$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4fa9afc1-5c22-377e-be09-f3d5bb8128c1.roa File: 4fa9afc1-5c22-377e-be09-f3d5bb8128c1.roa (raw, json) Hash identifier: LEEpiN5lbDaEPgCAIfZIsOYhfBczVV3Z+moWM/afUac= Subject key identifier: 19:16:5E:6C:D6:15:80:F8:FF:51:C3:8E:CC:32:C2:9F:E4:44:BC:3D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A25AC54745EB81F54FB627A80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4fa9afc1-5c22-377e-be09-f3d5bb8128c1.roa Signing time: Tue 10 Jun 2025 17:32:54 +0000 ROA not before: Tue 10 Jun 2025 17:32:54 +0000 ROA not after: Mon 08 Sep 2025 17:32:54 +0000 asID: 3939 IP address blocks: 165.254.224.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:ac:54:74:5e:b8:1f:54:fb:62:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 10 17:32:54 2025 GMT Not After : Sep 8 17:32:54 2025 GMT Subject: CN=c19d4649-9fd2-43ef-b7f2-e86b5a284090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:83:91:e6:aa:44:ba:79:8a:e7:e9:e6:02:53: 30:ef:bf:af:d9:da:79:fc:99:2e:fa:dd:4e:04:fc: 20:df:d4:1d:76:45:8e:4e:c0:ad:97:a6:c6:38:61: 7f:82:2b:8e:74:26:42:d1:7f:71:8e:32:b5:63:8d: 8d:06:26:65:4a:4c:b0:37:5d:78:f1:23:25:b1:0a: ce:20:bb:e1:4b:b4:e7:21:c3:05:01:cc:6b:2f:e7: bb:f5:27:dc:8b:f8:cb:54:09:51:04:c2:dc:4e:1f: 9c:c2:58:7b:97:c3:ec:3f:0c:33:e0:55:f1:24:a8: c0:d2:ea:d5:94:2d:5f:40:78:94:e1:e3:2e:50:20: 3b:79:8f:a0:a7:fe:81:e4:da:6e:fb:97:ba:9d:e2: 34:59:3d:c5:c6:47:31:88:9d:8d:68:0a:cb:54:20: 6d:a4:f6:17:1f:f1:f3:2d:eb:e6:df:ee:2f:2a:d2: cc:48:50:55:19:3d:48:62:3a:7a:95:e7:dc:13:f2: cc:fc:10:5c:ea:39:dd:ff:5e:ca:49:9e:c5:9e:a0: 83:b8:28:60:0d:91:23:5d:61:44:96:ac:f4:ea:5d: 0d:47:dd:4c:13:96:fb:d1:8f:84:b8:e8:f8:fb:6f: 9a:c5:71:34:7a:46:4b:86:0c:8b:7d:4a:3c:3d:28: 8a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:16:5E:6C:D6:15:80:F8:FF:51:C3:8E:CC:32:C2:9F:E4:44:BC:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4fa9afc1-5c22-377e-be09-f3d5bb8128c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.224.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:da:e8:24:c5:aa:a4:58:54:b4:e1:8d:7e:83:c6:2a:50:5c: d9:17:6a:00:01:3c:3e:3f:8f:e7:1b:01:97:84:a8:0f:80:6e: d8:52:27:3c:3b:d2:53:81:0f:91:cb:e7:6f:a8:dc:4b:74:2e: 75:ca:8a:69:95:a5:2f:7e:0b:f2:5d:98:41:2d:af:c6:77:14: b5:4a:7b:48:80:92:33:fe:a3:11:1f:57:b9:95:ae:d3:68:16: 34:53:41:5a:a5:85:78:4e:d1:a2:40:42:00:f5:25:9d:bd:a9: 28:76:72:7a:5a:66:51:a4:cd:45:07:5c:6a:b1:6e:47:0d:53: eb:56:36:c4:dc:5c:4d:22:2c:5f:53:29:0c:3c:fa:75:02:22: 65:e2:96:13:8b:f3:61:2a:82:39:4f:47:c2:2e:b7:ce:d1:e0: 8b:67:4b:95:3d:d8:95:b3:8f:39:57:32:ad:29:1c:8f:97:87: 6e:08:5f:83:6a:0f:f2:df:1d:da:ef:9b:c4:ab:4c:7d:c2:02: e2:5f:12:ed:8e:40:93:1a:31:e7:2b:32:c1:2a:20:b1:6a:95: c1:28:67:4a:81:59:5c:63:db:2e:3f:51:d4:19:3f:e8:c4:2e: 5d:c3:3e:54:36:53:5c:df:08:11:8f:5a:de:9c:62:bb:4d:1b: 98:9a:4a:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEolrFR0XrgfVPtieoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYxMDE3MzI1NFoXDTI1MDkwODE3MzI1NFowLzEtMCsGA1UEAxMk YzE5ZDQ2NDktOWZkMi00M2VmLWI3ZjItZTg2YjVhMjg0MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YOR5qpEunmK5+nmAlMw77+v2dp5/Jku+t1O BPwg39QddkWOTsCtl6bGOGF/giuOdCZC0X9xjjK1Y42NBiZlSkywN1148SMlsQrO ILvhS7TnIcMFAcxrL+e79Sfci/jLVAlRBMLcTh+cwlh7l8PsPwwz4FXxJKjA0urV lC1fQHiU4eMuUCA7eY+gp/6B5Npu+5e6neI0WT3FxkcxiJ2NaArLVCBtpPYXH/Hz Levm3+4vKtLMSFBVGT1IYjp6lefcE/LM/BBc6jnd/17KSZ7FnqCDuChgDZEjXWFE lqz06l0NR91ME5b70Y+EuOj4+2+axXE0ekZLhgyLfUo8PSiKEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBkWXmzWFYD4/1HDjswywp/kRLw9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGZhOWFmYzEtNWMyMi0z NzdlLWJlMDktZjNkNWJiODEyOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf7ggDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCo2ugkxaqkWFS04Y1+g8YqUFzZF2oAATw+P4/nGwGXhKgPgG7YUic8 O9JTgQ+Ry+dvqNxLdC51yopplaUvfgvyXZhBLa/GdxS1SntIgJIz/qMRH1e5la7T aBY0U0FapYV4TtGiQEIA9SWdvakodnJ6WmZRpM1FB1xqsW5HDVPrVjbE3FxNIixf UykMPPp1AiJl4pYTi/NhKoI5T0fCLrfO0eCLZ0uVPdiVs485VzKtKRyPl4duCF+D ag/y3x3a75vEq0x9wgLiXxLtjkCTGjHnKzLBKiCxapXBKGdKgVlcY9suP1HUGT/o xC5dwz5UNlNc3wgRj1renGK7TRuYmkqj -----END CERTIFICATE-----Generated at Sun Jun 15 15:36:04 2025 by rpki-client