$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bd66d5a9-c9ec-3258-a868-cb9f47a6bbda.roa File: bd66d5a9-c9ec-3258-a868-cb9f47a6bbda.roa (raw, json) Hash identifier: wwAzZH48sCWwilBH2UMYz5c0OgI1TX0yhcJ1L2Y7gfs= Subject key identifier: 8D:F5:D4:23:A0:BD:6D:E9:E9:54:16:E5:82:36:34:25:F4:3B:10:9A Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F432858499AF485FFB30B9FE2940E0A80 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bd66d5a9-c9ec-3258-a868-cb9f47a6bbda.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 188 IP address blocks: 198.22.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:85:ff:b3:0b:9f:e2:94:0e:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=37bf9d69-7891-4631-b117-d398f38a6e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:9a:c5:e0:6d:d7:8b:d4:af:98:70:a7:b4: eb:3d:45:19:2e:52:4a:80:d9:ca:b3:92:55:ba:96: 4b:9d:fe:af:60:13:9f:c8:bf:6f:52:f5:ed:42:eb: 16:2a:db:f8:b2:ad:33:4b:9a:75:f8:75:8b:40:98: 65:2c:ef:73:94:10:a0:63:44:51:18:8a:c5:82:9a: 3e:d6:f8:20:05:b9:31:1d:ff:bc:87:8a:da:97:f7: c2:92:56:03:d7:c5:c7:34:e9:2a:48:f5:4f:70:4a: 65:50:9c:55:54:43:e4:96:98:da:ef:96:df:26:5c: 3c:13:6b:df:30:f6:e3:11:87:b5:7c:a9:02:3b:c3: c9:a0:cb:ad:7a:fc:f3:cd:24:94:bc:a0:76:00:7a: 20:05:76:28:84:ff:23:9b:c0:cf:93:f1:36:94:f5: c5:61:f2:f4:67:de:25:3a:a3:8d:94:09:1b:e4:62: 22:ac:bf:58:ce:4a:59:18:cd:41:cb:ac:56:ea:2e: b7:27:51:57:f0:e7:9d:10:e3:f8:d0:65:7b:26:e5: 09:2d:35:10:55:e9:8e:a3:47:58:3d:42:15:a8:67: 54:1d:66:21:5e:df:3f:0a:20:bc:57:4b:91:b3:b9: a7:30:42:b0:42:91:1b:b5:e5:fe:9e:13:0f:cc:fc: 1d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F5:D4:23:A0:BD:6D:E9:E9:54:16:E5:82:36:34:25:F4:3B:10:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bd66d5a9-c9ec-3258-a868-cb9f47a6bbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 198.22.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:69:39:ab:ef:36:b8:d9:c5:64:af:a9:1d:92:37:41:a3:0c: 28:62:96:e8:c2:78:2a:37:ab:ca:c4:c3:b3:d1:f0:65:67:95: c8:c8:d8:2b:07:6c:37:4b:6b:19:67:c3:d2:4c:86:87:cd:20: df:47:71:f1:cc:c0:c1:8e:f0:08:18:5d:0e:96:d1:88:29:7e: 4b:2d:4a:39:bc:b2:d7:9c:39:6b:d0:f5:2b:10:8d:5a:74:72: a4:c3:11:1c:66:5b:d5:10:2a:06:16:d4:52:78:cd:8c:34:3e: 12:20:49:31:f8:38:20:88:b4:5a:25:5b:fd:73:d2:50:53:f9: e7:5f:13:9b:aa:84:22:ad:b2:0c:64:2d:fb:56:60:11:fc:80: 14:eb:ed:81:6a:03:f5:1c:13:8f:13:f4:02:17:cd:5c:f6:05: 36:f4:e0:d3:da:cc:a4:14:51:8d:45:65:22:8c:cb:85:71:69: f6:5e:cc:7a:00:65:43:16:7f:e5:12:e2:0a:ad:ec:ec:1d:36: eb:06:02:37:4e:6f:8d:61:d9:66:c7:cc:89:30:d8:a9:66:25: 17:4e:3b:7c:ba:c6:06:2f:80:6d:93:c7:e7:d6:cb:37:9b:a3: 88:38:6d:57:c2:4d:87:83:87:cc:bd:32:3b:f2:03:3a:1e:b7: 72:16:43:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IX/swuf4pQOCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MzdiZjlkNjktNzg5MS00NjMxLWIxMTctZDM5OGYzOGE2ZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtqaxeBt14vUr5hwp7TrPUUZLlJKgNnKs5JV upZLnf6vYBOfyL9vUvXtQusWKtv4sq0zS5p1+HWLQJhlLO9zlBCgY0RRGIrFgpo+ 1vggBbkxHf+8h4ral/fCklYD18XHNOkqSPVPcEplUJxVVEPklpja75bfJlw8E2vf MPbjEYe1fKkCO8PJoMutevzzzSSUvKB2AHogBXYohP8jm8DPk/E2lPXFYfL0Z94l OqONlAkb5GIirL9YzkpZGM1By6xW6i63J1FX8OedEOP40GV7JuUJLTUQVemOo0dY PUIVqGdUHWYhXt8/CiC8V0uRs7mnMEKwQpEbteX+nhMPzPwd+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI311COgvW3p6VQW5YI2NCX0OxCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvYmQ2NmQ1YTktYzllYy0z MjU4LWE4NjgtY2I5ZjQ3YTZiYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1pOavvNrjZxWSvqR2SN0GjDChilujCeCo3q8rEw7PR8GVnlcjI2CsH bDdLaxlnw9JMhofNIN9HcfHMwMGO8AgYXQ6W0YgpfkstSjm8stecOWvQ9SsQjVp0 cqTDERxmW9UQKgYW1FJ4zYw0PhIgSTH4OCCItFolW/1z0lBT+edfE5uqhCKtsgxk LftWYBH8gBTr7YFqA/UcE48T9AIXzVz2BTb04NPazKQUUY1FZSKMy4VxafZezHoA ZUMWf+US4gqt7OwdNusGAjdOb41h2WbHzIkw2KlmJRdOO3y6xgYvgG2Tx+fWyzeb o4g4bVfCTYeDh8y9MjvyAzoet3IWQ4M= -----END CERTIFICATE-----Generated at Mon May 12 08:21:55 2025 by rpki-client