$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/17a8e111-d489-3277-8c86-ddba60c473f8.roa File: 17a8e111-d489-3277-8c86-ddba60c473f8.roa (raw, json) Hash identifier: 5PVAiodcSXP3YrdGqRCds346Ku0bl3wAih/Ex7z6k8Q= Subject key identifier: 65:48:BC:68:E4:5A:15:40:F4:E0:E6:55:86:F2:57:0D:28:3C:32:83 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584916B1A0AC53C90796D993B9C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/17a8e111-d489-3277-8c86-ddba60c473f8.roa Signing time: Wed 05 Mar 2025 15:59:30 +0000 ROA not before: Wed 05 Mar 2025 15:59:30 +0000 ROA not after: Tue 03 Jun 2025 14:59:30 +0000 asID: 22691 IP address blocks: 165.254.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:16:b1:a0:ac:53:c9:07:96:d9:93:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 5 15:59:30 2025 GMT Not After : Jun 3 14:59:30 2025 GMT Subject: CN=24b5fae1-d4e7-42de-8d31-ae8b9f01f9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:38:2a:7d:a4:d7:bb:24:b6:7b:25:72:b8:14: 53:82:70:ec:bc:c5:e5:7e:15:49:c0:f0:5b:5d:80: 33:2e:d2:c5:c3:0c:0e:ee:a5:1a:c6:13:c8:1b:ef: 2d:1f:77:d7:80:0a:12:01:e8:e1:eb:34:78:fa:72: 53:ce:ce:be:08:93:14:f6:27:25:0a:ee:2c:41:37: 25:6a:e4:7e:53:12:82:7e:ab:6c:d2:7b:fe:05:22: d0:54:b5:a4:e6:ae:ce:f6:b7:89:9f:a1:c3:7f:59: d5:7d:4f:d6:3f:15:27:e5:4d:47:12:55:fb:0a:cb: 9f:92:da:76:9f:39:70:0b:d3:b5:c9:8d:43:62:72: 63:fc:29:c9:e6:90:9e:76:79:6e:3f:dd:cd:5d:12: 9f:0f:04:bc:99:f0:a7:c7:bf:13:29:56:99:32:22: 72:8d:8e:08:f2:2a:72:f2:9e:37:84:af:9f:40:b8: 46:ea:bd:02:a0:10:2d:e4:9b:8e:69:e8:08:95:c8: d3:ca:00:52:b7:37:4e:77:f8:4e:39:6e:e4:8e:d4: 69:fe:26:8d:f5:f5:09:81:e6:4e:35:b2:08:0b:da: d8:24:8b:bf:5b:9d:0c:63:0a:3d:ec:f4:76:e1:24: 5c:91:59:3a:3a:c0:0a:b3:97:bb:50:40:05:56:9d: 0f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:48:BC:68:E4:5A:15:40:F4:E0:E6:55:86:F2:57:0D:28:3C:32:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/17a8e111-d489-3277-8c86-ddba60c473f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e2:f2:f6:ce:e3:22:f7:78:d7:1f:e7:5d:6e:5e:70:37:a8: a9:5a:82:ce:1f:c9:d1:f0:25:39:93:e1:a3:da:4f:04:39:aa: 89:eb:8e:f1:6e:09:b3:54:7c:6d:0d:af:96:09:30:95:bf:d6: a4:11:2e:25:96:56:7c:39:99:be:39:d5:a7:db:ea:cd:c1:a8: 62:56:3d:83:d7:2f:6b:9d:28:e0:cb:11:0c:91:f7:ce:8b:4d: db:55:d5:a1:18:4d:71:28:67:a1:ac:15:3b:dd:f1:da:65:4a: 11:c0:70:7b:47:96:66:70:49:60:04:13:95:e2:4c:76:5e:e2: 68:68:32:ff:c1:c5:c2:6f:b4:9c:e5:5d:10:e4:02:10:29:9f: 0b:53:27:73:e6:98:ea:39:ef:28:fd:d7:4d:06:37:06:6e:32: be:a5:da:ea:1d:ad:b6:50:b5:ff:11:ee:16:d8:bd:ed:a7:37: ea:29:7a:06:11:55:6e:b6:6d:83:be:bb:61:e4:00:75:ac:c6: c2:a9:3f:57:75:bf:b4:a4:61:47:f3:94:c0:b6:91:1f:56:b7: b0:af:d0:f9:18:8a:c2:e5:60:3f:34:e7:38:3b:5c:8e:65:54: 8e:82:c9:fc:e9:1b:4e:63:64:4a:0a:d2:11:a1:f1:21:75:8a: cc:64:7d:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkWsaCsU8kHltmTucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwNTE1NTkzMFoXDTI1MDYwMzE0NTkzMFowLzEtMCsGA1UEAxMk MjRiNWZhZTEtZDRlNy00MmRlLThkMzEtYWU4YjlmMDFmOWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTgqfaTXuyS2eyVyuBRTgnDsvMXlfhVJwPBb XYAzLtLFwwwO7qUaxhPIG+8tH3fXgAoSAejh6zR4+nJTzs6+CJMU9iclCu4sQTcl auR+UxKCfqts0nv+BSLQVLWk5q7O9reJn6HDf1nVfU/WPxUn5U1HElX7Csufktp2 nzlwC9O1yY1DYnJj/CnJ5pCednluP93NXRKfDwS8mfCnx78TKVaZMiJyjY4I8ipy 8p43hK+fQLhG6r0CoBAt5JuOaegIlcjTygBStzdOd/hOOW7kjtRp/iaN9fUJgeZO NbIIC9rYJIu/W50MYwo97PR24SRckVk6OsAKs5e7UEAFVp0PwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVIvGjkWhVA9ODmVYbyVw0oPDKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTdhOGUxMTEtZDQ4OS0z Mjc3LThjODYtZGRiYTYwYzQ3M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADji8vbO4yL3eNcf511uXnA3qKlags4fydHwJTmT4aPaTwQ5qonrjvFu CbNUfG0Nr5YJMJW/1qQRLiWWVnw5mb451afb6s3BqGJWPYPXL2udKODLEQyR986L TdtV1aEYTXEoZ6GsFTvd8dplShHAcHtHlmZwSWAEE5XiTHZe4mhoMv/BxcJvtJzl XRDkAhApnwtTJ3PmmOo57yj9100GNwZuMr6l2uodrbZQtf8R7hbYve2nN+opegYR VW62bYO+u2HkAHWsxsKpP1d1v7SkYUfzlMC2kR9Wt7Cv0PkYisLlYD805zg7XI5l VI6CyfzpG05jZEoK0hGh8SF1isxkfeE= -----END CERTIFICATE-----Generated at Sat Apr 12 21:55:28 2025 by rpki-client