$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da98e5f-2213-3af7-9305-6228e9005054.roa File: 8da98e5f-2213-3af7-9305-6228e9005054.roa (raw, json) Hash identifier: p/YcHJcJY+zzeIffY00uLXvwKjduPnAmDHpVn3qC+fQ= Subject key identifier: 86:82:75:C9:07:2F:8D:04:6E:DC:5A:04:CF:B2:01:25:6B:0A:6F:5B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849F87A82F2588D18F7C10BC180 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da98e5f-2213-3af7-9305-6228e9005054.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 2914 IP address blocks: 165.254.119.64/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:82:f2:58:8d:18:f7:c1:0b:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=edc6650f-f47e-427d-9d47-311c7fc31d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1f:79:a7:67:86:2b:40:d8:84:0c:05:a7:8c: ed:81:3c:53:bf:8f:b1:e7:1c:87:83:99:84:da:61: ca:ba:a3:77:47:65:22:61:62:23:8a:a8:85:d4:20: 58:db:84:1b:29:7c:3e:b7:61:ab:a5:b3:1c:a2:ee: dd:d9:a7:f3:4a:a4:66:42:d7:17:e5:2a:41:4b:01: 55:55:a6:21:66:4a:30:8f:f9:9c:e6:b1:c9:09:db: 76:ea:00:8b:c6:3c:d1:73:e6:b6:a6:d7:b4:2d:7f: 2b:85:78:0e:73:54:8d:b1:b6:2d:cb:c4:a4:76:42: 39:d4:f5:bb:9b:ac:26:4f:7a:bc:61:84:da:ba:77: dc:d5:26:21:85:87:8e:72:52:e1:ee:b6:5a:dd:c7: da:6a:a5:83:67:37:ab:20:36:cc:83:91:8e:98:42: 94:64:63:5a:a5:2b:40:35:50:59:24:c9:37:bc:cd: cd:8b:d5:e7:9c:bb:3e:ab:ba:dc:cf:04:da:7d:da: 23:8a:98:91:49:4d:5d:c5:b5:99:fc:7d:92:47:63: 0b:7d:a1:c0:cf:ab:4a:66:ac:26:98:a4:75:a2:21: 20:d5:2e:db:8a:eb:69:e3:b1:66:43:9f:58:22:dd: 29:b7:f2:cd:f4:f7:90:50:f3:0f:cf:34:40:18:b9: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:82:75:C9:07:2F:8D:04:6E:DC:5A:04:CF:B2:01:25:6B:0A:6F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da98e5f-2213-3af7-9305-6228e9005054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.119.64/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:cf:24:0c:cb:8e:0a:b1:c2:41:3a:54:64:7c:10:1e:ca:ce: 05:d0:11:5f:d3:53:f6:7a:4d:de:c0:fe:eb:86:65:f4:de:9d: 72:f5:68:e5:37:bb:3c:0f:02:dd:72:23:e9:a4:5d:c7:d0:90: 67:bf:8a:8d:94:5b:41:52:a2:ca:df:28:5d:f2:72:b6:54:2b: e3:05:51:61:ec:d0:7f:4e:11:3d:30:c6:9c:54:e1:20:a0:29: 3f:51:fb:ad:8c:01:8a:e0:0a:44:16:aa:6d:29:c9:4c:87:dd: 52:4b:6e:9a:32:df:d0:ff:75:01:ec:57:57:6c:41:c1:84:75: c1:4b:ea:60:31:8f:82:b0:99:f7:fb:1b:5a:4d:57:1f:84:02: 3e:dc:e1:6a:e5:cd:76:27:76:10:56:68:f6:14:db:5b:fd:6c: e1:c1:ab:d4:d6:07:e3:9d:e7:9e:3b:67:b0:1e:88:3f:8a:5d: fa:c4:59:72:1a:41:97:79:75:a7:17:04:8b:f3:58:15:82:4f: 5f:f6:da:d4:42:79:ce:81:81:f5:0e:b7:8b:24:5b:0a:5a:33: 4f:5f:ed:f4:2f:cf:b8:6b:db:e0:6b:0d:b0:6b:ad:26:33:6c: f5:8a:b3:92:7e:3e:af:40:94:82:13:34:2b:05:75:cc:f9:d6: f8:3e:1e:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn4eoLyWI0Y98ELwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk ZWRjNjY1MGYtZjQ3ZS00MjdkLTlkNDctMzExYzdmYzMxZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR95p2eGK0DYhAwFp4ztgTxTv4+x5xyHg5mE 2mHKuqN3R2UiYWIjiqiF1CBY24QbKXw+t2GrpbMcou7d2afzSqRmQtcX5SpBSwFV VaYhZkowj/mc5rHJCdt26gCLxjzRc+a2pte0LX8rhXgOc1SNsbYty8SkdkI51PW7 m6wmT3q8YYTaunfc1SYhhYeOclLh7rZa3cfaaqWDZzerIDbMg5GOmEKUZGNapStA NVBZJMk3vM3Ni9XnnLs+q7rczwTafdojipiRSU1dxbWZ/H2SR2MLfaHAz6tKZqwm mKR1oiEg1S7biutp47FmQ59YIt0pt/LN9PeQUPMPzzRAGLk9AwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIaCdckHL40EbtxaBM+yASVrCm9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGRhOThlNWYtMjIxMy0z YWY3LTkzMDUtNjIyOGU5MDA1MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFpf53QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgzyQMy44KscJBOlRkfBAeys4F0BFf01P2ek3ewP7rhmX03p1y9Wjl N7s8DwLdciPppF3H0JBnv4qNlFtBUqLK3yhd8nK2VCvjBVFh7NB/ThE9MMacVOEg oCk/UfutjAGK4ApEFqptKclMh91SS26aMt/Q/3UB7FdXbEHBhHXBS+pgMY+CsJn3 +xtaTVcfhAI+3OFq5c12J3YQVmj2FNtb/WzhwavU1gfjneeeO2ewHog/il36xFly GkGXeXWnFwSL81gVgk9f9trUQnnOgYH1DreLJFsKWjNPX+30L8+4a9vgaw2wa60m M2z1irOSfj6vQJSCEzQrBXXM+db4Ph5p -----END CERTIFICATE-----Generated at Sun Jun 15 13:22:32 2025 by rpki-client