$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa File: 577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa (raw, json) Hash identifier: OPExi8rvb8eIzRZPGWTls4qfW8vdX8/VGkOZYhW/C1A= Subject key identifier: 5F:5F:01:10:6F:14:8C:A2:4C:35:5D:1F:28:4A:60:48:E4:D4:D6:2C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858491D7186C7B4C8ACAA81597440 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 22006 IP address blocks: 165.254.238.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:86:c7:b4:c8:ac:aa:81:59:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=9888a5d1-2451-49b5-8ffd-e3913c122b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:0f:9c:03:b4:2e:d2:4a:94:0a:3f:1e:30: ea:df:a1:59:7c:df:87:45:16:ba:4c:18:67:6c:1c: bd:4e:a8:60:46:03:99:11:41:51:14:e4:52:90:70: 55:0c:6b:ae:08:b9:35:62:59:1e:fe:0f:ef:d8:80: 7c:a6:2b:a4:04:68:d9:fd:16:8d:0d:86:69:55:80: 9d:fa:2a:8c:64:26:64:da:c1:0b:fe:2f:09:65:57: e5:99:8d:00:f0:ca:d9:9d:85:19:bb:68:16:d3:2a: fb:66:ba:98:3f:d1:b8:b9:63:d8:05:ba:8c:b7:79: 6d:43:40:44:03:6f:03:fe:ef:14:26:96:c4:db:95: a7:a3:81:e3:64:cd:d4:16:77:53:14:e9:86:99:22: ac:c8:50:a2:4a:ff:58:eb:ea:89:25:1f:db:b9:84: 10:40:c4:d2:d0:c1:a1:30:e2:32:e3:40:62:b4:38: f1:b7:18:7c:07:93:34:65:53:bd:c9:3a:48:43:ed: 0c:d5:14:4a:ce:6c:36:e1:63:b5:41:c4:18:87:b7: ca:0b:a7:fe:2a:e3:05:3a:a7:47:48:53:73:f7:c5: 51:9b:bb:ea:72:f9:e5:08:68:c8:98:c1:1e:df:ad: ed:12:d5:77:2e:52:8d:56:8b:35:1e:3e:79:eb:b3: 90:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5F:01:10:6F:14:8C:A2:4C:35:5D:1F:28:4A:60:48:E4:D4:D6:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.238.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b7:68:d1:99:94:8c:b1:0a:93:22:1f:12:1e:2d:34:e1:c1: 7e:95:31:4c:a9:a6:be:e1:a1:16:82:69:ba:3b:be:4c:67:07: 28:5e:32:ae:f4:99:1b:21:97:89:4c:b1:50:77:fd:f5:f3:49: 2b:51:0e:80:c2:4d:d1:00:52:72:0f:8d:22:fd:c4:54:f4:91: 43:59:2e:d4:d1:da:29:73:1e:2b:c2:29:8b:ef:6f:eb:da:a0: 1f:9a:c9:dd:c5:88:fe:68:6e:b4:a2:94:4c:be:f8:06:d4:4b: ef:d1:f4:43:b6:95:f8:0c:65:f2:28:46:aa:4d:40:af:a3:d2: fb:fe:db:09:70:21:b9:8a:e2:d5:29:a7:d3:d6:ba:66:0a:e6: 8f:77:68:7e:26:22:ce:3a:6b:4a:30:ea:67:b7:24:2f:fc:e2: b9:0d:91:4b:8a:54:55:c5:7f:6e:17:f0:86:9b:09:14:d6:69: 96:0d:60:00:7a:30:d3:59:52:7c:b2:16:f9:39:7c:c6:e7:ee: 6f:ed:eb:70:e7:ec:f0:de:d4:48:a1:5f:7c:26:84:55:8d:8c: d5:bd:cc:93:07:86:5c:57:12:62:91:10:c5:5e:92:f0:00:e4: 46:76:10:e4:4f:58:ca:8c:78:b5:2f:12:6e:0e:44:a7:2f:13: e7:c0:80:70 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkdcYbHtMisqoFZdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk OTg4OGE1ZDEtMjQ1MS00OWI1LThmZmQtZTM5MTNjMTIyYjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMgPnAO0LtJKlAo/HjDq36FZfN+HRRa6TBhn bBy9TqhgRgOZEUFRFORSkHBVDGuuCLk1Ylke/g/v2IB8piukBGjZ/RaNDYZpVYCd +iqMZCZk2sEL/i8JZVflmY0A8MrZnYUZu2gW0yr7ZrqYP9G4uWPYBbqMt3ltQ0BE A28D/u8UJpbE25Wno4HjZM3UFndTFOmGmSKsyFCiSv9Y6+qJJR/buYQQQMTS0MGh MOIy40BitDjxtxh8B5M0ZVO9yTpIQ+0M1RRKzmw24WO1QcQYh7fKC6f+KuMFOqdH SFNz98VRm7vqcvnlCGjImMEe363tEtV3LlKNVos1Hj5567OQfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF9fARBvFIyiTDVdHyhKYEjk1NYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTc3YzRlYzEtNDJhOC0z NmJhLWEyZDItMTBiMTA2ZjhhODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFpf7uADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4t2jRmZSMsQqTIh8SHi004cF+lTFMqaa+4aEWgmm6O75MZwcoXjKu 9JkbIZeJTLFQd/3180krUQ6Awk3RAFJyD40i/cRU9JFDWS7U0dopcx4rwimL72/r 2qAfmsndxYj+aG60opRMvvgG1Evv0fRDtpX4DGXyKEaqTUCvo9L7/tsJcCG5iuLV KafT1rpmCuaPd2h+JiLOOmtKMOpntyQv/OK5DZFLilRVxX9uF/CGmwkU1mmWDWAA ejDTWVJ8shb5OXzG5+5v7etw5+zw3tRIoV98JoRVjYzVvcyTB4ZcVxJikRDFXpLw AORGdhDkT1jKjHi1LxJuDkSnLxPnwIBw -----END CERTIFICATE-----Generated at Sun Apr 27 11:17:36 2025 by rpki-client