$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa File: 66cb728c-d2d4-30fc-9ad1-2039318ab524.roa (raw, json) Hash identifier: Cyy3ZCiQQzXAsvPXBaKSFUMJLd7vdMwMx2TmhATAh60= Subject key identifier: 11:55:BE:7F:91:94:74:7C:B9:C5:F6:B1:2A:CF:86:9B:69:C6:D6:67 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849FCAA7FCE7C6470F00A5A4F00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 20940 IP address blocks: 165.254.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7f:ce:7c:64:70:f0:0a:5a:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=12cd0479-a675-44a0-85e2-098450a5059f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:af:9c:f0:82:ba:36:eb:6b:73:30:f0:b4: 37:74:f5:a2:0a:a9:f1:45:4b:d9:2a:a3:a2:2b:5f: ac:57:16:03:4a:72:3e:50:50:8e:13:fd:93:04:a8: 16:df:c9:c4:94:84:67:1a:d5:b0:e1:78:e0:4a:55: c7:11:83:77:57:7b:58:a2:40:f7:b8:aa:a2:25:50: 1b:a4:53:bb:97:fe:a7:5f:ee:e2:26:63:3d:a5:b8: e1:f4:14:cd:eb:5b:29:2b:a6:97:cc:01:e6:c6:d1: 39:ac:00:b8:3e:b6:14:c9:96:2a:9a:2a:2a:68:c1: 72:13:fe:f5:a9:9b:a4:28:99:11:15:17:c7:9f:38: 5f:1f:35:0d:44:42:a2:fe:38:60:d6:e0:db:79:6e: 9f:f4:4b:09:1a:cf:ac:39:04:5c:37:4a:71:4e:d7: 24:e6:a1:e3:67:ad:18:f1:f9:a1:db:70:b0:5b:4c: 07:f2:b7:3d:40:f6:9c:11:d8:37:0a:d0:80:db:1b: 8f:ae:aa:d9:ea:e1:54:0e:f2:a5:93:92:10:9a:b1: 47:ef:87:fe:78:1f:6c:1f:e9:bb:75:c2:26:cc:09: 39:4e:5c:8a:13:7b:a3:af:c6:e0:bf:f0:53:36:ee: 6c:cd:69:c7:10:e1:1f:d9:55:6f:8e:7d:9c:2c:b3: 8b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:55:BE:7F:91:94:74:7C:B9:C5:F6:B1:2A:CF:86:9B:69:C6:D6:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:fc:21:99:0f:4f:41:e1:12:62:e2:db:94:9e:56:83:12:63: 2e:6a:18:03:36:19:80:f4:d1:1c:66:f8:58:f3:a2:48:6f:ae: 6d:4e:85:73:1d:20:3a:b4:ac:a6:7e:ee:03:21:49:fc:3c:76: 5d:f6:86:5f:eb:dd:9d:19:49:0d:cd:1a:a1:da:62:7b:eb:c2: 83:53:c8:3c:48:83:f4:e6:7a:d8:e5:39:38:87:0f:13:48:39: e7:b3:03:54:6d:ff:6a:20:87:e5:ac:36:43:3c:e2:71:47:fd: 93:0e:0c:9c:82:19:f9:3b:e4:78:32:e7:d5:ae:f8:14:71:f3: 7c:27:87:e9:f4:eb:12:92:1a:98:a2:0f:8e:a7:07:77:2d:62: ca:7f:d5:95:ca:48:90:bf:ef:cf:d2:8f:fb:c9:80:69:75:b6: 1e:83:5c:d0:c6:81:ec:47:60:25:7d:35:e5:91:c4:6c:27:2f: 92:ac:f7:99:88:d3:bc:6a:18:6d:8c:e4:16:fc:79:f9:62:5e: 24:65:3c:b7:8a:99:8f:8f:58:2e:d6:83:ae:03:14:a7:4f:ee: fa:86:1a:e7:90:00:68:81:d6:57:c2:17:96:4c:d9:cd:f6:8e: aa:14:d5:9c:4f:8a:46:2b:b7:a0:d7:69:10:7c:97:85:74:f3: f6:af:48:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qn/OfGRw8ApaTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MTJjZDA0NzktYTY3NS00NGEwLTg1ZTItMDk4NDUwYTUwNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKGvnPCCujbra3Mw8LQ3dPWiCqnxRUvZKqOi K1+sVxYDSnI+UFCOE/2TBKgW38nElIRnGtWw4XjgSlXHEYN3V3tYokD3uKqiJVAb pFO7l/6nX+7iJmM9pbjh9BTN61spK6aXzAHmxtE5rAC4PrYUyZYqmioqaMFyE/71 qZukKJkRFRfHnzhfHzUNREKi/jhg1uDbeW6f9EsJGs+sOQRcN0pxTtck5qHjZ60Y 8fmh23CwW0wH8rc9QPacEdg3CtCA2xuPrqrZ6uFUDvKlk5IQmrFH74f+eB9sH+m7 dcImzAk5TlyKE3ujr8bgv/BTNu5szWnHEOEf2VVvjn2cLLOLrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFVvn+RlHR8ucX2sSrPhptpxtZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjZjYjcyOGMtZDJkNC0z MGZjLTlhZDEtMjAzOTMxOGFiNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET8IZkPT0HhEmLi25SeVoMSYy5qGAM2GYD00Rxm+Fjzokhvrm1OhXMd IDq0rKZ+7gMhSfw8dl32hl/r3Z0ZSQ3NGqHaYnvrwoNTyDxIg/TmetjlOTiHDxNI OeezA1Rt/2ogh+WsNkM84nFH/ZMODJyCGfk75Hgy59Wu+BRx83wnh+n06xKSGpii D46nB3ctYsp/1ZXKSJC/78/Sj/vJgGl1th6DXNDGgexHYCV9NeWRxGwnL5Ks95mI 07xqGG2M5Bb8efliXiRlPLeKmY+PWC7Wg64DFKdP7vqGGueQAGiB1lfCF5ZM2c32 jqoU1ZxPikYrt6DXaRB8l4V08/avSLg= -----END CERTIFICATE-----Generated at Sun Jun 15 12:33:57 2025 by rpki-client