXDLJ1Cd5KsKsTTQHy3/EF5jTIZQnd+u8wBWHvgtilZbeZ1mLxycbKx8 /dBPjxXDRdtvtqnmpKwHPQxKUP9YMmj4IWZ6y5kTZuwUMzN19V9SpiuLKG0lWMVI ZCfhj2vTM+j7EFBda/K2l2zcug9xjUo= -----END CERTIFICATE-----Generated at Sun Apr 27 01:53:31 2025 by rpki-client