$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/c02dd316-4f22-3bfd-a067-da3218dd31a1.roa File: c02dd316-4f22-3bfd-a067-da3218dd31a1.roa (raw, json) Hash identifier: BveaxU5cxoNn7H/jcvn+OAZIMeBXN7dxV6gvIU+G8aw= Subject key identifier: 63:A1:F4:00:B9:7E:C5:B1:D8:56:2D:3F:6F:BD:BF:2A:D9:8B:21:ED Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F432858499A772A9C1C3BEFD585AAF380 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/c02dd316-4f22-3bfd-a067-da3218dd31a1.roa Signing time: Mon 21 Apr 2025 20:48:25 +0000 ROA not before: Mon 21 Apr 2025 20:48:25 +0000 ROA not after: Sun 20 Jul 2025 20:48:25 +0000 asID: 396982 IP address blocks: 199.65.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:77:2a:9c:1c:3b:ef:d5:85:aa:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Apr 21 20:48:25 2025 GMT Not After : Jul 20 20:48:25 2025 GMT Subject: CN=43dbe1dd-3c16-4bc0-9341-0aed9aba0445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5e:13:e2:71:3c:0f:55:1c:88:2f:23:30:cc: 2f:55:78:c6:d8:be:08:7b:23:0b:c6:dc:c6:26:be: 1b:69:99:9d:1a:b7:3c:e1:08:ca:bc:32:4e:5b:8b: 2d:21:a0:b3:96:c0:2c:8a:7e:67:8e:fd:b0:19:7c: 1a:10:6a:54:03:6f:cc:b6:68:74:76:c4:36:63:4e: 2c:8c:52:72:77:f1:00:45:8e:70:a8:05:bb:c5:57: 8e:c9:20:de:58:20:bf:58:61:92:e9:e4:4c:78:cf: e2:97:a4:43:ca:ce:83:ef:2b:5b:ba:cd:37:0f:29: f5:ac:2b:20:43:1d:61:e0:cd:c0:51:d1:e9:04:68: ae:5d:30:7c:8c:b8:30:ea:2a:05:af:a5:24:ae:0a: a3:15:01:52:30:f7:dc:b2:7e:5e:9a:6e:16:35:4b: a2:24:53:cf:21:46:13:e6:13:30:5d:4c:6e:99:af: 33:35:51:dd:d3:5b:6b:83:d3:4c:ca:45:8c:50:24: 89:06:a2:d7:14:3e:98:33:7e:54:80:f9:fd:21:a4: 34:eb:1b:2d:38:a0:ea:7e:ea:a0:4a:51:de:4b:6f: ea:57:da:30:83:dd:d0:ec:22:97:22:92:17:95:80: 6e:11:f2:a6:b9:be:7c:60:ef:ca:73:94:73:a7:fa: fa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A1:F4:00:B9:7E:C5:B1:D8:56:2D:3F:6F:BD:BF:2A:D9:8B:21:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/c02dd316-4f22-3bfd-a067-da3218dd31a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:69:2c:5b:2a:ee:77:4c:47:23:00:eb:16:f9:79:bc:5e:c0: 91:2c:23:c9:6d:ff:2b:0c:1e:5e:1e:26:29:24:ba:6d:6e:77: 16:c6:a7:c6:2d:0c:15:53:01:a4:e6:3c:52:38:46:eb:17:f8: 38:8b:4c:4e:8d:d4:d3:b5:7d:f6:3c:17:6b:c2:21:32:f6:59: bf:3e:be:1c:ec:0d:74:59:ab:2b:0c:e9:2a:fe:26:b4:a5:b9: 88:50:a0:5b:ef:3f:8c:28:77:da:b3:66:89:54:76:1d:5a:fa: bd:e9:8f:12:ab:f1:b2:70:7d:b7:ef:ce:34:62:64:a1:fb:c2: 2b:c4:e6:45:b7:1d:cd:f0:f0:b2:e6:b7:91:24:5e:1e:f8:99: f0:f4:ca:28:53:f3:8e:94:83:bd:ed:ed:47:03:c2:34:75:fb: 11:15:bb:f7:df:81:ab:2f:ba:c3:e9:1b:dc:5a:19:bb:3b:b2: 62:2b:8f:0a:bc:6a:ca:e4:bd:98:9d:46:db:a9:fc:88:83:db: 4a:dc:a2:25:2d:cb:b5:5e:83:09:49:ed:34:bd:7e:13:5a:9e: d7:e3:81:e8:da:cf:07:d1:cb:16:42:d2:0f:ae:64:35:c0:ef: 35:7f:9e:89:7f:49:68:74:37:99:9d:8e:2d:df:39:4b:c3:bf: f2:8f:6c:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmadyqcHDvv1YWq84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI1MDQyMTIwNDgyNVoXDTI1MDcyMDIwNDgyNVowLzEtMCsGA1UEAxMk NDNkYmUxZGQtM2MxNi00YmMwLTkzNDEtMGFlZDlhYmEwNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl4T4nE8D1UciC8jMMwvVXjG2L4IeyMLxtzG Jr4baZmdGrc84QjKvDJOW4stIaCzlsAsin5njv2wGXwaEGpUA2/Mtmh0dsQ2Y04s jFJyd/EARY5wqAW7xVeOySDeWCC/WGGS6eRMeM/il6RDys6D7ytbus03Dyn1rCsg Qx1h4M3AUdHpBGiuXTB8jLgw6ioFr6UkrgqjFQFSMPfcsn5emm4WNUuiJFPPIUYT 5hMwXUxuma8zNVHd01trg9NMykWMUCSJBqLXFD6YM35UgPn9IaQ06xstOKDqfuqg SlHeS2/qV9owg93Q7CKXIpIXlYBuEfKmub58YO/Kc5Rzp/r6DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOh9AC5fsWx2FYtP2+9vyrZiyHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvYzAyZGQzMTYtNGYyMi0z YmZkLWEwNjctZGEzMjE4ZGQzMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJpLFsq7ndMRyMA6xb5ebxewJEsI8lt/ysMHl4eJikkum1udxbGp8Yt DBVTAaTmPFI4RusX+DiLTE6N1NO1ffY8F2vCITL2Wb8+vhzsDXRZqysM6Sr+JrSl uYhQoFvvP4wod9qzZolUdh1a+r3pjxKr8bJwfbfvzjRiZKH7wivE5kW3Hc3w8LLm t5EkXh74mfD0yihT846Ug73t7UcDwjR1+xEVu/ffgasvusPpG9xaGbs7smIrjwq8 asrkvZidRtup/IiD20rcoiUty7VegwlJ7TS9fhNantfjgejazwfRyxZC0g+uZDXA 7zV/nol/SWh0N5mdji3fOUvDv/KPbA0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:42:05 2025 by rpki-client