$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/8213878d-35dd-30b6-ac09-e612e049057a.roa File: 8213878d-35dd-30b6-ac09-e612e049057a.roa (raw, json) Hash identifier: oiJs7FUm3q2y4E9Nxk4UYDQ1Hp41pvg+XXQzw2g/bGk= Subject key identifier: 02:A2:7F:74:D5:B1:F6:B4:7B:7A:52:4C:5D:B0:06:67:17:87:44:0A Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F43285849FCAA72FD261DAB5EED434E00 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/8213878d-35dd-30b6-ac09-e612e049057a.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 31875 IP address blocks: 216.21.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:72:fd:26:1d:ab:5e:ed:43:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=9582c087-aa95-4782-ab8a-789b7afd652f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5c:70:15:48:9e:fe:33:56:c1:4a:28:6b:64: cc:9e:f2:12:66:b5:38:63:e9:00:d6:1c:1f:1b:ec: 4d:dd:f8:cd:e7:15:7f:49:54:ff:d0:3f:69:c8:d9: 15:e9:2f:34:bc:6f:1c:79:3d:57:19:a7:3e:f6:c9: 22:e7:86:22:a7:62:45:6d:78:1f:30:28:0b:19:ea: c6:f6:72:35:7c:70:5f:4c:52:f0:ba:58:6c:da:07: d5:5b:7e:a2:70:39:88:69:5a:78:36:0a:f8:b3:9e: c0:69:a1:a4:62:53:d0:ef:10:12:aa:d2:9a:38:b8: e6:3c:2c:59:f6:14:1a:ca:c3:2c:b3:0d:1f:50:1a: 36:1e:60:02:96:0e:26:b6:13:40:ef:bf:10:b7:eb: e2:cb:3f:f7:d1:0a:a8:91:6e:f3:f7:2f:af:32:b1: cd:76:53:6d:6a:f5:b6:43:92:7e:3e:d8:ff:18:53: c1:c6:05:cd:f4:63:96:92:41:28:48:27:37:d3:71: 98:ec:a0:db:b8:e4:03:bd:3d:2c:5c:05:28:9f:5e: f5:77:52:f8:47:7c:14:55:cc:3e:30:17:4d:67:f7: ce:2e:25:1c:29:9a:cf:19:b9:ff:94:e9:09:10:eb: 1a:66:0b:65:27:48:d5:68:8f:09:28:69:5e:8b:a3: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A2:7F:74:D5:B1:F6:B4:7B:7A:52:4C:5D:B0:06:67:17:87:44:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/8213878d-35dd-30b6-ac09-e612e049057a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv4: 216.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:49:cd:67:3c:36:d5:95:cb:4a:d3:f3:ff:79:96:25:4e:e8: 13:70:28:6a:c1:50:cb:9b:a0:92:1c:22:3c:cf:40:89:4f:d7: ba:eb:ce:ef:a5:66:33:09:b0:55:6b:7a:d3:c4:0a:d1:b4:b4: 9d:61:0a:8f:c5:40:73:87:e5:cb:f2:3a:ed:ca:13:93:8b:93: 41:2c:3e:6c:5a:e8:41:34:6a:64:7d:cf:1d:69:e4:d2:5a:a3: ad:f3:76:68:be:18:32:c8:1e:5e:94:83:e6:ff:67:12:ee:92: ec:e2:42:a2:fd:0f:e9:71:19:fc:fc:96:5c:41:41:bc:45:db: a9:48:fe:71:fb:08:03:92:7b:75:3d:21:ed:55:e3:7c:bc:09: db:0d:d1:eb:07:5f:8b:35:a9:bf:e8:6d:cb:e6:db:1a:a6:a0: b6:8f:64:f5:c6:31:62:9f:7a:bb:4b:79:47:b8:7d:bf:f5:2e: 78:e2:b3:04:d8:8d:a6:f3:5c:23:5a:5b:01:5f:42:1c:a3:eb: 72:93:91:16:e8:cb:95:a9:db:29:fa:03:aa:64:69:80:a7:70: 16:41:6d:7d:3d:fc:67:bd:d5:6f:87:b7:5c:f5:00:3e:3c:d3: 07:89:d6:ff:39:36:81:69:a1:a8:c0:0b:00:ed:10:64:da:af: 71:a4:5f:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnL9Jh2rXu1DTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk OTU4MmMwODctYWE5NS00NzgyLWFiOGEtNzg5YjdhZmQ2NTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFxwFUie/jNWwUooa2TMnvISZrU4Y+kA1hwf G+xN3fjN5xV/SVT/0D9pyNkV6S80vG8ceT1XGac+9ski54Yip2JFbXgfMCgLGerG 9nI1fHBfTFLwulhs2gfVW36icDmIaVp4Ngr4s57AaaGkYlPQ7xASqtKaOLjmPCxZ 9hQaysMssw0fUBo2HmAClg4mthNA778Qt+viyz/30QqokW7z9y+vMrHNdlNtavW2 Q5J+Ptj/GFPBxgXN9GOWkkEoSCc303GY7KDbuOQDvT0sXAUon171d1L4R3wUVcw+ MBdNZ/fOLiUcKZrPGbn/lOkJEOsaZgtlJ0jVaI8JKGlei6NwIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKif3TVsfa0e3pSTF2wBmcXh0QKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvODIxMzg3OGQtMzVkZC0z MGI2LWFjMDktZTYxMmUwNDkwNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2BXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBJzWc8NtWVy0rT8/95liVO6BNwKGrBUMuboJIcIjzPQIlP17rrzu+l ZjMJsFVretPECtG0tJ1hCo/FQHOH5cvyOu3KE5OLk0EsPmxa6EE0amR9zx1p5NJa o63zdmi+GDLIHl6Ug+b/ZxLukuziQqL9D+lxGfz8llxBQbxF26lI/nH7CAOSe3U9 Ie1V43y8CdsN0esHX4s1qb/obcvm2xqmoLaPZPXGMWKfertLeUe4fb/1LnjiswTY jabzXCNaWwFfQhyj63KTkRboy5Wp2yn6A6pkaYCncBZBbX09/Ge91W+Ht1z1AD48 0weJ1v85NoFpoajACwDtEGTar3GkX1c= -----END CERTIFICATE-----Generated at Mon Jun 30 20:18:55 2025 by rpki-client