$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bdcbf735-9e7a-38f3-aefa-26be67c11312.roa File: bdcbf735-9e7a-38f3-aefa-26be67c11312.roa (raw, json) Hash identifier: IAYYWB90NJt5aWQEJvxIWCVUEn53iuQKcyOAihCxQq0= Subject key identifier: 68:56:5A:53:BE:E5:8E:A5:B0:78:99:5E:7D:9F:EF:A3:DC:28:0E:F8 Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F432858499AF48E35F0EF4694206C4EC0 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bdcbf735-9e7a-38f3-aefa-26be67c11312.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 188 IP address blocks: 139.121.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8e:35:f0:ef:46:94:20:6c:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=7af32c12-c287-46d5-adf2-04decb82de02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:54:f6:7f:08:2c:ad:a6:1a:12:0f:06:04:b6: 8b:6d:5b:13:31:9d:84:16:96:78:b8:c2:37:d9:ed: b2:bc:be:f3:94:fe:0d:28:08:72:a0:8d:44:9d:3b: dd:6a:2d:ea:fd:cb:2e:d8:6a:cc:29:10:78:82:92: bb:f7:22:6c:72:70:78:ab:f0:56:24:29:d8:ec:1a: f4:b3:6b:15:0a:26:22:9a:b9:6d:c1:09:7e:54:86: e6:ab:6d:7f:4f:ad:74:22:f7:6c:e8:8b:2d:6c:38: cc:17:78:3a:ec:49:43:2c:99:2f:67:7e:9c:ad:a3: 33:0c:ed:85:78:f4:26:cd:36:fa:79:c3:29:03:78: 97:1d:53:05:a5:ba:cb:9c:4b:2f:1a:17:3a:fd:76: 84:9f:82:a9:25:fd:5c:55:e7:66:b0:28:74:99:22: bc:63:8d:3b:a3:09:e4:7b:db:a7:db:96:48:e7:dd: ff:3c:08:3c:9a:c7:49:28:d9:43:7c:12:8d:61:da: 8b:79:7f:1c:d3:6f:39:ec:b6:67:b6:0c:96:60:60: 65:0c:4e:77:b6:ab:c1:db:54:98:94:c7:02:af:9d: 4e:06:a3:81:3c:3b:7d:65:bf:d2:5f:dd:63:2b:50: 2c:55:9b:90:be:87:49:e8:93:13:54:40:ef:e1:39: c3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:56:5A:53:BE:E5:8E:A5:B0:78:99:5E:7D:9F:EF:A3:DC:28:0E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bdcbf735-9e7a-38f3-aefa-26be67c11312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 139.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0d:73:9d:9f:16:50:05:25:d3:e6:c6:23:e6:33:ad:b2:3b: bd:08:25:6f:f9:2d:f6:d5:96:85:09:5a:46:15:1c:b8:ae:b9: f6:58:64:8e:ef:d8:2f:a2:79:7b:98:5c:2a:24:3a:e8:ac:18: 8d:35:5b:db:cd:bc:a4:0e:8b:30:65:4f:8a:91:dd:b4:78:2c: 75:39:d8:77:be:01:43:8f:f5:a0:e5:4a:da:3c:5f:03:ae:6f: 08:64:46:53:40:98:b8:08:f4:11:69:f0:74:41:0d:4c:71:3c: 3e:2d:0e:9c:37:7a:35:eb:3f:8c:29:89:83:59:6f:32:ac:23: db:06:95:fe:d4:7b:f0:f7:e0:e6:6f:1c:41:23:c0:0a:f1:9b: 02:14:7a:94:7f:54:ab:a5:67:15:a4:16:eb:19:59:7b:6e:ef: 46:fc:92:8a:a0:56:b3:a8:ad:1e:dc:0f:f2:bb:b5:9a:8d:d1: ae:5d:6e:f3:25:3b:3d:06:92:05:c8:58:10:94:63:f0:15:57: bb:cd:61:a3:9d:2e:ec:47:f5:5f:2a:09:53:8e:4e:94:b4:03: ab:12:b3:1b:30:54:c5:97:77:5c:78:28:5f:34:39:14:00:9c: 7b:24:8e:c1:fe:d1:0d:5c:e4:5f:63:a7:d4:ca:99:12:f5:9c: 5c:3d:a1:e6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9I418O9GlCBsTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk N2FmMzJjMTItYzI4Ny00NmQ1LWFkZjItMDRkZWNiODJkZTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1T2fwgsraYaEg8GBLaLbVsTMZ2EFpZ4uMI3 2e2yvL7zlP4NKAhyoI1EnTvdai3q/csu2GrMKRB4gpK79yJscnB4q/BWJCnY7Br0 s2sVCiYimrltwQl+VIbmq21/T610Ivds6IstbDjMF3g67ElDLJkvZ36craMzDO2F ePQmzTb6ecMpA3iXHVMFpbrLnEsvGhc6/XaEn4KpJf1cVedmsCh0mSK8Y407ownk e9un25ZI593/PAg8msdJKNlDfBKNYdqLeX8c02857LZntgyWYGBlDE53tqvB21SY lMcCr51OBqOBPDt9Zb/SX91jK1AsVZuQvodJ6JMTVEDv4TnDMwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGhWWlO+5Y6lsHiZXn2f76PcKA74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvYmRjYmY3MzUtOWU3YS0z OGYzLWFlZmEtMjZiZTY3YzExMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi3kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUg1znZ8WUAUl0+bGI+YzrbI7vQglb/kt9tWWhQlaRhUcuK659lhkju/Y L6J5e5hcKiQ66KwYjTVb2828pA6LMGVPipHdtHgsdTnYd74BQ4/1oOVK2jxfA65v CGRGU0CYuAj0EWnwdEENTHE8Pi0OnDd6Nes/jCmJg1lvMqwj2waV/tR78Pfg5m8c QSPACvGbAhR6lH9Uq6VnFaQW6xlZe27vRvySiqBWs6itHtwP8ru1mo3Rrl1u8yU7 PQaSBchYEJRj8BVXu81ho50u7Ef1XyoJU45OlLQDqxKzGzBUxZd3XHgoXzQ5FACc eySOwf7RDVzkX2On1MqZEvWcXD2h5g== -----END CERTIFICATE-----Generated at Wed Apr 30 05:15:22 2025 by rpki-client