$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d04651b9-e83b-3291-aafb-6299b726c5b4.roa File: d04651b9-e83b-3291-aafb-6299b726c5b4.roa (raw, json) Hash identifier: h+MS5Vbg2NLQfFKRfKYXDnr2ZpPu+lC+pDdFmDAGwPk= Subject key identifier: 7B:BA:F2:D7:60:9E:74:F5:28:C0:75:83:1A:07:B5:1E:C0:41:3F:9D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584917DC36E4C2F1E7624E436000 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d04651b9-e83b-3291-aafb-6299b726c5b4.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 1225 IP address blocks: 165.254.21.120/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:36:e4:c2:f1:e7:62:4e:43:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=551b34a8-62d1-45a2-95d5-0c475e6619d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e2:12:5d:99:bf:bb:cf:82:65:af:6e:5d:f9: ff:75:aa:12:08:2a:82:ef:1e:92:fe:3d:6f:59:1f: 7e:3b:02:fe:06:d6:08:db:c7:06:8d:a1:6d:6b:02: 7f:51:1a:63:88:11:fb:42:24:98:28:16:d6:0a:14: 04:20:ec:3b:f8:31:a7:37:48:16:47:46:24:40:ab: 85:c1:00:ca:d0:3b:21:00:85:8e:20:37:26:95:b0: 1b:f6:3c:f4:21:9e:6b:6c:25:53:06:a9:45:7b:80: ae:ed:aa:4e:13:dd:8e:7a:93:fd:85:51:38:e4:65: 8a:48:5d:56:21:0c:31:51:3a:3e:48:d6:46:e9:8d: 58:ca:fd:45:72:f7:86:a2:8c:5c:9a:11:b2:e4:37: d6:c9:9b:ef:07:3c:bd:b0:62:a1:61:85:6e:7b:65: 1c:34:46:11:b1:24:e8:c7:a3:a1:d9:6b:06:e3:2e: 06:41:d0:39:10:6b:e6:86:27:58:b8:3e:9b:06:f9: f8:38:bc:92:36:b1:c0:98:1a:d0:84:b0:9b:d3:dd: fd:d3:03:f3:4f:82:ec:db:f8:bb:d9:96:45:f0:c6: d9:f7:af:05:76:9b:86:df:3b:8c:ed:7f:5b:d9:16: 40:c2:b6:b5:67:91:b5:ab:09:e4:75:52:9d:57:28: 49:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BA:F2:D7:60:9E:74:F5:28:C0:75:83:1A:07:B5:1E:C0:41:3F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d04651b9-e83b-3291-aafb-6299b726c5b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.21.120/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:e0:8b:29:6c:ce:3a:59:ff:6c:57:74:6c:b5:f5:58:4a:90: 75:8f:d0:c7:99:cb:f6:f0:00:8f:77:46:25:e1:d4:d4:64:bc: 5e:f0:25:71:14:24:00:e7:60:01:6b:00:bf:71:04:d0:c7:63: bd:a7:fd:1f:24:bd:40:83:3d:66:a3:9a:c0:17:7f:d6:53:91: bc:b8:f2:0d:74:4e:c7:8c:c4:28:4e:85:4e:16:d0:9c:4a:32: a5:f5:18:55:c4:38:23:7c:51:41:dc:9c:04:b7:50:5e:06:24: cb:dd:5e:e2:67:08:10:12:51:42:28:44:6d:8c:d9:29:35:a1: d4:a7:46:89:73:76:65:a5:fd:57:ab:58:6b:7f:5e:15:d8:52: a0:d2:68:43:4d:a4:4f:dd:8b:e1:bf:ea:b5:82:e9:f3:de:36: f0:7f:9b:f7:10:12:5f:bb:60:70:8a:2c:8d:87:0f:6f:2e:e1: 33:57:b6:f0:60:fd:61:76:46:82:9f:c5:fd:4c:01:27:1c:24: 48:a4:14:c8:44:22:ec:6b:34:56:a6:59:a7:0d:01:3d:a2:b5: 2e:51:31:41:0a:ac:be:56:08:f9:af:3b:c9:97:3f:54:10:86: 58:ed:5e:b5:70:89:e2:c9:e9:48:23:a3:09:3e:d3:a1:70:b4: 3c:de:8f:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkX3DbkwvHnYk5DYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NTUxYjM0YTgtNjJkMS00NWEyLTk1ZDUtMGM0NzVlNjYxOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOISXZm/u8+CZa9uXfn/daoSCCqC7x6S/j1v WR9+OwL+BtYI28cGjaFtawJ/URpjiBH7QiSYKBbWChQEIOw7+DGnN0gWR0YkQKuF wQDK0DshAIWOIDcmlbAb9jz0IZ5rbCVTBqlFe4Cu7apOE92OepP9hVE45GWKSF1W IQwxUTo+SNZG6Y1Yyv1FcveGooxcmhGy5DfWyZvvBzy9sGKhYYVue2UcNEYRsSTo x6Oh2WsG4y4GQdA5EGvmhidYuD6bBvn4OLySNrHAmBrQhLCb09390wPzT4Ls2/i7 2ZZF8MbZ968FdpuG3zuM7X9b2RZAwra1Z5G1qwnkdVKdVyhJEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHu68tdgnnT1KMB1gxoHtR7AQT+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDA0NjUxYjktZTgzYi0z MjkxLWFhZmItNjI5OWI3MjZjNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDpf4VeDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCt4IspbM46Wf9sV3RstfVYSpB1j9DHmcv28ACPd0Yl4dTUZLxe8CVx FCQA52ABawC/cQTQx2O9p/0fJL1Agz1mo5rAF3/WU5G8uPINdE7HjMQoToVOFtCc SjKl9RhVxDgjfFFB3JwEt1BeBiTL3V7iZwgQElFCKERtjNkpNaHUp0aJc3Zlpf1X q1hrf14V2FKg0mhDTaRP3Yvhv+q1gunz3jbwf5v3EBJfu2BwiiyNhw9vLuEzV7bw YP1hdkaCn8X9TAEnHCRIpBTIRCLsazRWplmnDQE9orUuUTFBCqy+Vgj5rzvJlz9U EIZY7V61cIniyelII6MJPtOhcLQ83o+H -----END CERTIFICATE-----Generated at Fri Apr 4 17:20:06 2025 by rpki-client