$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/a2a5412a-3648-378f-aff7-c7d443d07c08.roa File: a2a5412a-3648-378f-aff7-c7d443d07c08.roa (raw, json) Hash identifier: 3vNvctcy+VCPM7gZYNDMlhBWZJ6284H6kyJpie4BoOU= Subject key identifier: B5:30:A8:52:49:D1:01:B4:86:CC:1A:F4:90:C0:5D:F6:A1:0C:43:82 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584A07D53881799FF1FA2FC80420 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/a2a5412a-3648-378f-aff7-c7d443d07c08.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 3320 IP address blocks: 81.199.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:38:81:79:9f:f1:fa:2f:c8:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=9b110335-a067-4284-880d-287aef629d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:b5:2b:d2:98:40:1f:31:df:97:69:3c:19: 8e:00:b3:eb:9d:b8:8f:5b:46:41:ab:67:af:be:34: 8f:84:1b:27:3f:c8:8a:c0:e9:9c:a2:c9:eb:af:0a: b2:7f:e5:62:63:78:0c:41:b9:da:fe:05:d6:6f:b6: 1a:33:f6:42:13:15:8f:a5:6c:bc:f2:06:35:48:1e: fb:85:56:7e:04:6a:f5:7c:44:58:36:ec:49:4e:70: 81:3c:0d:b1:c8:e0:eb:cd:46:e4:bd:3e:a8:54:66: eb:c8:b4:42:91:1e:88:4a:dc:6f:ec:33:29:8d:51: 92:c0:b6:89:8f:83:32:85:14:24:4f:cc:cf:64:0f: 8e:18:b5:4d:ad:80:8c:2e:63:bb:85:da:9c:c9:ed: 3d:20:3e:2f:34:62:50:93:8a:61:16:da:bc:05:1e: a5:2d:4d:1b:9e:09:72:40:71:9b:c3:01:25:3c:7e: c2:1f:ab:ce:6d:d0:47:49:8b:e3:a7:4b:a5:76:fd: 12:95:2b:0b:7b:e8:36:76:63:6d:93:cf:82:da:2b: b5:51:3e:92:12:79:54:f1:a6:98:e5:dd:f8:e7:a8: 1d:fe:9a:ac:c4:f5:a4:f6:c4:66:06:36:cc:e4:ae: 8f:80:99:af:e7:d7:75:7e:4a:6a:a2:df:18:c3:00: 16:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:30:A8:52:49:D1:01:B4:86:CC:1A:F4:90:C0:5D:F6:A1:0C:43:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/a2a5412a-3648-378f-aff7-c7d443d07c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:07:9c:3c:56:43:c1:f9:df:ac:1b:76:bf:3a:bc:a5:9d:1f: dc:44:c6:48:53:93:f7:39:66:0e:99:74:1f:a1:f7:61:06:0d: 86:7d:1f:ce:bc:10:21:3c:7f:21:f8:fc:95:ca:1b:93:ea:72: 33:42:5e:e6:bd:79:8c:57:f3:b3:81:35:89:9f:01:ce:e7:1b: cd:54:38:fb:72:a6:e0:da:bc:7d:8c:1a:76:3c:d7:c3:5d:a8: 27:68:40:55:75:a2:5e:e9:18:ba:7e:ec:5a:97:85:63:e5:b4: 5e:b0:21:38:af:66:60:35:60:ae:e3:0d:88:34:f0:1a:99:bf: 18:02:ca:95:dc:ac:9d:41:14:4f:b2:83:09:25:fa:06:6f:92: 05:95:a0:59:cf:24:4b:ac:08:1e:48:b7:65:d5:c6:5c:c8:bb: 07:69:38:30:34:bd:9c:d4:fe:52:b5:25:22:57:b9:86:d2:de: 2d:10:5c:00:66:8c:67:ea:6d:10:e1:38:b5:a8:22:3b:96:65: 62:65:74:72:9f:ae:cf:91:e7:df:14:bf:35:e9:c4:68:46:b5: e6:6a:28:95:80:7b:53:f4:88:76:92:30:8d:a1:05:71:a4:c6: 4a:01:d7:8d:8d:4d:e6:ae:f7:93:3d:e0:4d:6c:5a:61:04:35: fd:62:5b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TiBeZ/x+i/IBCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk OWIxMTAzMzUtYTA2Ny00Mjg0LTg4MGQtMjg3YWVmNjI5ZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW21K9KYQB8x35dpPBmOALPrnbiPW0ZBq2ev vjSPhBsnP8iKwOmcosnrrwqyf+ViY3gMQbna/gXWb7YaM/ZCExWPpWy88gY1SB77 hVZ+BGr1fERYNuxJTnCBPA2xyODrzUbkvT6oVGbryLRCkR6IStxv7DMpjVGSwLaJ j4MyhRQkT8zPZA+OGLVNrYCMLmO7hdqcye09ID4vNGJQk4phFtq8BR6lLU0bngly QHGbwwElPH7CH6vObdBHSYvjp0uldv0SlSsLe+g2dmNtk8+C2iu1UT6SEnlU8aaY 5d3456gd/pqsxPWk9sRmBjbM5K6PgJmv59d1fkpqot8YwwAWAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUwqFJJ0QG0hswa9JDAXfahDEOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvYTJhNTQxMmEtMzY0OC0z NzhmLWFmZjctYzdkNDQzZDA3YzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUcdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwHnDxWQ8H536wbdr86vKWdH9xExkhTk/c5Zg6ZdB+h92EGDYZ9H868 ECE8fyH4/JXKG5PqcjNCXua9eYxX87OBNYmfAc7nG81UOPtypuDavH2MGnY818Nd qCdoQFV1ol7pGLp+7FqXhWPltF6wITivZmA1YK7jDYg08BqZvxgCypXcrJ1BFE+y gwkl+gZvkgWVoFnPJEusCB5It2XVxlzIuwdpODA0vZzU/lK1JSJXuYbS3i0QXABm jGfqbRDhOLWoIjuWZWJldHKfrs+R598UvzXpxGhGteZqKJWAe1P0iHaSMI2hBXGk xkoB142NTeau95M94E1sWmEENf1iW/Q= -----END CERTIFICATE-----Generated at Mon Jun 16 01:18:44 2025 by rpki-client