$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16dde4b4-07aa-40f4-b15d-2539492441ab/ba4e5271-622b-3c46-857f-fa68f34faea0.roa File: ba4e5271-622b-3c46-857f-fa68f34faea0.roa (raw, json) Hash identifier: yLmsUXx/k/K95fpNRRf8MOX78V0UyQuPIBhSAfR7lgc= Subject key identifier: 6E:F2:F7:30:D5:79:55:78:78:E9:DF:E4:13:89:EE:97:5E:27:7E:34 Certificate issuer: /CN=16dde4b4-07aa-40f4-b15d-2539492441ab Certificate serial: 010D0C9F432858496C69450330B7D4D95D722000 Authority key identifier: 50:DB:D3:04:AB:3F:3C:FA:7C:C1:17:62:BD:A2:F8:35:D7:62:F7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16dde4b4-07aa-40f4-b15d-2539492441ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16dde4b4-07aa-40f4-b15d-2539492441ab/ba4e5271-622b-3c46-857f-fa68f34faea0.roa Signing time: Sat 05 Apr 2025 08:53:14 +0000 ROA not before: Sat 05 Apr 2025 08:53:14 +0000 ROA not after: Fri 04 Jul 2025 08:53:14 +0000 asID: 11168 IP address blocks: 162.221.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16dde4b4-07aa-40f4-b15d-2539492441ab/16dde4b4-07aa-40f4-b15d-2539492441ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16dde4b4-07aa-40f4-b15d-2539492441ab/16dde4b4-07aa-40f4-b15d-2539492441ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16dde4b4-07aa-40f4-b15d-2539492441ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:69:45:03:30:b7:d4:d9:5d:72:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16dde4b4-07aa-40f4-b15d-2539492441ab Validity Not Before: Apr 5 08:53:14 2025 GMT Not After : Jul 4 08:53:14 2025 GMT Subject: CN=af14a65e-b1cb-4023-ae8d-0b176fc24ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:19:45:78:2d:8f:63:97:e8:47:1f:bb:74: f3:fa:a7:59:c5:b0:b3:76:08:18:2a:68:0a:ca:74: 48:39:27:13:95:8b:c8:22:69:92:26:ce:84:dc:27: 16:b0:0b:ea:c5:c5:21:1f:1a:c8:9b:b1:00:63:0e: d5:7a:8a:a5:10:de:fa:7d:bc:79:30:36:4e:d2:32: 83:98:dd:56:de:64:b4:4a:9c:78:69:b9:81:ad:59: 13:ae:f8:1f:4c:c4:49:9a:fc:34:7f:74:ab:19:84: 3e:d4:04:72:84:85:cf:cb:22:99:73:3d:e8:8e:ab: 47:4b:b8:61:2b:c4:bc:c9:11:34:7a:8f:18:cd:71: a9:e5:47:4b:bf:f4:94:fb:03:dc:a9:cf:4a:f2:40: 9e:c8:5e:35:18:17:a8:d8:58:f8:bc:46:77:f6:b0: ef:2b:05:ce:a0:56:95:f0:d2:bd:7b:2b:ff:1e:7a: 82:d8:55:cc:b3:66:2a:09:e4:5c:09:8c:52:17:c1: 95:5e:ab:ed:81:f5:2d:cb:88:c0:e3:07:6d:18:fe: 5b:bc:6a:45:02:1d:b4:27:c1:62:75:93:ba:9e:b5: 32:1f:fe:9b:1b:69:ac:73:04:11:86:04:e3:5b:e5: 0f:54:30:8b:58:a9:9a:77:4d:55:86:b2:44:2b:94: 4a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F2:F7:30:D5:79:55:78:78:E9:DF:E4:13:89:EE:97:5E:27:7E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16dde4b4-07aa-40f4-b15d-2539492441ab/ba4e5271-622b-3c46-857f-fa68f34faea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16dde4b4-07aa-40f4-b15d-2539492441ab/16dde4b4-07aa-40f4-b15d-2539492441ab.crl X509v3 Authority Key Identifier: keyid:50:DB:D3:04:AB:3F:3C:FA:7C:C1:17:62:BD:A2:F8:35:D7:62:F7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16dde4b4-07aa-40f4-b15d-2539492441ab.cer sbgp-ipAddrBlock: critical IPv4: 162.221.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:52:d6:b1:2c:b6:39:45:6d:a6:2b:e8:a7:05:ae:93:d2:cf: 78:f2:b1:62:e0:00:8d:64:e1:a7:fb:4d:18:4e:ba:02:22:5d: e0:41:a7:e8:39:db:03:db:a1:65:b3:24:0e:48:e4:94:47:ac: f8:03:7f:f4:66:c5:66:5e:9b:9f:11:8f:87:f4:4a:9a:4b:67: fe:05:72:30:65:64:f3:84:d9:a8:5e:65:a0:ef:94:37:3a:8a: 0c:84:f2:d2:ee:38:ae:da:3a:05:57:96:95:cc:17:8b:38:76: bc:3a:0a:8e:c5:f1:32:bb:94:e7:57:89:32:2c:19:53:9b:13: 8f:96:4a:34:ce:7b:7c:0b:d1:9b:58:eb:0c:37:0e:ae:49:d7: 87:62:fa:c8:8d:52:dc:ec:0d:d4:c6:7d:e6:d8:94:0b:f5:c6: b9:a8:4e:36:f1:92:02:7f:79:72:ec:ac:a0:1d:6d:77:95:b8: f4:1b:e2:9c:ce:c5:89:ae:9d:84:e5:23:00:ed:0f:56:8f:1a: 72:e3:93:01:43:ac:1b:21:c2:aa:db:36:9d:b3:d2:e4:46:70: 57:02:6c:a2:47:77:8a:64:a6:20:e6:14:d2:33:ed:cf:ee:61: 74:c9:dc:16:29:f9:ed:d7:79:e3:25:63:33:05:10:34:1d:80: a8:d4:e9:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElsaUUDMLfU2V1yIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkZGU0YjQtMDdhYS00MGY0LWIxNWQtMjUzOTQ5MjQ0 MWFiMB4XDTI1MDQwNTA4NTMxNFoXDTI1MDcwNDA4NTMxNFowLzEtMCsGA1UEAxMk YWYxNGE2NWUtYjFjYi00MDIzLWFlOGQtMGIxNzZmYzI0ZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv54ZRXgtj2OX6Ecfu3Tz+qdZxbCzdggYKmgK ynRIOScTlYvIImmSJs6E3CcWsAvqxcUhHxrIm7EAYw7VeoqlEN76fbx5MDZO0jKD mN1W3mS0Spx4abmBrVkTrvgfTMRJmvw0f3SrGYQ+1ARyhIXPyyKZcz3ojqtHS7hh K8S8yRE0eo8YzXGp5UdLv/SU+wPcqc9K8kCeyF41GBeo2Fj4vEZ39rDvKwXOoFaV 8NK9eyv/HnqC2FXMs2YqCeRcCYxSF8GVXqvtgfUty4jA4wdtGP5bvGpFAh20J8Fi dZO6nrUyH/6bG2mscwQRhgTjW+UPVDCLWKmad01VhrJEK5RKAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7y9zDVeVV4eOnf5BOJ7pdeJ340MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmRk ZTRiNC0wN2FhLTQwZjQtYjE1ZC0yNTM5NDkyNDQxYWIvYmE0ZTUyNzEtNjIyYi0z YzQ2LTg1N2YtZmE2OGYzNGZhZWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkZGU0YjQtMDdhYS00MGY0LWIx NWQtMjUzOTQ5MjQ0MWFiLzE2ZGRlNGI0LTA3YWEtNDBmNC1iMTVkLTI1Mzk0OTI0 NDFhYi5jcmwwHwYDVR0jBBgwFoAUUNvTBKs/PPp8wRdivaL4Nddi92YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmRkZTRiNC0wN2FhLTQwZjQtYjE1ZC0yNTM5 NDkyNDQxYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDot0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANxS1rEstjlFbaYr6KcFrpPSz3jysWLgAI1k4af7TRhOugIiXeBBp+g5 2wPboWWzJA5I5JRHrPgDf/RmxWZem58Rj4f0SppLZ/4FcjBlZPOE2aheZaDvlDc6 igyE8tLuOK7aOgVXlpXMF4s4drw6Co7F8TK7lOdXiTIsGVObE4+WSjTOe3wL0ZtY 6ww3Dq5J14di+siNUtzsDdTGfebYlAv1xrmoTjbxkgJ/eXLsrKAdbXeVuPQb4pzO xYmunYTlIwDtD1aPGnLjkwFDrBshwqrbNp2z0uRGcFcCbKJHd4pkpiDmFNIz7c/u YXTJ3BYp+e3XeeMlYzMFEDQdgKjU6T8= -----END CERTIFICATE-----Generated at Tue Apr 29 18:35:24 2025 by rpki-client