$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/196dc71f-9dea-3538-bf9e-512a28a260e5.roa File: 196dc71f-9dea-3538-bf9e-512a28a260e5.roa (raw, json) Hash identifier: nbwZWmOBQxjFy1YA9cqbzXMAQSVQxTYqGita6N7G1rg= Subject key identifier: 57:2B:D9:01:3F:8C:AA:C0:14:D9:89:BA:22:D6:62:9B:C7:30:7B:C6 Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F43285849A089CF76FFEBF8C9473CB7C0 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/196dc71f-9dea-3538-bf9e-512a28a260e5.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 188 IP address blocks: 198.151.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:cf:76:ff:eb:f8:c9:47:3c:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=661f026e-6092-4389-bad8-da9a727587c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:1b:a7:fe:24:18:5a:7a:6f:39:f0:3c:59: af:17:61:ee:e7:47:12:84:99:c5:90:28:05:95:14: 5e:2f:45:a0:43:18:7d:01:c3:7f:16:2b:b7:b9:2c: c2:a0:70:37:20:1b:cc:9f:13:38:f1:a0:0d:c4:32: 56:5a:24:06:ca:97:90:0d:3a:71:40:82:e7:77:3d: e9:cf:61:97:6d:0e:3d:83:d1:ec:5f:12:73:ef:9e: 46:6b:d4:42:04:a4:61:c1:05:06:19:07:bf:23:76: d0:df:55:c7:0b:c8:08:fa:68:12:90:8f:05:bb:5c: 8b:f0:48:b8:7c:b2:00:c8:b7:6e:d0:04:a3:8c:0d: ae:d0:3f:b1:63:1d:dc:cc:0a:aa:e8:83:90:d6:c3: d0:9f:4d:90:78:19:ad:d8:61:dd:b9:a5:76:56:3e: 3d:ad:c4:ea:a1:a1:f7:b1:dd:2f:64:27:24:c2:9a: 0a:17:bc:cb:a8:ef:d6:d0:2e:69:4b:80:df:35:2d: 0e:c6:4c:d5:c5:43:ea:3a:8c:64:ae:75:09:6c:92: 58:8b:c7:f8:31:28:91:e6:b7:33:28:aa:9f:3a:20: 88:42:5e:f2:a2:c1:ed:bb:91:58:9f:d9:e6:53:c2: d9:17:eb:82:a0:e6:7a:52:54:bf:49:89:50:ca:71: a1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2B:D9:01:3F:8C:AA:C0:14:D9:89:BA:22:D6:62:9B:C7:30:7B:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/196dc71f-9dea-3538-bf9e-512a28a260e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 198.151.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f9:60:1f:54:71:ea:2d:06:53:01:18:ef:b4:45:dc:3f:cf: 58:7a:19:f0:90:c4:56:7f:28:1f:b2:b9:94:41:74:2e:54:51: f6:c1:6f:97:a2:9e:83:93:14:0b:4d:0a:3f:41:68:17:46:41: 06:6e:37:eb:02:f3:3c:29:24:0e:84:3d:bc:82:17:38:dc:03: 1d:11:52:8d:61:d1:5b:ec:8b:96:bc:bb:bc:d7:51:b9:91:7b: b8:d9:f1:fa:e2:9e:d5:04:c5:be:a6:b7:50:3b:bc:e1:78:10: fc:bd:67:36:18:70:6f:ce:2b:85:05:ef:65:17:87:f9:bb:63: 53:25:80:cd:69:8a:39:97:e3:30:1d:32:5d:74:70:a7:bb:0c: 38:94:e6:ce:0a:4d:96:93:21:1d:79:78:91:94:c9:47:9a:20: 59:62:e4:09:cf:a7:e0:f9:5a:b0:0d:da:9c:38:cd:31:1c:66: 21:d0:24:05:89:b9:b2:de:3f:0f:92:f1:0c:7a:b9:0d:82:63: aa:ec:f4:61:cb:36:b1:80:48:47:2b:c0:fa:0e:6a:24:15:be: f8:a7:4b:83:e2:01:c7:41:b5:4a:b3:cc:e5:b0:5b:aa:cb:80: 93:d2:c8:e4:d7:7a:14:9d:b4:5c:9f:5d:65:0c:30:0d:44:12: d8:a3:23:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgic92/+v4yUc8t8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NjYxZjAyNmUtNjA5Mi00Mzg5LWJhZDgtZGE5YTcyNzU4N2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEobp/4kGFp6bznwPFmvF2Hu50cShJnFkCgF lRReL0WgQxh9AcN/Fiu3uSzCoHA3IBvMnxM48aANxDJWWiQGypeQDTpxQILndz3p z2GXbQ49g9HsXxJz755Ga9RCBKRhwQUGGQe/I3bQ31XHC8gI+mgSkI8Fu1yL8Ei4 fLIAyLdu0ASjjA2u0D+xYx3czAqq6IOQ1sPQn02QeBmt2GHduaV2Vj49rcTqoaH3 sd0vZCckwpoKF7zLqO/W0C5pS4DfNS0OxkzVxUPqOoxkrnUJbJJYi8f4MSiR5rcz KKqfOiCIQl7yosHtu5FYn9nmU8LZF+uCoOZ6UlS/SYlQynGh+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcr2QE/jKrAFNmJuiLWYpvHMHvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvMTk2ZGM3MWYtOWRlYS0z NTM4LWJmOWUtNTEyYTI4YTI2MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxpcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb5YB9UceotBlMBGO+0Rdw/z1h6GfCQxFZ/KB+yuZRBdC5UUfbBb5ei noOTFAtNCj9BaBdGQQZuN+sC8zwpJA6EPbyCFzjcAx0RUo1h0Vvsi5a8u7zXUbmR e7jZ8frintUExb6mt1A7vOF4EPy9ZzYYcG/OK4UF72UXh/m7Y1MlgM1pijmX4zAd Ml10cKe7DDiU5s4KTZaTIR15eJGUyUeaIFli5AnPp+D5WrAN2pw4zTEcZiHQJAWJ ubLePw+S8Qx6uQ2CY6rs9GHLNrGASEcrwPoOaiQVvvinS4PiAcdBtUqzzOWwW6rL gJPSyOTXehSdtFyfXWUMMA1EEtijIxg= -----END CERTIFICATE-----Generated at Tue Apr 29 10:19:13 2025 by rpki-client