$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3e143da-c721-3da9-8123-92a7febad310.roa File: d3e143da-c721-3da9-8123-92a7febad310.roa (raw, json) Hash identifier: L0E6m2AfVErIsMETjScV1QBC6LGAqxNMJmICXfapTKg= Subject key identifier: 9A:C8:F4:66:C3:03:B7:7F:A9:F8:F4:E2:41:E2:56:8E:F3:62:47:47 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849F87A8B5FE6B12DFDC78209C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3e143da-c721-3da9-8123-92a7febad310.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 20940 IP address blocks: 165.254.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:8b:5f:e6:b1:2d:fd:c7:82:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=7f187cb9-a77e-43f7-8b1e-c7f18510fc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:a2:a9:ee:d9:c8:23:5b:8c:51:60:dc:c4: c4:9b:8e:f7:0d:72:c3:2c:1f:c1:7b:35:86:b4:17: fe:3b:09:95:75:ee:ee:cb:a6:3e:0a:b7:d4:06:89: 5c:60:24:0c:cc:02:b3:7f:01:2f:d8:59:3f:28:9c: 64:4e:75:4a:e9:71:a0:9c:54:c7:4a:34:bf:d2:e3: 04:1f:a4:18:09:35:7f:c8:e2:92:b9:30:24:19:96: 9d:1f:54:1d:65:8a:2a:7a:a5:7c:09:23:8a:4b:fb: 36:1b:5c:16:3a:17:d4:b6:4d:74:60:ce:21:04:12: eb:a6:84:36:08:6d:be:8c:97:a3:dc:91:fb:ec:4b: cf:e6:a5:d2:19:1e:cb:3d:18:76:65:fd:13:54:5f: c4:fa:0c:11:20:a8:7d:07:06:32:6e:73:89:ff:d4: 85:a8:db:6a:cf:9d:b2:75:88:f8:6f:19:7b:8d:e5: 6d:01:3d:52:bc:0e:d7:76:02:0a:7b:b7:a7:12:65: 87:68:d5:15:fe:c6:ac:80:da:36:05:91:7a:64:04: 11:73:dc:f7:c3:ac:71:8f:bf:4d:02:1f:9f:84:96: 4d:ea:de:ed:02:c4:f8:52:f3:19:5b:4b:e3:a5:3b: f9:a2:f7:20:4b:3d:25:99:a0:e9:b3:15:51:f9:70: 02:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C8:F4:66:C3:03:B7:7F:A9:F8:F4:E2:41:E2:56:8E:F3:62:47:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3e143da-c721-3da9-8123-92a7febad310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:02:eb:90:bf:f8:b4:55:03:6f:b4:4e:75:4a:5a:4b:8c:38: 55:ff:d9:d0:7d:11:6b:c1:03:33:6a:3a:b5:1c:33:5e:e3:35: 6f:6f:88:7f:53:41:5c:7e:69:c3:7f:0a:38:6f:26:87:dc:3d: 60:4d:83:06:5a:d5:7f:2e:88:dc:fc:6b:03:0f:b1:34:70:b4: 04:f5:5b:ab:65:e4:e2:a7:0f:76:ac:22:4f:6d:19:82:5b:51: 2c:61:01:33:cb:62:1f:fe:5b:da:96:5e:0b:ef:de:94:3d:d0: a2:af:8e:3e:4a:e9:8a:e6:fc:9c:a4:38:5f:54:7b:4d:02:26: 76:12:e0:0d:58:19:d5:c4:24:ff:b6:1c:bb:f1:5b:26:ae:97: 50:ec:5a:bb:81:fc:ab:73:c2:44:0e:d8:40:3a:18:47:d5:22: c5:45:af:c3:3e:9d:4f:14:7a:d3:d1:23:aa:f3:dc:49:b8:eb: 0c:8e:02:df:cb:1d:26:ab:f0:39:e8:ac:46:c1:dc:bf:75:ae: 49:85:71:98:29:fb:5a:39:00:e9:dd:6b:44:29:4e:ee:c8:94: c1:3f:8f:11:1d:a1:5a:1b:ba:f6:f2:e3:d8:28:00:f0:b8:23: 6c:df:33:15:ae:7f:d1:f3:54:b5:97:71:4e:c2:8d:ba:84:8e: c6:2e:98:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eotf5rEt/ceCCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk N2YxODdjYjktYTc3ZS00M2Y3LThiMWUtYzdmMTg1MTBmYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW+iqe7ZyCNbjFFg3MTEm473DXLDLB/BezWG tBf+OwmVde7uy6Y+CrfUBolcYCQMzAKzfwEv2Fk/KJxkTnVK6XGgnFTHSjS/0uME H6QYCTV/yOKSuTAkGZadH1QdZYoqeqV8CSOKS/s2G1wWOhfUtk10YM4hBBLrpoQ2 CG2+jJej3JH77EvP5qXSGR7LPRh2Zf0TVF/E+gwRIKh9BwYybnOJ/9SFqNtqz52y dYj4bxl7jeVtAT1SvA7XdgIKe7enEmWHaNUV/sasgNo2BZF6ZAQRc9z3w6xxj79N Ah+fhJZN6t7tAsT4UvMZW0vjpTv5ovcgSz0lmaDpsxVR+XACxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrI9GbDA7d/qfj04kHiVo7zYkdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDNlMTQzZGEtYzcyMS0z ZGE5LTgxMjMtOTJhN2ZlYmFkMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf7qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUC65C/+LRVA2+0TnVKWkuMOFX/2dB9EWvBAzNqOrUcM17jNW9viH9T QVx+acN/CjhvJofcPWBNgwZa1X8uiNz8awMPsTRwtAT1W6tl5OKnD3asIk9tGYJb USxhATPLYh/+W9qWXgvv3pQ90KKvjj5K6Yrm/JykOF9Ue00CJnYS4A1YGdXEJP+2 HLvxWyaul1DsWruB/KtzwkQO2EA6GEfVIsVFr8M+nU8UetPRI6rz3Em46wyOAt/L HSar8DnorEbB3L91rkmFcZgp+1o5AOnda0QpTu7IlME/jxEdoVobuvby49goAPC4 I2zfMxWuf9HzVLWXcU7CjbqEjsYumJg= -----END CERTIFICATE-----Generated at Sun Jun 15 11:44:49 2025 by rpki-client