$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/21d91634-ee8c-3230-ab5c-baf16e713980.roa File: 21d91634-ee8c-3230-ab5c-baf16e713980.roa (raw, json) Hash identifier: deF5JW8egEPjp+nOiBlPEXvIHi2ugf2Oow28HOA1fGs= Subject key identifier: D1:72:C0:A5:C7:5D:49:DC:BD:99:8D:4F:63:BE:1F:23:DC:BA:E3:52 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F43285849E654F0B2C4AACE1EFF9368E0 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/21d91634-ee8c-3230-ab5c-baf16e713980.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 12076 IP address blocks: 151.207.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:f0:b2:c4:aa:ce:1e:ff:93:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=bae2a519-6ee9-428d-b7a2-dda16167203a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:0d:49:c3:14:54:a1:c3:02:f5:3f:ea:a2: e4:91:68:ab:d8:23:8e:57:76:61:da:3b:a4:b8:a6: 23:dd:4f:9a:c0:f4:73:23:51:9b:8b:69:2e:77:6b: 31:5e:24:19:a1:0e:ed:d4:b5:d7:8f:3c:88:4e:dc: 3e:4f:bb:d3:c8:84:e1:fe:c6:a8:08:1e:23:4a:3b: b9:d5:c9:45:6c:84:15:16:5a:bc:bf:14:c6:17:7b: 21:e1:5c:79:9a:38:53:b1:86:72:b8:3d:62:e0:a6: c5:7e:55:4a:77:cf:7a:2e:87:6d:1b:22:be:3b:78: 7b:dd:73:8f:8b:b9:82:da:a5:ce:74:e8:72:73:91: 7e:79:22:be:48:f1:01:84:05:35:40:e3:41:de:59: 72:9d:dc:08:ac:b9:8a:00:ed:85:2c:9e:82:43:43: 70:08:5b:97:ff:40:ab:a1:b8:22:e8:54:d7:88:e8: 1a:d6:87:07:2d:5a:d4:b7:fb:b5:7d:8b:69:b3:69: 9d:b3:4d:69:88:00:a8:9f:8f:c3:41:44:bc:3d:06: 05:ae:7a:06:7d:41:ac:c2:be:1a:9a:86:3b:68:22: ed:ac:63:6b:2d:09:b5:29:99:20:40:ee:c9:e0:ff: da:b3:f0:6c:06:4f:7a:0f:29:f6:6e:77:e5:ce:a2: 77:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:72:C0:A5:C7:5D:49:DC:BD:99:8D:4F:63:BE:1F:23:DC:BA:E3:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/21d91634-ee8c-3230-ab5c-baf16e713980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:43:e1:4c:0f:ae:b8:59:dc:65:15:75:27:80:62:1d:61:6a: 21:b6:f1:27:f5:7f:c3:3a:9a:bf:c1:e3:85:6d:fd:7a:4f:59: 59:33:cf:00:06:46:0e:8f:49:94:8d:9f:87:0e:b6:67:eb:d0: ea:08:a0:93:a1:63:6e:ee:97:11:1d:8c:82:9e:79:98:59:59: cc:08:59:04:6e:cf:55:ec:b6:e4:d0:95:83:7f:a3:78:d4:21: 18:19:fa:c8:29:02:11:55:d3:10:6f:39:0d:0f:67:a7:45:42: f0:37:f4:26:66:e4:cf:71:04:04:c5:e4:30:08:f6:88:07:e7: 62:87:cd:23:39:00:ea:2b:df:cb:a2:7f:49:8c:a1:8e:0d:68: 86:16:60:97:b3:6a:65:15:d7:44:51:e0:43:88:e9:69:3e:67: d6:5a:3d:a2:07:e4:43:b3:96:b5:7c:39:2a:fc:fa:4f:f7:3e: 80:43:79:b3:11:d8:8e:99:ee:97:70:a3:a5:86:c2:5c:da:f0: 46:74:6f:c1:6c:a9:7c:f1:94:6d:44:ad:39:bc:f9:a6:f2:01: d6:0d:25:53:8b:e9:4c:77:54:f4:ee:1a:40:7d:e6:8e:a7:88: 1a:27:4a:5c:45:a8:63:e7:91:2e:69:bd:56:c2:44:6a:19:ae: bd:31:47:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVPCyxKrOHv+TaOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk YmFlMmE1MTktNmVlOS00MjhkLWI3YTItZGRhMTYxNjcyMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwkNScMUVKHDAvU/6qLkkWir2COOV3Zh2juk uKYj3U+awPRzI1Gbi2kud2sxXiQZoQ7t1LXXjzyITtw+T7vTyITh/saoCB4jSju5 1clFbIQVFlq8vxTGF3sh4Vx5mjhTsYZyuD1i4KbFflVKd896LodtGyK+O3h73XOP i7mC2qXOdOhyc5F+eSK+SPEBhAU1QONB3llyndwIrLmKAO2FLJ6CQ0NwCFuX/0Cr obgi6FTXiOga1ocHLVrUt/u1fYtps2mds01piACon4/DQUS8PQYFrnoGfUGswr4a moY7aCLtrGNrLQm1KZkgQO7J4P/as/BsBk96Dyn2bnflzqJ31QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFywKXHXUncvZmNT2O+HyPcuuNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvMjFkOTE2MzQtZWU4Yy0z MjMwLWFiNWMtYmFmMTZlNzEzOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl88sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABD4UwPrrhZ3GUVdSeAYh1haiG28Sf1f8M6mr/B44Vt/XpPWVkzzwAG Rg6PSZSNn4cOtmfr0OoIoJOhY27ulxEdjIKeeZhZWcwIWQRuz1XstuTQlYN/o3jU IRgZ+sgpAhFV0xBvOQ0PZ6dFQvA39CZm5M9xBATF5DAI9ogH52KHzSM5AOor38ui f0mMoY4NaIYWYJezamUV10RR4EOI6Wk+Z9ZaPaIH5EOzlrV8OSr8+k/3PoBDebMR 2I6Z7pdwo6WGwlza8EZ0b8FsqXzxlG1ErTm8+abyAdYNJVOL6Ux3VPTuGkB95o6n iBonSlxFqGPnkS5pvVbCRGoZrr0xR1s= -----END CERTIFICATE-----Generated at Sun Jun 15 21:42:49 2025 by rpki-client