$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/1e452d38-10d9-3744-bff6-0db3511ef48b.roa File: 1e452d38-10d9-3744-bff6-0db3511ef48b.roa (raw, json) Hash identifier: DiAvADxZTRh/KdbzWVqlw+jjHGIayPLNwVKbfQ555zs= Subject key identifier: 33:51:ED:47:F2:01:54:9C:A8:E7:CA:37:57:2B:62:4C:A9:7E:AF:10 Certificate issuer: /CN=7334a22a-f222-4457-889f-5478966ecf96 Certificate serial: 010D0C9F4328584A00DABC3E25C44406631EC300 Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/1e452d38-10d9-3744-bff6-0db3511ef48b.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 11805 IP address blocks: 165.140.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:bc:3e:25:c4:44:06:63:1e:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=52e46383-69d6-436c-9fe0-2de50ed6ed0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6b:67:d0:1d:43:56:58:93:41:b0:0d:f0:74: e8:2e:c5:fd:90:1a:fb:61:ac:f7:32:39:56:0e:94: 2b:d4:d6:f3:a1:3e:77:ef:ca:10:01:33:54:3d:34: 66:3b:02:86:4b:36:50:eb:4e:6c:64:c9:b9:62:47: 61:61:78:8e:24:b4:9c:8e:a9:3a:f7:4a:5d:d0:71: ef:9e:57:97:cc:37:b4:35:dc:9b:2a:e3:ff:1e:8e: 69:44:77:30:51:98:04:39:cf:75:3b:35:f6:d2:1e: 30:37:9e:72:90:56:da:37:6e:db:94:8a:b2:b0:fb: 70:e3:42:c8:27:1f:10:11:44:38:58:5d:9e:b2:e8: 0c:a2:a1:a5:cc:b8:43:dc:d0:6b:f0:cc:92:92:cb: 7b:65:00:e9:79:29:ae:85:56:29:ef:7e:eb:a9:3d: f9:b0:f4:ef:df:e3:29:fa:24:79:55:0c:38:70:3b: 66:09:1b:15:23:6e:ef:a6:84:07:59:b5:34:0e:e0: ba:79:31:c0:09:99:56:08:b3:0f:46:1e:93:cc:61: 68:36:16:bd:56:cd:f0:3d:12:0f:34:0e:aa:f0:0c: fa:17:55:ab:04:7b:53:13:8f:1a:03:8a:f2:d2:71: 3e:7e:0d:e4:65:ae:02:8b:1a:f4:3a:de:d5:a1:81: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:51:ED:47:F2:01:54:9C:A8:E7:CA:37:57:2B:62:4C:A9:7E:AF:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/1e452d38-10d9-3744-bff6-0db3511ef48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl X509v3 Authority Key Identifier: keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer sbgp-ipAddrBlock: critical IPv4: 165.140.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b6:ba:e6:53:75:30:1c:e6:c5:b5:4f:e7:67:a3:88:f0:61: bf:95:b1:3c:fb:a8:10:3d:24:5b:fd:03:8a:ad:12:9f:a0:9b: 73:ab:23:69:78:88:87:54:ee:6e:7e:6e:c1:86:9f:5f:f0:ba: b4:4c:40:14:b1:e7:b2:0f:a0:ca:09:71:8a:75:bb:34:13:e1: 17:f0:2d:9c:3e:2e:aa:48:99:43:92:82:0e:ec:63:a0:2f:c2: 11:dd:6b:65:c9:a8:fd:c8:97:aa:fa:b2:b5:1d:7d:52:6d:03: af:f7:2e:2b:5c:37:bd:52:41:c9:db:bb:03:f2:6c:e7:c2:a3: f0:e3:1f:09:45:3a:70:88:f3:0a:60:d2:2b:23:06:01:a1:cc: a6:fb:71:e9:91:22:ae:35:a0:44:51:80:2c:b3:22:37:9a:96: 97:4f:60:84:5e:5b:af:40:3b:be:14:04:2c:d4:d0:3c:b0:20: 9b:b8:09:2f:46:6e:c5:f0:c3:36:e5:d6:e6:b9:64:0b:2d:5f: ab:37:7f:16:23:29:09:50:99:8b:a5:87:dd:4f:71:90:e5:df: c1:dc:24:2e:71:8c:ec:31:79:10:82:c3:a2:3c:4c:89:98:69: d8:3d:32:a9:cf:18:3c:13:38:be:75:7a:65:92:24:c5:1b:fb: 14:90:ae:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2rw+JcREBmMewwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzNGEyMmEtZjIyMi00NDU3LTg4OWYtNTQ3ODk2NmVj Zjk2MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NTJlNDYzODMtNjlkNi00MzZjLTlmZTAtMmRlNTBlZDZlZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmtn0B1DVliTQbAN8HToLsX9kBr7Yaz3MjlW DpQr1NbzoT5378oQATNUPTRmOwKGSzZQ605sZMm5YkdhYXiOJLScjqk690pd0HHv nleXzDe0NdybKuP/Ho5pRHcwUZgEOc91OzX20h4wN55ykFbaN27blIqysPtw40LI Jx8QEUQ4WF2esugMoqGlzLhD3NBr8MySkst7ZQDpeSmuhVYp737rqT35sPTv3+Mp +iR5VQw4cDtmCRsVI27vpoQHWbU0DuC6eTHACZlWCLMPRh6TzGFoNha9Vs3wPRIP NA6q8Az6F1WrBHtTE48aA4ry0nE+fg3kZa4Cixr0Ot7VoYGoFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNR7UfyAVScqOfKN1crYkypfq8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0 YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4OTY2ZWNmOTYvMWU0NTJkMzgtMTBkOS0z NzQ0LWJmZjYtMGRiMzUxMWVmNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMzNGEyMmEtZjIyMi00NDU3LTg4 OWYtNTQ3ODk2NmVjZjk2LzczMzRhMjJhLWYyMjItNDQ1Ny04ODlmLTU0Nzg5NjZl Y2Y5Ni5jcmwwHwYDVR0jBBgwFoAUxD6lHNb69S8W1kOiw33sM4//SG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4 OTY2ZWNmOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpYz8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi2uuZTdTAc5sW1T+dno4jwYb+VsTz7qBA9JFv9A4qtEp+gm3OrI2l4 iIdU7m5+bsGGn1/wurRMQBSx57IPoMoJcYp1uzQT4RfwLZw+LqpImUOSgg7sY6Av whHda2XJqP3Il6r6srUdfVJtA6/3LitcN71SQcnbuwPybOfCo/DjHwlFOnCI8wpg 0isjBgGhzKb7cemRIq41oERRgCyzIjealpdPYIReW69AO74UBCzU0DywIJu4CS9G bsXwwzbl1ua5ZAstX6s3fxYjKQlQmYulh91PcZDl38HcJC5xjOwxeRCCw6I8TImY adg9MqnPGDwTOL51emWSJMUb+xSQrmU= -----END CERTIFICATE-----Generated at Mon Jun 9 00:13:34 2025 by rpki-client