$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd89da04-b0f0-36de-8d4a-6ec62953b24d.roa File: cd89da04-b0f0-36de-8d4a-6ec62953b24d.roa (raw, json) Hash identifier: x7VUlKapPEkn+lKqveoanRX/gRmmIk1pvlboTuS0LBo= Subject key identifier: 3A:A9:85:A0:EC:24:9A:3D:3B:FA:B0:A9:DA:DF:D3:FA:8B:CA:6B:6B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858491D71864855443F3B80D4F180 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd89da04-b0f0-36de-8d4a-6ec62953b24d.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 22691 IP address blocks: 165.254.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:86:48:55:44:3f:3b:80:d4:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=134f4da3-d1ac-4a28-9948-78ecfc55511a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:aa:59:95:a5:72:4c:ce:16:01:35:29:94:1f: 24:40:19:49:fa:d2:a7:de:2a:fb:2c:0e:f8:48:42: b1:89:22:a1:1e:6a:2d:d2:50:84:a6:d0:b3:5b:62: 08:e0:3e:eb:f5:00:69:55:42:b2:6f:b3:99:ba:c9: 53:ab:47:0b:08:1d:c8:92:91:89:71:e6:81:9f:f6: d2:f2:2b:21:9e:9b:8f:5b:ea:25:30:23:6c:61:c0: f2:c3:21:2d:a6:88:b6:bc:be:ca:72:22:ec:e5:4e: 27:31:ab:f6:ce:30:32:b3:32:3d:a2:7d:22:1f:e6: 61:49:dd:6e:fc:f7:1d:84:2f:43:10:f3:a6:59:f1: b1:07:3f:ce:a4:e9:af:d5:7f:08:3b:c2:f0:51:8f: 02:37:28:14:6b:7f:5a:55:57:6f:4b:17:f3:75:54: 7b:cc:13:98:8d:31:58:e5:57:06:e2:e1:97:4a:08: 48:e2:93:e8:8f:4d:1a:74:8e:6b:76:9b:a3:4c:de: 83:0d:73:b1:a5:69:58:ef:27:27:61:bf:00:ca:0d: 8f:52:ae:a4:51:dc:07:cb:00:4b:35:bb:73:69:5a: 4a:0c:d0:77:a3:c1:be:8c:d6:8c:78:d3:6a:95:b1: 39:41:65:79:91:7b:a6:33:4f:f7:c8:d3:12:a0:1c: 24:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A9:85:A0:EC:24:9A:3D:3B:FA:B0:A9:DA:DF:D3:FA:8B:CA:6B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd89da04-b0f0-36de-8d4a-6ec62953b24d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d1:cb:95:52:d8:e8:c1:36:82:52:b2:f2:7b:db:9a:13:a1: 0c:65:b3:c9:29:bb:3e:cd:23:ae:3e:b7:c4:c4:ad:1c:dd:92: c2:4b:0b:c1:49:61:a8:be:ed:13:ac:33:86:2c:bb:25:b1:d7: bc:c3:f7:6b:07:a1:90:70:06:86:4c:78:e2:69:66:d8:1b:55: 7d:1f:01:f6:c5:55:31:4e:3e:5b:95:2a:9a:04:9c:11:ac:6f: e8:ac:11:29:9a:2b:7a:30:56:fc:db:12:21:3f:0d:c6:3e:2e: 2f:7c:f0:96:f2:0a:6b:94:b5:f3:64:cd:3b:51:4c:b2:6c:0f: ba:c7:0b:40:d4:96:52:2b:df:42:ac:23:f2:7a:7d:0b:b8:ed: e2:7f:ca:00:16:a5:53:35:f0:43:ec:eb:31:6c:60:4f:5d:2c: bd:2e:86:90:0c:06:13:d6:73:e4:51:58:b6:6b:67:cc:57:04: 4f:03:eb:92:e3:a4:dc:6e:33:9a:95:5b:6d:56:25:5e:2d:99: 4a:95:27:84:db:a2:4d:ea:99:7f:05:ef:74:e8:b1:5d:d1:65: 08:66:ae:21:ae:a0:8f:26:99:f4:0c:b5:aa:ca:e7:2a:52:d4: d1:98:2b:f9:a6:fe:38:23:5f:ea:24:ad:58:96:f3:98:38:c4: d0:cc:f2:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYZIVUQ/O4DU8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MTM0ZjRkYTMtZDFhYy00YTI4LTk5NDgtNzhlY2ZjNTU1MTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KpZlaVyTM4WATUplB8kQBlJ+tKn3ir7LA74 SEKxiSKhHmot0lCEptCzW2II4D7r9QBpVUKyb7OZuslTq0cLCB3IkpGJceaBn/bS 8ishnpuPW+olMCNsYcDywyEtpoi2vL7KciLs5U4nMav2zjAyszI9on0iH+ZhSd1u /PcdhC9DEPOmWfGxBz/OpOmv1X8IO8LwUY8CNygUa39aVVdvSxfzdVR7zBOYjTFY 5VcG4uGXSghI4pPoj00adI5rdpujTN6DDXOxpWlY7ycnYb8Ayg2PUq6kUdwHywBL NbtzaVpKDNB3o8G+jNaMeNNqlbE5QWV5kXumM0/3yNMSoBwk9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqphaDsJJo9O/qwqdrf0/qLymtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2Q4OWRhMDQtYjBmMC0z NmRlLThkNGEtNmVjNjI5NTNiMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf5CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzRy5VS2OjBNoJSsvJ725oToQxls8kpuz7NI64+t8TErRzdksJLC8FJ Yai+7ROsM4YsuyWx17zD92sHoZBwBoZMeOJpZtgbVX0fAfbFVTFOPluVKpoEnBGs b+isESmaK3owVvzbEiE/DcY+Li988JbyCmuUtfNkzTtRTLJsD7rHC0DUllIr30Ks I/J6fQu47eJ/ygAWpVM18EPs6zFsYE9dLL0uhpAMBhPWc+RRWLZrZ8xXBE8D65Lj pNxuM5qVW21WJV4tmUqVJ4Tbok3qmX8F73TosV3RZQhmriGuoI8mmfQMtarK5ypS 1NGYK/mm/jgjX+okrViW85g4xNDM8lM= -----END CERTIFICATE-----Generated at Fri Apr 4 17:20:08 2025 by rpki-client