$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa File: d508a1f5-3140-32b0-b64e-df158da10677.roa (raw, json) Hash identifier: F4au0DUb6iJksAFdjViYfsgcgmIbOal/2trI2tGqDUg= Subject key identifier: 43:50:04:B4:B7:2C:E2:E5:70:9B:4F:E2:EB:6F:FD:06:BD:92:28:66 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584A07D52F7D3F50F2826625C380 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2f:7d:3f:50:f2:82:66:25:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=9ba43e1a-6072-415a-b906-55faca6d54f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:db:9d:fe:16:2a:9c:73:a7:d9:a9:e5:88:40: af:d5:2c:92:7a:30:00:43:f1:1a:8a:7c:79:15:27: df:3e:21:06:60:fb:d5:62:27:4f:72:38:5e:09:14: 54:ba:9a:e2:b4:a0:87:e2:81:ba:70:6c:2e:df:7e: 1d:f7:4c:ad:e0:7f:cf:3c:82:ed:3e:1b:4c:99:b4: c9:53:25:09:16:2d:12:8c:46:85:0f:bc:89:9b:15: d2:72:ca:84:01:5a:76:0d:b5:0f:10:fe:cf:20:f5: 07:29:47:52:11:37:dd:32:f1:e1:56:a5:40:e6:f6: e5:50:22:cb:a0:6c:80:e2:8a:58:66:c1:0f:8c:3b: 8d:03:d1:d1:fc:46:03:19:3c:90:3c:bc:e8:22:9d: f5:10:fd:31:03:ad:37:ab:bf:75:ac:e5:3a:40:86: 35:44:21:a6:6e:d0:fa:b7:52:60:46:a4:68:00:00: f6:45:e4:42:9f:44:3f:cd:6e:25:26:c4:4a:d2:f7: 68:e7:b0:6b:9b:e0:ef:e3:ff:84:ea:08:1e:65:71: a7:96:6c:dc:ba:ce:47:d6:ff:93:02:e9:8b:45:80: b8:0c:1a:78:a1:aa:02:97:fc:c3:8a:5a:a1:c0:f5: 61:3c:7b:f6:4e:a3:6d:f9:65:c2:27:47:e3:2d:a2: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:50:04:B4:B7:2C:E2:E5:70:9B:4F:E2:EB:6F:FD:06:BD:92:28:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:23:46:5e:76:f9:5a:e1:22:b3:b9:da:62:c6:b1:40:5c:20: 78:d8:30:c6:7f:ce:35:03:07:4e:13:af:20:74:78:d3:2a:12: 1c:7a:1f:38:d4:4a:21:97:32:7f:c3:17:21:1c:4c:d0:e9:0c: 7d:9b:d3:22:2b:46:ec:98:8f:be:f8:de:59:85:fe:1f:c8:c4: a6:9e:51:5b:49:f3:33:c0:62:ad:31:07:66:eb:a7:53:97:74: a4:0f:73:16:70:fa:fe:2d:32:ef:16:f9:9b:5d:68:4b:38:89: 2a:5b:c2:97:9c:4c:34:25:46:ee:0e:02:c8:b4:ce:da:a8:6d: ce:ea:74:36:b7:6a:35:9e:f1:89:0a:a2:31:64:da:d8:48:3d: 0e:42:e5:50:60:6c:64:de:39:30:a8:fa:8c:2e:35:51:f3:91: 13:96:38:a6:dd:df:74:05:1b:3b:fa:8d:3f:32:2e:7f:a6:22: 17:41:ed:54:cc:e9:5c:b3:ee:9e:27:32:cb:6b:e2:c8:52:22: 9e:94:90:02:95:18:38:f4:a1:54:46:a2:07:38:2e:21:d2:d6: 7b:7d:9e:f1:6c:9a:85:d6:0d:6e:20:1e:cd:c8:80:9d:c3:c6: 33:c2:3a:20:ba:7c:e7:5f:9e:07:ef:18:0f:c7:0d:a8:45:af: 81:d3:bd:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1S99P1DygmYlw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk OWJhNDNlMWEtNjA3Mi00MTVhLWI5MDYtNTVmYWNhNmQ1NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tud/hYqnHOn2anliECv1SySejAAQ/Eainx5 FSffPiEGYPvVYidPcjheCRRUupritKCH4oG6cGwu334d90yt4H/PPILtPhtMmbTJ UyUJFi0SjEaFD7yJmxXScsqEAVp2DbUPEP7PIPUHKUdSETfdMvHhVqVA5vblUCLL oGyA4opYZsEPjDuNA9HR/EYDGTyQPLzoIp31EP0xA603q791rOU6QIY1RCGmbtD6 t1JgRqRoAAD2ReRCn0Q/zW4lJsRK0vdo57Brm+Dv4/+E6ggeZXGnlmzcus5H1v+T AumLRYC4DBp4oaoCl/zDilqhwPVhPHv2TqNt+WXCJ0fjLaKnlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENQBLS3LOLlcJtP4utv/Qa9kihmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvZDUwOGExZjUtMzE0MC0z MmIwLWI2NGUtZGYxNThkYTEwNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAjRl52+VrhIrO52mLGsUBcIHjYMMZ/zjUDB04TryB0eNMqEhx6HzjU SiGXMn/DFyEcTNDpDH2b0yIrRuyYj7743lmF/h/IxKaeUVtJ8zPAYq0xB2brp1OX dKQPcxZw+v4tMu8W+ZtdaEs4iSpbwpecTDQlRu4OAsi0ztqobc7qdDa3ajWe8YkK ojFk2thIPQ5C5VBgbGTeOTCo+owuNVHzkROWOKbd33QFGzv6jT8yLn+mIhdB7VTM 6Vyz7p4nMstr4shSIp6UkAKVGDj0oVRGogc4LiHS1nt9nvFsmoXWDW4gHs3IgJ3D xjPCOiC6fOdfngfvGA/HDahFr4HTvT8= -----END CERTIFICATE-----Generated at Sat Jun 14 06:48:58 2025 by rpki-client