$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa File: 34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa (raw, json) Hash identifier: kPpLAsriiPmK2TZBl7D3HGnhBcKa+PL6d1ZV2cSQjpg= Subject key identifier: 58:38:11:EC:C5:33:9A:6B:EE:CF:91:1E:7C:A5:8E:D0:8A:12:05:22 Certificate issuer: /CN=b2456e11-ca83-4345-8884-0becc0831fb7 Certificate serial: 010D0C9F4328584A1F90240E3220F5DDC8820F80 Authority key identifier: E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 16509 IP address blocks: 216.181.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:24:0e:32:20:f5:dd:c8:82:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2456e11-ca83-4345-8884-0becc0831fb7 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=513fe8e1-d7f3-406a-9a6e-60cf0c12a879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:af:2e:46:46:d6:1d:ab:fe:82:f6:71:3b: 31:66:2f:1e:f3:f0:62:01:ea:a3:b7:f1:e4:77:2e: 18:ed:21:a9:be:37:c9:79:94:ff:7c:b2:e9:5c:cb: f4:d5:f5:b6:c7:5b:0f:6a:a0:d5:a1:f1:41:fd:4e: 60:e5:70:f6:8b:69:fb:5f:76:ab:c6:9e:3e:8e:69: 01:e0:3a:d1:26:fc:88:96:3a:ec:8f:88:00:8e:99: b4:80:6a:b3:36:6a:cb:77:68:e9:42:ff:28:13:cb: d1:68:d7:3e:72:a8:15:8f:79:2f:08:e9:65:d6:5b: 05:bb:31:c3:0e:71:e0:d6:6f:34:26:ef:4f:0d:30: 14:f4:eb:71:47:33:22:6a:7e:11:b9:19:d3:15:8f: 3a:f8:81:93:c7:72:03:29:e2:a3:1a:f2:ca:5f:e9: 99:e1:5a:b0:1f:96:6d:2d:73:24:96:4d:23:f1:9b: bc:a3:48:06:ef:a5:bd:1b:6d:9d:38:7d:9f:71:ef: f4:4f:ad:9b:69:3d:40:7b:89:81:59:1b:31:b9:cc: a8:39:d2:2f:0c:54:60:c7:b1:26:8a:d9:eb:aa:9d: d4:3c:7f:be:74:bf:58:2a:43:13:35:72:2c:4e:2c: 16:9e:cb:1b:cb:f8:05:b8:dd:da:ee:5d:7d:2d:c0: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:38:11:EC:C5:33:9A:6B:EE:CF:91:1E:7C:A5:8E:D0:8A:12:05:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl X509v3 Authority Key Identifier: keyid:E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer sbgp-ipAddrBlock: critical IPv4: 216.181.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6f:26:4d:98:32:5a:38:28:5d:d4:cf:89:95:66:35:e1:2d: 83:9d:94:a6:22:0c:18:f2:7c:91:e8:af:7d:a4:a6:3a:22:a1: 18:b2:d4:58:01:d1:24:d8:d6:c8:76:71:e5:69:2e:6f:2e:e5: 78:f5:18:25:9b:1b:bc:ba:16:89:86:c1:25:8b:6e:55:75:76: 34:b3:af:44:a1:37:e1:46:db:4f:0b:07:d9:10:24:77:73:69: 91:90:f2:36:b6:d3:87:46:1d:40:e2:ce:60:53:2e:d7:35:1b: f6:02:c1:9c:fe:74:a0:0e:59:de:e5:56:fe:ef:35:4a:47:24: 99:d8:d7:da:e3:1f:a9:09:14:54:89:6e:12:ba:4c:50:cc:9c: e9:27:e0:b0:bf:52:3e:da:d5:e5:7f:36:a9:85:70:1f:78:e9: 65:1a:f4:25:79:e3:6a:c3:e6:e4:67:0f:5c:42:76:84:c9:40: 84:80:79:85:d6:cc:da:7e:75:9a:15:22:87:3d:91:72:e9:dd: ab:a3:fa:32:40:12:70:de:05:78:4f:bf:d7:70:36:35:9d:a9: c4:34:6f:c2:ab:3c:9e:04:4c:80:2d:86:44:5f:c5:e4:06:73: 4b:b4:a8:c1:01:1b:d9:fc:e6:16:87:33:2e:11:70:74:6f:74: 9b:0d:95:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCQOMiD13ciCD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI0NTZlMTEtY2E4My00MzQ1LTg4ODQtMGJlY2MwODMx ZmI3MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk NTEzZmU4ZTEtZDdmMy00MDZhLTlhNmUtNjBjZjBjMTJhODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv2vLkZG1h2r/oL2cTsxZi8e8/BiAeqjt/Hk dy4Y7SGpvjfJeZT/fLLpXMv01fW2x1sPaqDVofFB/U5g5XD2i2n7X3arxp4+jmkB 4DrRJvyIljrsj4gAjpm0gGqzNmrLd2jpQv8oE8vRaNc+cqgVj3kvCOll1lsFuzHD DnHg1m80Ju9PDTAU9OtxRzMian4RuRnTFY86+IGTx3IDKeKjGvLKX+mZ4VqwH5Zt LXMklk0j8Zu8o0gG76W9G22dOH2fce/0T62baT1Ae4mBWRsxucyoOdIvDFRgx7Em itnrqp3UPH++dL9YKkMTNXIsTiwWnssby/gFuN3a7l19LcBauQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg4EezFM5pr7s+RHnyljtCKEgUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1 NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVjYzA4MzFmYjcvMzRmM2FhMTYtMmFmYi0z OWJiLWE3ZWMtMGNjODc5N2UzMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjI0NTZlMTEtY2E4My00MzQ1LTg4 ODQtMGJlY2MwODMxZmI3L2IyNDU2ZTExLWNhODMtNDM0NS04ODg0LTBiZWNjMDgz MWZiNy5jcmwwHwYDVR0jBBgwFoAU6A36GUDhzVrGEK64RNgLBcQYCxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVj YzA4MzFmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LUTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZvJk2YMlo4KF3Uz4mVZjXhLYOdlKYiDBjyfJHor32kpjoioRiy1FgB 0STY1sh2ceVpLm8u5Xj1GCWbG7y6FomGwSWLblV1djSzr0ShN+FG208LB9kQJHdz aZGQ8ja204dGHUDizmBTLtc1G/YCwZz+dKAOWd7lVv7vNUpHJJnY19rjH6kJFFSJ bhK6TFDMnOkn4LC/Uj7a1eV/NqmFcB946WUa9CV542rD5uRnD1xCdoTJQISAeYXW zNp+dZoVIoc9kXLp3auj+jJAEnDeBXhPv9dwNjWdqcQ0b8KrPJ4ETIAthkRfxeQG c0u0qMEBG9n85haHMy4RcHRvdJsNlZc= -----END CERTIFICATE-----Generated at Tue Jun 17 20:28:18 2025 by rpki-client