$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa File: 0eddf336-ce40-3272-ba3f-78607f29de84.roa (raw, json) Hash identifier: SfuQgtcHFyZ4AzfxLOHFEmW9pJP/Kn3cf1hzi19Dr/I= Subject key identifier: 0A:9C:D5:77:B2:13:24:EC:A0:85:DE:48:F8:29:74:3A:BA:54:14:E8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849194187115C3AB0F30312DFE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 165.254.23.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:87:11:5c:3a:b0:f3:03:12:df:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=c1eb2347-7254-4d3a-b1a1-f4c9dc96d979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:76:ec:7c:f3:5f:a2:3b:6c:ab:2a:10:52:cb: 8b:c8:80:fc:8e:50:bc:1d:e0:36:5c:73:ee:d7:1f: 86:fc:19:f4:c5:21:93:d0:73:d7:86:01:5c:c0:8b: 0f:8d:8c:56:63:ee:88:f6:b7:2e:9b:b2:1c:4b:ef: de:56:75:d8:a0:7b:63:7d:18:b5:6a:e3:40:a6:6f: 96:ad:dd:00:fb:27:ce:be:78:26:af:a8:ed:30:5f: 8c:30:62:3a:bc:71:d6:63:f6:da:81:34:a5:49:86: 98:86:73:35:f5:aa:2f:85:f2:51:2d:31:9c:41:57: e5:bf:70:73:04:cf:12:39:dd:7c:fd:80:54:2d:0b: b5:83:e1:e5:64:4d:25:87:65:35:8b:59:df:1b:43: b7:16:52:da:a7:19:fa:47:2c:a0:f7:dd:01:bc:be: ac:79:1c:eb:c7:6b:b5:96:c2:d8:d5:c6:d0:d8:2a: c8:ed:67:5e:e7:cb:ed:01:53:c4:e3:08:c0:fe:cf: 1b:5e:45:a4:4e:08:c1:b8:32:33:50:3d:0e:1b:47: 12:28:e6:fc:df:74:19:1d:a0:8c:ec:ed:a3:6e:c3: 2f:e7:24:78:41:c4:b8:e0:74:49:e5:36:67:23:8f: be:33:c2:ae:cd:59:98:a3:ba:79:38:53:62:9d:2a: ec:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9C:D5:77:B2:13:24:EC:A0:85:DE:48:F8:29:74:3A:BA:54:14:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.23.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:6b:eb:3a:dc:36:ca:2f:bf:b3:56:d6:57:53:c6:a7:a1:b6: 70:40:45:86:21:2d:18:b7:0a:6d:41:7f:bc:65:d8:76:44:8a: 9d:1d:43:88:ac:3b:d4:bc:00:d0:7e:cd:16:42:22:d1:15:26: 11:4e:14:4d:9e:66:11:01:f8:0f:89:e9:59:1f:40:05:0e:29: e6:2e:33:3c:8b:83:41:91:1c:19:f0:ed:71:fa:be:06:e4:ec: 53:da:ca:ff:8a:90:3c:93:95:0d:b2:e7:35:a1:fd:12:59:cb: 29:09:aa:dc:37:fa:7c:c1:d4:01:8b:68:1b:be:26:4e:5f:2d: f0:c2:62:04:6b:19:ac:fc:4e:e4:fb:60:98:3b:e9:ef:55:fd: 84:93:81:bd:73:98:60:23:ba:d8:44:2b:55:0f:2e:2f:8f:15: fe:d6:e6:da:c0:7c:03:f6:f5:c3:b2:4a:2a:1f:8f:9f:6c:a5: 24:cb:7a:0e:b1:18:79:e8:cc:0c:92:2c:85:f9:8c:d5:aa:c5: 81:d0:7f:31:18:7d:6f:2b:41:52:9c:90:e1:15:11:29:bb:e6: a6:12:4b:f6:2a:86:73:e2:f7:31:79:47:6e:fe:ac:0b:a9:76: ae:17:26:8a:91:df:f3:5a:e3:20:d2:56:d9:bd:74:8f:75:62: 16:2d:97:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkZQYcRXDqw8wMS3+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk YzFlYjIzNDctNzI1NC00ZDNhLWIxYTEtZjRjOWRjOTZkOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHbsfPNfojtsqyoQUsuLyID8jlC8HeA2XHPu 1x+G/Bn0xSGT0HPXhgFcwIsPjYxWY+6I9rcum7IcS+/eVnXYoHtjfRi1auNApm+W rd0A+yfOvngmr6jtMF+MMGI6vHHWY/bagTSlSYaYhnM19aovhfJRLTGcQVflv3Bz BM8SOd18/YBULQu1g+HlZE0lh2U1i1nfG0O3FlLapxn6Ryyg990BvL6seRzrx2u1 lsLY1cbQ2CrI7Wde58vtAVPE4wjA/s8bXkWkTgjBuDIzUD0OG0cSKOb833QZHaCM 7O2jbsMv5yR4QcS44HRJ5TZnI4++M8KuzVmYo7p5OFNinSrs/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAqc1XeyEyTsoIXeSPgpdDq6VBToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGVkZGYzMzYtY2U0MC0z MjcyLWJhM2YtNzg2MDdmMjlkZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf4XADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAla+s63DbKL7+zVtZXU8anobZwQEWGIS0YtwptQX+8Zdh2RIqdHUOI rDvUvADQfs0WQiLRFSYRThRNnmYRAfgPielZH0AFDinmLjM8i4NBkRwZ8O1x+r4G 5OxT2sr/ipA8k5UNsuc1of0SWcspCarcN/p8wdQBi2gbviZOXy3wwmIEaxms/E7k +2CYO+nvVf2Ek4G9c5hgI7rYRCtVDy4vjxX+1ubawHwD9vXDskoqH4+fbKUky3oO sRh56MwMkiyF+YzVqsWB0H8xGH1vK0FSnJDhFREpu+amEkv2KoZz4vcxeUdu/qwL qXauFyaKkd/zWuMg0lbZvXSPdWIWLZcG -----END CERTIFICATE-----Generated at Fri Apr 4 17:36:42 2025 by rpki-client