$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/533c307d-190d-313d-9dc9-d26717cac75d.roa File: 533c307d-190d-313d-9dc9-d26717cac75d.roa (raw, json) Hash identifier: dwtGFlu4IQWdlNmVhvdqZjuin7DVIXXffpD3OP4f03U= Subject key identifier: F6:3F:8F:B8:46:D8:02:28:26:70:F7:F8:BF:36:5C:D2:36:2B:6A:81 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A03A54BFBAAF313537AD6D400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/533c307d-190d-313d-9dc9-d26717cac75d.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 399469 IP address blocks: 165.254.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4b:fb:aa:f3:13:53:7a:d6:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=5e948cb4-8db2-4bf3-8ee0-a8c49e5cacd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:05:6a:ad:a6:54:ee:49:8c:46:c5:64:91:e9: e9:25:68:bd:f7:d3:a0:db:c1:e1:fd:9c:a5:13:da: 10:fe:df:21:6c:7e:6e:f2:97:eb:1d:51:dd:59:8b: 04:25:2c:95:b6:16:32:50:dc:16:f7:c0:99:f5:d9: 19:f8:b8:c1:da:5c:b0:f1:42:0f:ac:09:53:e6:dd: 3e:3d:7b:4b:dc:62:54:27:3b:51:16:c0:de:76:61: c6:a6:b1:20:d7:10:06:82:f4:14:ad:82:8b:24:f0: 64:9d:79:4c:5c:bc:bf:e6:4e:ad:87:11:3e:c9:03: e6:76:30:55:04:79:d2:b5:0c:75:08:90:08:c0:b0: d8:53:c2:fc:bd:b3:48:a0:85:aa:4e:e1:51:07:b1: a2:52:a6:cc:b7:45:2f:1d:83:ad:37:c7:26:78:cb: e3:65:62:be:75:cf:f3:42:73:09:79:d0:5b:20:66: d5:90:14:49:48:e8:40:fc:fd:0f:e7:36:73:c1:bc: a4:75:40:e4:56:23:5a:25:56:01:01:c7:10:e9:49: f7:62:78:28:a5:88:34:12:35:8d:ae:c9:68:dd:14: 42:17:d4:28:1d:9c:1c:ac:24:ab:c1:2c:c8:d6:56: ae:f3:60:e6:4b:a1:8a:20:32:fc:f3:e1:93:0c:f2: b4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3F:8F:B8:46:D8:02:28:26:70:F7:F8:BF:36:5C:D2:36:2B:6A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/533c307d-190d-313d-9dc9-d26717cac75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d1:7d:f0:94:ad:8c:e4:e5:fc:15:9f:b0:e4:22:8a:4f:53: b2:d1:70:61:15:60:90:77:63:05:36:fa:8b:12:a0:cc:94:67: 78:54:ce:ad:f5:36:30:94:f3:e3:99:3f:7c:0e:8a:61:c1:dc: f4:73:9f:42:65:3e:1a:e1:6e:af:4b:98:c7:0e:73:d0:32:57: 3c:78:5b:80:e7:83:31:f9:c8:d9:e5:d3:61:fa:6f:40:c0:dd: 1d:42:f1:2c:52:de:a7:8b:d2:39:64:ee:24:3d:b0:84:7f:b9: 92:a6:69:6b:4e:4d:38:40:24:0d:5e:ac:f4:2b:f5:04:56:55: 1a:cb:90:47:d2:00:f2:3b:82:75:b8:ea:89:90:fa:a7:a5:ca: af:c2:ef:85:6f:c7:ef:d7:23:2e:37:60:2b:98:c3:d0:b4:af: df:46:13:0d:45:26:af:d2:e3:c1:33:1e:58:e4:b3:f4:ea:f4: b6:ab:68:a7:b2:c7:3e:6e:d9:2b:01:a4:12:dc:c3:33:7d:34: b6:2b:05:e6:94:23:c3:fa:35:92:11:49:7c:5f:77:e2:8a:7b: c4:c6:d8:35:a6:cf:bf:35:5e:a9:12:f0:53:63:8a:14:0d:03: 41:f9:fb:1e:49:c5:e9:5d:69:d3:d2:bd:9c:b9:89:d5:fe:1f: c6:76:49:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUv7qvMTU3rW1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NWU5NDhjYjQtOGRiMi00YmYzLThlZTAtYThjNDllNWNhY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQVqraZU7kmMRsVkkenpJWi999Og28Hh/Zyl E9oQ/t8hbH5u8pfrHVHdWYsEJSyVthYyUNwW98CZ9dkZ+LjB2lyw8UIPrAlT5t0+ PXtL3GJUJztRFsDedmHGprEg1xAGgvQUrYKLJPBknXlMXLy/5k6thxE+yQPmdjBV BHnStQx1CJAIwLDYU8L8vbNIoIWqTuFRB7GiUqbMt0UvHYOtN8cmeMvjZWK+dc/z QnMJedBbIGbVkBRJSOhA/P0P5zZzwbykdUDkViNaJVYBAccQ6Un3YngopYg0EjWN rslo3RRCF9QoHZwcrCSrwSzI1lau82DmS6GKIDL88+GTDPK03QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPY/j7hG2AIoJnD3+L82XNI2K2qBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTMzYzMwN2QtMTkwZC0z MTNkLTlkYzktZDI2NzE3Y2FjNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpf5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3RffCUrYzk5fwVn7DkIopPU7LRcGEVYJB3YwU2+osSoMyUZ3hUzq31 NjCU8+OZP3wOimHB3PRzn0JlPhrhbq9LmMcOc9AyVzx4W4DngzH5yNnl02H6b0DA 3R1C8SxS3qeL0jlk7iQ9sIR/uZKmaWtOTThAJA1erPQr9QRWVRrLkEfSAPI7gnW4 6omQ+qelyq/C74Vvx+/XIy43YCuYw9C0r99GEw1FJq/S48EzHljks/Tq9LaraKey xz5u2SsBpBLcwzN9NLYrBeaUI8P6NZIRSXxfd+KKe8TG2DWmz781XqkS8FNjihQN A0H5+x5JxeldadPSvZy5idX+H8Z2SRc= -----END CERTIFICATE-----Generated at Sun Jun 15 17:38:41 2025 by rpki-client