$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa File: aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa (raw, json) Hash identifier: AcZ4+ilvENLyPOYEFsax791bsY5gi0QyJE+57n5yHmk= Subject key identifier: 31:93:8F:64:01:79:5C:99:48:63:C8:D8:B8:0A:7C:AE:4A:21:FD:78 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849F7151980DC4F8DA26E8A7D80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 40816 IP address blocks: 165.254.137.0/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:19:80:dc:4f:8d:a2:6e:8a:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=32844e0d-0299-4064-a56d-28d324c15c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:84:dd:d4:d2:7f:94:7e:fd:e4:17:29:8e:7f: c3:14:58:e5:1a:6c:02:84:6b:d2:dd:52:a1:f3:83: c7:d8:da:a4:96:b4:da:5c:15:7d:71:a8:08:7c:a0: 7e:9c:6f:ef:bc:f3:9a:f3:36:6b:04:9b:03:e0:e3: 62:1a:7f:df:a9:50:26:1c:ec:a0:7f:ca:90:a4:7f: 43:5b:45:fb:e9:30:fe:89:42:71:fc:c0:d9:9b:6a: ea:0c:61:30:63:32:a8:6a:4e:0f:e6:45:b0:dd:17: 78:d1:e5:63:48:94:a7:34:db:f6:2f:05:72:ab:84: e2:fd:70:98:5d:38:d9:01:8a:52:f5:33:07:7d:fb: 28:9b:11:ca:ce:7b:07:bb:ec:2e:6d:97:39:03:80: fe:00:67:5c:77:5c:1d:37:2c:94:fe:97:b1:8b:f9: e7:68:52:b1:df:b9:eb:53:d0:4f:a7:d7:0f:7b:67: b2:72:17:06:1b:ad:75:1b:af:75:ae:f2:79:d3:87: df:7f:8c:a7:90:12:24:0b:e9:77:55:1f:d5:dc:b9: ae:af:6c:b1:d3:f0:6e:3d:e6:df:20:ad:67:82:82: 2f:54:a0:55:72:f8:57:c0:d1:b8:38:20:7d:87:c7: 78:ed:a0:0e:4a:df:5e:4c:82:a9:ec:ab:78:6e:fe: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:93:8F:64:01:79:5C:99:48:63:C8:D8:B8:0A:7C:AE:4A:21:FD:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.137.0/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:6c:3e:19:eb:d0:59:48:d7:09:ba:c6:77:9a:04:b6:d4:74: 02:72:e1:be:47:a7:71:90:37:4f:18:77:25:1f:6e:d5:f5:52: 9b:60:19:77:6f:6a:68:8d:d7:df:b2:09:0d:10:5b:2c:bc:bd: 3f:1a:74:3b:77:76:99:d6:4b:2c:4e:2f:48:9b:3a:15:9b:c4: ca:e6:a7:ee:37:d6:0c:4a:66:4b:1f:36:25:33:d6:18:55:65: 00:cc:55:bd:6e:14:25:4d:b2:01:a9:d2:a5:9d:f0:49:1f:3e: 90:86:a8:6b:c1:78:16:5c:75:95:8e:ed:87:85:50:b6:e0:a2: 01:d1:48:da:0a:d8:39:78:ea:50:cb:53:cb:d5:fd:7a:10:be: 22:fa:2c:e7:63:2f:33:a3:13:89:a4:66:56:70:69:da:65:97: db:bf:aa:d1:8c:e7:05:35:28:53:dd:80:cb:16:71:5e:5d:4a: 5e:0d:84:b6:c0:72:66:74:1f:fc:47:7a:e4:e4:d7:43:b7:50: cc:56:31:a2:51:49:8f:e2:78:57:1c:4c:ce:f1:15:af:92:68: 4d:2e:b9:34:51:6f:64:1b:ab:5e:bf:bf:46:cf:77:bd:92:35: ea:1d:f5:2a:01:fa:ec:05:4d:16:da:83:bb:0f:8c:e6:1d:02: 81:86:35:2d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn3FRmA3E+Nom6KfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MzI4NDRlMGQtMDI5OS00MDY0LWE1NmQtMjhkMzI0YzE1Yzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YTd1NJ/lH795Bcpjn/DFFjlGmwChGvS3VKh 84PH2NqklrTaXBV9cagIfKB+nG/vvPOa8zZrBJsD4ONiGn/fqVAmHOygf8qQpH9D W0X76TD+iUJx/MDZm2rqDGEwYzKoak4P5kWw3Rd40eVjSJSnNNv2LwVyq4Ti/XCY XTjZAYpS9TMHffsomxHKznsHu+wubZc5A4D+AGdcd1wdNyyU/pexi/nnaFKx37nr U9BPp9cPe2eychcGG611G691rvJ504fff4ynkBIkC+l3VR/V3Lmur2yx0/BuPebf IK1ngoIvVKBVcvhXwNG4OCB9h8d47aAOSt9eTIKp7Kt4bv48UQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDGTj2QBeVyZSGPI2LgKfK5KIf14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWE3ZjM3MTMtYzgxMC0z MWMxLTk0YWYtNzNhYTRiYjBmYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDpf6JADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCpbD4Z69BZSNcJusZ3mgS21HQCcuG+R6dxkDdPGHclH27V9VKbYBl3 b2pojdffsgkNEFssvL0/GnQ7d3aZ1kssTi9ImzoVm8TK5qfuN9YMSmZLHzYlM9YY VWUAzFW9bhQlTbIBqdKlnfBJHz6QhqhrwXgWXHWVju2HhVC24KIB0UjaCtg5eOpQ y1PL1f16EL4i+iznYy8zoxOJpGZWcGnaZZfbv6rRjOcFNShT3YDLFnFeXUpeDYS2 wHJmdB/8R3rk5NdDt1DMVjGiUUmP4nhXHEzO8RWvkmhNLrk0UW9kG6tev79Gz3e9 kjXqHfUqAfrsBU0W2oO7D4zmHQKBhjUt -----END CERTIFICATE-----Generated at Sun Jun 15 17:39:40 2025 by rpki-client