$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aac50a8c-41ea-301c-8c39-ebf4168f53b5.roa File: aac50a8c-41ea-301c-8c39-ebf4168f53b5.roa (raw, json) Hash identifier: sXwOQIkkZY4QQysnYk/0SD40Y4A5695ax5CGtWus+tQ= Subject key identifier: 4C:1D:D1:30:33:4A:10:9F:DB:62:B2:67:33:F7:75:9B:30:EE:0D:1B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A050A7914EFFBB3B14BAB8500 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aac50a8c-41ea-301c-8c39-ebf4168f53b5.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 393930 IP address blocks: 165.254.53.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:79:14:ef:fb:b3:b1:4b:ab:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=ad364863-c615-447e-af0f-3c4f4104e143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:11:b4:5e:11:19:56:00:e2:9a:b9:8a:a1: 88:d0:b1:4f:43:2b:4b:af:77:c9:d0:1e:51:16:8c: 3b:56:bb:50:01:e6:cc:8d:ae:93:51:6e:a6:ad:5a: 6d:b3:0c:df:2a:3b:50:a5:15:3e:a4:94:4a:8c:e4: 68:3c:ec:12:a3:30:22:6d:d1:47:69:33:7e:17:64: 70:66:b7:df:ff:40:b9:e4:71:33:72:3a:ac:88:c6: 04:a8:bf:f3:d5:67:b6:f7:99:8a:0d:65:35:ea:ce: 75:ba:58:5b:ff:55:33:ee:0e:66:ad:93:7a:5d:a2: cc:5f:48:8b:f0:0b:e8:1f:78:1c:77:e7:8f:cf:44: 12:63:9f:f2:dc:f8:f2:24:8e:c5:12:aa:5c:6e:fe: a6:d9:ca:1e:7f:f2:62:07:92:05:bd:06:5d:23:4c: 6f:ac:a4:d3:86:79:72:80:54:4f:d3:4b:3b:9d:0e: c0:b4:69:17:4b:4c:a1:db:4b:58:2d:0f:c2:08:ad: 2f:3e:0e:ca:45:b7:ff:80:01:36:89:e5:e8:86:3a: 49:57:c4:ba:86:a5:4d:39:8e:06:2e:14:86:79:62: 7e:b2:98:f1:3d:7a:d9:53:54:3c:63:10:e7:45:6a: 99:f5:00:8a:88:42:3a:a5:89:be:56:1b:fc:22:82: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1D:D1:30:33:4A:10:9F:DB:62:B2:67:33:F7:75:9B:30:EE:0D:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aac50a8c-41ea-301c-8c39-ebf4168f53b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8c:db:76:5a:fb:f8:09:4f:b2:c2:3d:85:79:be:54:7c:75: 48:99:29:8e:f7:90:af:70:56:bf:0c:59:0b:e3:fe:4a:27:7a: 1a:f9:6b:b8:e7:a2:94:8f:0a:08:de:75:19:1f:7f:b8:59:e1: 36:4c:c9:b6:9b:31:08:67:b3:e9:2b:6e:36:8e:65:aa:f2:86: bc:f6:21:5b:26:94:7f:af:9c:f1:3c:7f:57:f4:2c:79:c4:f4: 64:af:74:26:a8:a7:e0:96:33:76:ae:ed:36:d8:d9:cf:d8:83: 3a:d0:9c:32:27:ad:02:8d:f5:65:3a:3e:b6:24:74:0a:52:90: aa:8f:99:36:c8:b5:e6:3e:64:82:b6:0f:60:39:f5:2c:fe:01: b1:35:fe:e1:b5:92:48:84:e9:0a:fe:e6:95:0a:6c:85:94:33: 93:ae:b6:bf:5b:26:8d:9c:06:68:e8:db:8e:16:eb:c4:13:cd: 1e:13:12:36:5f:95:e9:cc:7d:0f:bd:3f:97:37:fb:bb:2a:da: d8:62:6b:9d:84:af:80:3f:19:c9:84:fd:2f:9c:6f:f2:e8:fc: bb:eb:d3:93:f3:8e:e8:ea:4b:9b:e5:59:91:d6:2b:71:75:be: 39:84:1b:2c:a0:b8:a0:4a:89:3d:52:12:6f:90:23:96:9e:d8: 73:2e:7f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnkU7/uzsUurhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk YWQzNjQ4NjMtYzYxNS00NDdlLWFmMGYtM2M0ZjQxMDRlMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFIRtF4RGVYA4pq5iqGI0LFPQytLr3fJ0B5R Fow7VrtQAebMja6TUW6mrVptswzfKjtQpRU+pJRKjORoPOwSozAibdFHaTN+F2Rw Zrff/0C55HEzcjqsiMYEqL/z1We295mKDWU16s51ulhb/1Uz7g5mrZN6XaLMX0iL 8AvoH3gcd+ePz0QSY5/y3PjyJI7FEqpcbv6m2coef/JiB5IFvQZdI0xvrKTThnly gFRP00s7nQ7AtGkXS0yh20tYLQ/CCK0vPg7KRbf/gAE2ieXohjpJV8S6hqVNOY4G LhSGeWJ+spjxPXrZU1Q8YxDnRWqZ9QCKiEI6pYm+Vhv8IoLApwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwd0TAzShCf22KyZzP3dZsw7g0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWFjNTBhOGMtNDFlYS0z MDFjLThjMzktZWJmNDE2OGY1M2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiM23Za+/gJT7LCPYV5vlR8dUiZKY73kK9wVr8MWQvj/konehr5a7jn opSPCgjedRkff7hZ4TZMybabMQhns+krbjaOZaryhrz2IVsmlH+vnPE8f1f0LHnE 9GSvdCaop+CWM3au7TbY2c/YgzrQnDInrQKN9WU6PrYkdApSkKqPmTbIteY+ZIK2 D2A59Sz+AbE1/uG1kkiE6Qr+5pUKbIWUM5Outr9bJo2cBmjo244W68QTzR4TEjZf lenMfQ+9P5c3+7sq2thia52Er4A/GcmE/S+cb/Lo/Lvr05PzjujqS5vlWZHWK3F1 vjmEGyyguKBKiT1SEm+QI5ae2HMuf5k= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:44 2025 by rpki-client