$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ad039e30-d35a-3212-ab40-0e7e21434e3a.roa File: ad039e30-d35a-3212-ab40-0e7e21434e3a.roa (raw, json) Hash identifier: RRQWc0B/Tk84Cwc2ZYQ/dALlRGsr26qWTUgcsXC0ps0= Subject key identifier: AF:20:F9:7E:28:33:08:0C:64:E4:9B:28:D4:8A:E4:9E:26:25:5B:FD Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584A10354168A6EBFC7106399680 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ad039e30-d35a-3212-ab40-0e7e21434e3a.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 8075 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:41:68:a6:eb:fc:71:06:39:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=87161e52-6d27-43b7-8de5-265dab0cd574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:78:47:9f:01:bb:ad:ce:a6:07:89:51:90:53: 88:1c:03:43:9c:ba:06:d8:03:4e:88:1d:54:e5:62: e2:cf:fc:3f:f4:04:d7:d6:ca:4d:85:51:ee:2e:fb: 1d:06:ee:0f:c6:f3:0a:8f:65:21:07:55:d4:56:c1: 51:8d:b7:e0:30:17:8c:fe:18:7e:79:b9:4b:4d:70: 00:40:33:03:c3:45:db:21:8a:b5:ae:53:aa:1e:d7: 4e:cc:5c:23:da:18:64:72:5c:e1:32:40:10:45:a7: 5b:db:f5:ce:93:ce:93:14:0a:cd:3c:b6:fa:d8:b7: de:54:27:a4:0c:a4:04:cf:3b:ea:12:9e:42:f4:73: b3:e3:10:3b:76:1a:82:d8:f0:65:22:be:1b:3b:97: 9d:75:0b:99:5c:5d:55:0f:af:16:32:da:92:92:70: 72:97:6c:30:ef:1b:ad:3e:26:cd:29:1d:c8:bd:54: 22:d4:6c:6a:79:d4:79:12:d8:aa:e7:62:df:36:d0: 47:d6:3d:2d:94:4f:5c:c2:91:0c:3d:44:bf:90:51: ff:1f:d4:39:a7:26:99:e5:ad:a7:d0:9f:bb:64:64: bc:68:bd:93:9a:3e:df:bb:42:e4:b0:72:8a:7b:40: 71:56:05:7e:ad:80:98:98:02:79:6d:1d:58:f9:67: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:20:F9:7E:28:33:08:0C:64:E4:9B:28:D4:8A:E4:9E:26:25:5B:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ad039e30-d35a-3212-ab40-0e7e21434e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:27:18:12:56:7e:ff:62:ed:66:5e:f6:a6:37:2c:d7:b9:a6: 4c:41:56:cb:ad:1d:88:2a:44:c1:3f:e5:49:57:d9:c7:ac:bd: ff:63:74:62:3b:17:aa:6a:14:ff:8e:c5:a0:4a:03:07:c4:f6: 76:b0:88:4f:93:a3:a2:ca:60:29:3f:7f:d3:cc:7f:42:ee:12: 7a:d4:14:40:7e:af:90:d9:f2:c0:83:23:29:30:30:a6:a0:3c: 41:4c:83:4d:d0:8a:91:a2:57:b1:d1:77:a8:10:3d:7a:22:59: 71:92:1a:f2:be:f9:c6:9a:58:ca:86:b8:b4:61:59:6a:73:89: e1:a2:17:bd:db:92:fc:c1:08:70:35:99:61:d9:23:24:dd:d0: f5:05:7f:b9:72:f2:53:16:06:0d:86:e8:be:b7:f8:64:81:90: 5d:b9:22:52:80:b8:ca:5a:5a:d4:df:a0:d3:8f:be:b6:2b:c8: d3:38:f9:a8:a0:9f:83:82:a9:b9:9a:1d:ce:d8:c4:88:9c:9b: 3a:a7:94:6d:07:3e:61:38:10:a8:85:41:bc:2d:01:47:70:32: 8c:2d:dd:7c:95:9b:6f:ad:4f:32:94:ba:dd:f1:fc:47:df:a4: 98:39:b0:e3:9c:49:fc:6e:2c:2b:9c:43:55:39:92:9f:58:ef: 45:77:ba:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUFopuv8cQY5loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ODcxNjFlNTItNmQyNy00M2I3LThkZTUtMjY1ZGFiMGNkNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknhHnwG7rc6mB4lRkFOIHANDnLoG2ANOiB1U 5WLiz/w/9ATX1spNhVHuLvsdBu4PxvMKj2UhB1XUVsFRjbfgMBeM/hh+eblLTXAA QDMDw0XbIYq1rlOqHtdOzFwj2hhkclzhMkAQRadb2/XOk86TFArNPLb62LfeVCek DKQEzzvqEp5C9HOz4xA7dhqC2PBlIr4bO5eddQuZXF1VD68WMtqSknByl2ww7xut PibNKR3IvVQi1GxqedR5Etiq52LfNtBH1j0tlE9cwpEMPUS/kFH/H9Q5pyaZ5a2n 0J+7ZGS8aL2Tmj7fu0LksHKKe0BxVgV+rYCYmAJ5bR1Y+WdurQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8g+X4oMwgMZOSbKNSK5J4mJVv9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvYWQwMzllMzAtZDM1YS0z MjEyLWFiNDAtMGU3ZTIxNDM0ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHknGBJWfv9i7WZe9qY3LNe5pkxBVsutHYgqRME/5UlX2cesvf9jdGI7 F6pqFP+OxaBKAwfE9nawiE+To6LKYCk/f9PMf0LuEnrUFEB+r5DZ8sCDIykwMKag PEFMg03QipGiV7HRd6gQPXoiWXGSGvK++caaWMqGuLRhWWpzieGiF73bkvzBCHA1 mWHZIyTd0PUFf7ly8lMWBg2G6L63+GSBkF25IlKAuMpaWtTfoNOPvrYryNM4+aig n4OCqbmaHc7YxIicmzqnlG0HPmE4EKiFQbwtAUdwMowt3XyVm2+tTzKUut3x/Eff pJg5sOOcSfxuLCucQ1U5kp9Y70V3uuo= -----END CERTIFICATE-----Generated at Tue Jul 1 00:36:48 2025 by rpki-client