$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c26cd6af-4850-3dbc-88e4-d8fe7443f031.roa File: c26cd6af-4850-3dbc-88e4-d8fe7443f031.roa (raw, json) Hash identifier: 2/1kMPCsMuW7OKUW2+UCsQvXe2zxwyS7AG2pJobXL68= Subject key identifier: 18:FF:BC:52:01:23:54:54:23:2E:6E:EE:92:8A:61:E5:1B:2A:7B:3C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584917DC370C50578D8AA8DB9CE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c26cd6af-4850-3dbc-88e4-d8fe7443f031.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 1225 IP address blocks: 165.254.158.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:37:0c:50:57:8d:8a:a8:db:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=f77007b5-1bf6-4531-9f17-17c7f361b5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5c:d7:8c:cc:21:a9:74:f8:4c:48:86:c4:fa: c7:b7:23:cd:0e:b4:02:d5:8d:6b:c1:8c:ee:cf:fa: 25:ae:d4:c7:53:e1:03:d9:cd:8c:67:cc:1e:aa:c2: 61:d9:fa:12:d2:23:6d:22:e9:09:90:30:32:74:94: 1a:db:cb:e0:68:23:ba:8f:c1:51:82:1d:9a:73:c2: 04:7b:54:39:c6:f2:d4:9f:be:f1:ce:9e:42:40:d6: ef:1e:45:69:15:30:60:ef:eb:66:cd:1a:58:9a:19: 48:20:95:c0:bf:e8:5e:62:a6:04:c7:f5:4c:b0:97: c0:e0:ab:37:70:05:38:45:8f:68:13:54:d7:31:86: 67:0a:8c:2b:6a:e9:85:08:44:22:74:b6:de:30:9c: a5:d0:f3:5c:e8:5f:c3:8d:a1:5e:21:ad:41:82:53: dc:81:ee:e2:5b:c4:c2:c3:38:a0:9f:05:1b:01:ec: cf:99:58:52:70:7b:7f:62:0c:ed:b1:40:24:73:3d: c8:c0:9f:13:a9:24:94:cf:d6:be:f8:e7:91:41:25: dc:ed:e9:0d:d1:50:ab:4d:39:15:73:77:70:78:42: a7:88:c4:97:1f:7f:f0:b6:66:42:c4:0c:2b:6e:fe: eb:c5:34:11:0e:56:c4:7c:61:37:59:90:9d:52:15: b8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FF:BC:52:01:23:54:54:23:2E:6E:EE:92:8A:61:E5:1B:2A:7B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c26cd6af-4850-3dbc-88e4-d8fe7443f031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.158.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:20:a7:98:16:28:e0:2c:05:6c:4f:5a:eb:b8:c0:74:cd:d0: 4e:90:6a:dd:de:35:51:d6:a9:49:28:1a:b0:5a:6c:a7:af:b1: 89:e7:16:62:4b:3c:11:fd:72:e6:85:a1:0a:a4:bd:03:21:42: 7f:06:d6:d2:0f:d6:e9:2b:26:57:37:f1:25:26:39:9b:03:95: bb:3b:4d:db:17:35:9e:87:40:db:ee:aa:84:26:bf:4d:a9:64: ff:ef:20:79:dd:04:e1:e6:c4:02:98:06:eb:eb:13:b0:bd:56: 73:ce:37:80:69:b3:7a:c0:7b:83:92:f9:b0:85:c2:ff:ea:8d: 0b:23:9c:a6:58:03:c1:05:b8:a3:7f:89:b1:b5:1c:b4:0a:3d: 00:69:85:f2:79:5b:13:6e:b7:4d:0d:28:d1:77:0a:d1:91:39: 04:cf:85:12:23:17:b7:cc:39:ad:a7:94:46:c6:96:c8:cb:36: 61:1a:1a:52:71:33:fc:0b:b1:8a:1f:de:af:45:c3:c6:2c:13: 71:5c:e9:f6:90:d3:eb:e7:77:07:b9:3c:88:00:08:d2:28:99: 6f:da:44:e6:3a:04:da:13:72:5d:c1:38:bd:3d:76:52:de:d3: f1:f5:1e:07:42:c2:27:f7:98:a1:eb:45:34:79:f0:5d:ec:f4: 6d:6d:63:bd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkX3DcMUFeNiqjbnOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk Zjc3MDA3YjUtMWJmNi00NTMxLTlmMTctMTdjN2YzNjFiNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklzXjMwhqXT4TEiGxPrHtyPNDrQC1Y1rwYzu z/olrtTHU+ED2c2MZ8weqsJh2foS0iNtIukJkDAydJQa28vgaCO6j8FRgh2ac8IE e1Q5xvLUn77xzp5CQNbvHkVpFTBg7+tmzRpYmhlIIJXAv+heYqYEx/VMsJfA4Ks3 cAU4RY9oE1TXMYZnCowraumFCEQidLbeMJyl0PNc6F/DjaFeIa1BglPcge7iW8TC wzignwUbAezPmVhScHt/YgztsUAkcz3IwJ8TqSSUz9a++OeRQSXc7ekN0VCrTTkV c3dweEKniMSXH3/wtmZCxAwrbv7rxTQRDlbEfGE3WZCdUhW4zQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBj/vFIBI1RUIy5u7pKKYeUbKns8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzI2Y2Q2YWYtNDg1MC0z ZGJjLTg4ZTQtZDhmZTc0NDNmMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf6eADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCeIKeYFijgLAVsT1rruMB0zdBOkGrd3jVR1qlJKBqwWmynr7GJ5xZi SzwR/XLmhaEKpL0DIUJ/BtbSD9bpKyZXN/ElJjmbA5W7O03bFzWeh0Db7qqEJr9N qWT/7yB53QTh5sQCmAbr6xOwvVZzzjeAabN6wHuDkvmwhcL/6o0LI5ymWAPBBbij f4mxtRy0Cj0AaYXyeVsTbrdNDSjRdwrRkTkEz4USIxe3zDmtp5RGxpbIyzZhGhpS cTP8C7GKH96vRcPGLBNxXOn2kNPr53cHuTyIAAjSKJlv2kTmOgTaE3JdwTi9PXZS 3tPx9R4HQsIn95ih60U0efBd7PRtbWO9 -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:47 2025 by rpki-client