$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa File: bf541b3f-d38b-3716-affa-7307e218a63b.roa (raw, json) Hash identifier: Ir2oV1DNb58NAi6qdR7l+052OfGpIxH+O5tHU8UZvdY= Subject key identifier: A1:21:6D:C9:0F:B8:E6:6F:32:B0:28:0A:88:C1:51:AD:5F:D1:79:5F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849568EB3D69DEC78D6AEC9AFC0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa Signing time: Fri 28 Mar 2025 13:00:51 +0000 ROA not before: Fri 28 Mar 2025 13:00:51 +0000 ROA not after: Thu 26 Jun 2025 13:00:51 +0000 asID: 25645 IP address blocks: 165.254.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:56:8e:b3:d6:9d:ec:78:d6:ae:c9:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 28 13:00:51 2025 GMT Not After : Jun 26 13:00:51 2025 GMT Subject: CN=b4aa6591-8819-49b7-9e14-88a7f8f349bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ec:57:40:6d:d7:a0:82:24:b5:c2:01:b2:e3: 78:0d:1e:0b:fc:f0:4d:af:86:70:57:f9:19:0b:16: c2:be:2a:44:0c:79:06:97:03:75:ae:31:b1:4f:aa: ce:47:c7:58:f9:5b:15:13:5e:6c:48:33:50:ed:b3: ec:b2:d8:b6:c8:99:de:c5:f8:fb:52:8b:71:c2:33: 92:9e:00:28:c8:46:f0:ef:86:21:39:de:0c:ec:2c: a2:43:87:bd:dc:f8:db:86:69:49:20:f1:71:02:3f: 0f:26:a3:b2:c9:a8:d0:f3:5f:eb:5b:48:ad:58:63: fc:ed:88:f7:f4:67:72:8e:04:8f:c6:76:96:be:d7: dc:7d:20:ba:db:44:88:8f:ea:c2:4b:93:76:a6:1e: ac:67:0a:65:e5:33:f8:ac:43:10:9a:72:19:23:2e: 80:42:3d:b4:f2:22:08:7e:fe:98:d7:57:e0:27:a1: f1:77:c7:9d:9b:3c:27:42:58:25:f6:ba:3c:44:fc: 3b:b0:04:02:58:48:a2:84:a5:b5:60:72:72:95:05: da:cb:9c:48:46:ef:21:f4:4f:ab:7d:5f:96:68:d9: 05:ee:e2:44:16:07:7d:86:d8:42:09:cd:31:82:a3: e9:f1:6b:f0:7e:6a:31:36:a9:78:74:16:23:bd:c8: 0c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:21:6D:C9:0F:B8:E6:6F:32:B0:28:0A:88:C1:51:AD:5F:D1:79:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a8:78:b6:a7:9f:53:7b:83:e4:f7:e0:f1:f5:14:9f:f7:41: 50:9b:2e:c8:c8:e7:72:8b:44:a8:15:93:ea:4e:22:aa:c3:b3: 02:ea:6b:25:6e:b2:47:db:61:e4:89:a8:d3:2e:80:13:75:8a: 32:6d:71:00:58:48:df:c8:f5:75:63:26:d6:25:73:6e:31:97: 78:33:7d:33:33:4e:9d:cb:99:ae:25:f2:35:4d:91:93:c7:22: 2f:ae:d5:38:90:08:bc:04:6d:78:62:65:f2:22:53:d1:9e:1f: c2:5d:68:1c:d2:19:ea:99:ba:12:8f:b4:27:48:b6:a0:20:e8: 63:12:49:c6:b9:46:2f:3d:91:f4:f3:74:ae:9f:e6:95:35:85: c4:6d:ef:d5:05:4c:58:a7:d8:71:a6:d2:83:d4:75:a3:e3:a9: 92:b2:c7:08:53:40:46:fb:6a:72:8d:db:a2:2a:15:10:e7:7a: d0:c7:75:5f:8a:14:1d:3d:6a:28:9b:af:e1:da:6c:e1:78:be: 6f:ac:d3:7f:73:90:44:9b:c3:4e:74:58:06:4c:6c:c9:39:c8: 99:c6:e4:21:b4:ae:86:bf:74:1f:a4:4e:63:6a:58:f4:ff:52: 52:7c:54:3f:d5:b8:a4:6d:24:74:fc:56:1c:86:ec:8d:5b:4c: 2c:00:b0:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElWjrPWnex41q7Jr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMyODEzMDA1MVoXDTI1MDYyNjEzMDA1MVowLzEtMCsGA1UEAxMk YjRhYTY1OTEtODgxOS00OWI3LTllMTQtODhhN2Y4ZjM0OWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+xXQG3XoIIktcIBsuN4DR4L/PBNr4ZwV/kZ CxbCvipEDHkGlwN1rjGxT6rOR8dY+VsVE15sSDNQ7bPssti2yJnexfj7UotxwjOS ngAoyEbw74YhOd4M7CyiQ4e93PjbhmlJIPFxAj8PJqOyyajQ81/rW0itWGP87Yj3 9GdyjgSPxnaWvtfcfSC620SIj+rCS5N2ph6sZwpl5TP4rEMQmnIZIy6AQj208iII fv6Y11fgJ6Hxd8edmzwnQlgl9ro8RPw7sAQCWEiihKW1YHJylQXay5xIRu8h9E+r fV+WaNkF7uJEFgd9hthCCc0xgqPp8WvwfmoxNql4dBYjvcgM/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEhbckPuOZvMrAoCojBUa1f0XlfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmY1NDFiM2YtZDM4Yi0z NzE2LWFmZmEtNzMwN2UyMThhNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCoeLann1N7g+T34PH1FJ/3QVCbLsjI53KLRKgVk+pOIqrDswLqayVu skfbYeSJqNMugBN1ijJtcQBYSN/I9XVjJtYlc24xl3gzfTMzTp3Lma4l8jVNkZPH Ii+u1TiQCLwEbXhiZfIiU9GeH8JdaBzSGeqZuhKPtCdItqAg6GMSSca5Ri89kfTz dK6f5pU1hcRt79UFTFin2HGm0oPUdaPjqZKyxwhTQEb7anKN26IqFRDnetDHdV+K FB09aiibr+HabOF4vm+s039zkESbw050WAZMbMk5yJnG5CG0roa/dB+kTmNqWPT/ UlJ8VD/VuKRtJHT8VhyG7I1bTCwAsDI= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:49 2025 by rpki-client