$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/42fed2c7-e0b3-3af7-b342-35efac5bef13.roa File: 42fed2c7-e0b3-3af7-b342-35efac5bef13.roa (raw, json) Hash identifier: ATZIcqMLFx+gLLGfKNRQrpADjjpsNp8cktYqEfDq0nw= Subject key identifier: EE:FD:93:47:B9:AC:EB:6C:FF:DB:4F:F4:54:A1:82:3B:E0:93:61:E3 Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F432858499F249A5F4C70B649AEE77180 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/42fed2c7-e0b3-3af7-b342-35efac5bef13.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 6461 IP address blocks: 149.64.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:9a:5f:4c:70:b6:49:ae:e7:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=8ccbc39f-f460-494e-8f7e-e6ce16a04173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:72:c4:e5:d6:75:18:67:92:89:20:77:55: 5a:7d:c5:7f:b6:ba:02:16:60:44:20:2a:fa:1d:2a: f4:b9:d1:5b:eb:83:14:9b:06:0d:d3:b5:36:7d:f2: b7:7b:85:45:cb:f1:4d:06:7c:49:5c:ef:77:d3:a6: 7d:f5:d2:0e:7e:4e:4c:4d:a5:a4:59:86:87:7c:c8: 85:e5:24:8a:82:47:7f:48:e0:b2:c6:0d:bb:b7:16: fe:f1:05:86:f1:86:96:3f:ea:1e:6b:54:cd:05:94: 9e:38:d2:9b:c9:16:1a:ae:ed:9f:02:d2:4f:f5:97: f7:b0:43:47:af:14:31:28:3e:b4:bd:7e:5c:4d:63: 1e:00:01:eb:f7:3c:40:4c:d0:d3:37:53:18:e4:7f: 0b:e2:72:37:c1:f1:17:53:71:9e:88:21:d9:92:3e: 8b:8f:ff:b1:e3:ff:32:86:2f:c9:29:1d:1e:39:fc: 02:9f:f8:c8:ea:37:5c:d5:82:4b:06:10:8e:13:d2: 03:6e:52:6b:b7:d3:51:5d:2d:17:b3:b6:5b:3b:08: 41:a2:6c:47:fb:51:8b:03:eb:27:4d:7e:85:bc:b5: 02:48:cf:b3:fd:33:b7:c8:db:59:58:f3:59:16:b0: 46:bf:f9:c2:7d:db:ff:79:a7:3e:02:21:61:9b:a6: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FD:93:47:B9:AC:EB:6C:FF:DB:4F:F4:54:A1:82:3B:E0:93:61:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/42fed2c7-e0b3-3af7-b342-35efac5bef13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 149.64.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1c:b9:70:b0:41:fd:f2:86:b6:07:ec:bb:70:4a:56:98:67: 2c:93:93:07:bb:3e:65:b5:a4:30:12:10:9f:4c:c2:a2:02:da: ba:2c:3b:01:3e:8e:cc:ac:c5:1c:9b:2b:24:f1:49:ee:f1:23: 97:30:5f:d9:ac:22:b2:b0:78:84:65:bd:f1:7f:7f:cf:80:12: 5f:4d:ae:e9:9f:20:c1:28:f9:ea:36:79:be:63:60:5b:07:f2: 63:51:14:16:98:cd:e3:3a:a2:03:fc:79:4d:24:60:c3:d6:31: 20:74:0a:66:dc:b0:66:12:24:15:84:2c:06:8a:97:94:dd:23: 0f:8f:a4:27:cc:36:4c:63:a3:e2:23:64:23:9e:da:73:3c:42: 11:dd:c5:54:34:15:86:c4:94:c8:88:73:2b:6c:ee:19:48:26: 3d:36:8a:10:f7:a6:8e:68:7d:bf:2d:53:4f:eb:f3:15:a6:65: 1a:51:27:3f:ef:61:83:da:27:17:85:33:4f:1f:26:cb:8c:7d: 30:13:ef:5f:2a:40:13:67:60:78:c8:d7:bd:66:1c:36:08:6c: 46:b4:33:54:28:42:b9:27:c6:93:c0:8e:e3:a1:42:52:ba:11: 66:b4:08:db:46:8a:3f:5b:f7:5d:ac:e7:95:59:73:87:6a:af: 11:8c:7e:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJpfTHC2Sa7ncYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OGNjYmMzOWYtZjQ2MC00OTRlLThmN2UtZTZjZTE2YTA0MTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf5yxOXWdRhnkokgd1VafcV/troCFmBEICr6 HSr0udFb64MUmwYN07U2ffK3e4VFy/FNBnxJXO9306Z99dIOfk5MTaWkWYaHfMiF 5SSKgkd/SOCyxg27txb+8QWG8YaWP+oea1TNBZSeONKbyRYaru2fAtJP9Zf3sENH rxQxKD60vX5cTWMeAAHr9zxATNDTN1MY5H8L4nI3wfEXU3GeiCHZkj6Lj/+x4/8y hi/JKR0eOfwCn/jI6jdc1YJLBhCOE9IDblJrt9NRXS0Xs7ZbOwhBomxH+1GLA+sn TX6FvLUCSM+z/TO3yNtZWPNZFrBGv/nCfdv/eac+AiFhm6bS+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO79k0e5rOts/9tP9FShgjvgk2HjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvNDJmZWQyYzctZTBiMy0z YWY3LWIzNDItMzVlZmFjNWJlZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUDiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMcuXCwQf3yhrYH7LtwSlaYZyyTkwe7PmW1pDASEJ9MwqIC2rosOwE+ jsysxRybKyTxSe7xI5cwX9msIrKweIRlvfF/f8+AEl9NrumfIMEo+eo2eb5jYFsH 8mNRFBaYzeM6ogP8eU0kYMPWMSB0CmbcsGYSJBWELAaKl5TdIw+PpCfMNkxjo+Ij ZCOe2nM8QhHdxVQ0FYbElMiIcyts7hlIJj02ihD3po5ofb8tU0/r8xWmZRpRJz/v YYPaJxeFM08fJsuMfTAT718qQBNnYHjI171mHDYIbEa0M1QoQrknxpPAjuOhQlK6 EWa0CNtGij9b912s55VZc4dqrxGMfhE= -----END CERTIFICATE-----Generated at Sun May 11 14:47:40 2025 by rpki-client