$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/29405407-ca65-35ca-bd75-7cd4d56b8692.roa File: 29405407-ca65-35ca-bd75-7cd4d56b8692.roa (raw, json) Hash identifier: ji+QoSObYzcQy5Xn0cPgu5V9cGFKMECVO0Q+8YIWkY0= Subject key identifier: 68:2A:25:FB:FD:45:EF:B5:9F:32:D2:1C:A3:A8:79:80:D4:15:AD:9C Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F432858499A76F2B2754C1BFFF60E7E40 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/29405407-ca65-35ca-bd75-7cd4d56b8692.roa Signing time: Mon 21 Apr 2025 20:47:59 +0000 ROA not before: Mon 21 Apr 2025 20:47:59 +0000 ROA not after: Sun 20 Jul 2025 20:47:59 +0000 asID: 396982 IP address blocks: 199.65.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:76:f2:b2:75:4c:1b:ff:f6:0e:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Apr 21 20:47:59 2025 GMT Not After : Jul 20 20:47:59 2025 GMT Subject: CN=316ce62d-063f-40df-b715-7bc40a019d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bd:e7:13:82:79:5e:8a:02:77:8a:d3:cd:2e: b5:55:fa:3a:ff:47:8a:df:4e:87:c3:9f:6d:a5:ba: a8:73:09:4a:49:a5:6e:1d:e2:b7:0c:6f:c5:6e:5c: b7:a4:4f:02:5d:ea:9c:79:fe:c3:26:f2:15:ec:0b: bf:10:49:d8:e5:66:4c:3e:b1:88:11:df:0b:44:3f: 1c:d8:9f:84:1f:1f:10:c6:18:e1:e8:86:6b:46:6e: ac:43:40:b2:43:63:5f:70:70:6e:4c:f2:05:88:92: 5d:b5:2a:a6:17:fe:ce:20:c1:06:17:af:e3:72:6e: 54:ef:88:64:69:87:aa:04:cb:ff:3f:ff:d2:61:ee: e4:12:8c:fe:57:66:61:ad:be:ee:0b:5e:0f:d3:33: f8:56:ca:91:e4:da:11:65:80:3a:d0:7d:8f:36:31: cf:ae:14:9d:40:8e:84:e6:dc:c3:96:80:3b:be:a0: d3:c9:dd:d0:c0:54:bd:7f:31:cb:40:fd:27:bd:da: 2a:7c:f9:d4:92:69:40:64:a5:45:ef:dd:4f:d7:b0: cd:33:78:19:87:3e:de:ea:51:37:46:89:48:a3:01: 78:09:1e:d5:41:68:df:8e:47:7d:ec:65:96:a6:76: 22:b8:70:a0:2b:fd:00:96:0d:ad:7e:e7:9b:18:de: 91:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2A:25:FB:FD:45:EF:B5:9F:32:D2:1C:A3:A8:79:80:D4:15:AD:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/29405407-ca65-35ca-bd75-7cd4d56b8692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:34:03:7b:47:49:67:0f:00:32:5b:fd:df:34:aa:0b:11:47: 54:29:83:2b:65:4f:96:50:50:55:f6:55:70:26:c5:a4:4c:0a: b8:dc:75:dc:81:ba:96:59:f0:5f:6f:d3:92:e5:6d:2c:35:24: 4d:c5:f1:3b:4b:af:f2:0f:21:40:62:1f:84:37:3d:0f:da:3a: b1:ac:d5:f3:dc:46:19:e8:e7:24:18:aa:d6:47:ff:7a:6d:90: bb:fc:cd:31:57:d6:23:a8:10:bb:35:eb:9c:d1:7c:59:02:17: 2d:8e:55:03:65:81:14:35:9a:02:86:1a:69:92:2f:1e:16:dd: 29:88:03:a7:82:4e:e6:48:2e:53:c4:f9:99:c6:18:07:31:ec: 87:d9:23:b5:09:72:07:84:dc:68:6f:53:69:40:5e:1a:a9:00: c3:be:53:a4:01:56:05:56:f1:c8:18:c5:8a:3a:f8:e1:a8:7d: 8c:3a:2b:12:f4:84:6b:35:eb:a0:35:61:5b:91:9d:73:25:b9: f5:2b:c2:e1:23:41:8a:52:7a:1d:46:10:c4:eb:9b:a6:f1:95: b1:1f:ba:39:71:c7:2c:0b:47:95:32:86:2b:c5:1a:ba:32:78: 67:59:5f:41:25:c0:39:05:47:e1:38:51:aa:96:6f:04:cf:04: bd:1b:2d:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmadvKydUwb//YOfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI1MDQyMTIwNDc1OVoXDTI1MDcyMDIwNDc1OVowLzEtMCsGA1UEAxMk MzE2Y2U2MmQtMDYzZi00MGRmLWI3MTUtN2JjNDBhMDE5ZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL3nE4J5XooCd4rTzS61Vfo6/0eK306Hw59t pbqocwlKSaVuHeK3DG/Fbly3pE8CXeqcef7DJvIV7Au/EEnY5WZMPrGIEd8LRD8c 2J+EHx8Qxhjh6IZrRm6sQ0CyQ2NfcHBuTPIFiJJdtSqmF/7OIMEGF6/jcm5U74hk aYeqBMv/P//SYe7kEoz+V2Zhrb7uC14P0zP4VsqR5NoRZYA60H2PNjHPrhSdQI6E 5tzDloA7vqDTyd3QwFS9fzHLQP0nvdoqfPnUkmlAZKVF791P17DNM3gZhz7e6lE3 RolIowF4CR7VQWjfjkd97GWWpnYiuHCgK/0Alg2tfuebGN6RywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgqJfv9Re+1nzLSHKOoeYDUFa2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvMjk0MDU0MDctY2E2NS0z NWNhLWJkNzUtN2NkNGQ1NmI4NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0EoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF00A3tHSWcPADJb/d80qgsRR1QpgytlT5ZQUFX2VXAmxaRMCrjcddyB upZZ8F9v05LlbSw1JE3F8TtLr/IPIUBiH4Q3PQ/aOrGs1fPcRhno5yQYqtZH/3pt kLv8zTFX1iOoELs165zRfFkCFy2OVQNlgRQ1mgKGGmmSLx4W3SmIA6eCTuZILlPE +ZnGGAcx7IfZI7UJcgeE3GhvU2lAXhqpAMO+U6QBVgVW8cgYxYo6+OGofYw6KxL0 hGs166A1YVuRnXMlufUrwuEjQYpSeh1GEMTrm6bxlbEfujlxxywLR5UyhivFGroy eGdZX0ElwDkFR+E4UaqWbwTPBL0bLe4= -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:37 2025 by rpki-client