$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/29405407-ca65-35ca-bd75-7cd4d56b8692.roa File: 29405407-ca65-35ca-bd75-7cd4d56b8692.roa (raw, json) Hash identifier: 6YVTzOeiJzM6FH81ebSY0Lamy+v3iDrFS3znAn8Yock= Subject key identifier: 20:6C:76:5A:4A:0A:76:DC:8F:8B:B8:A0:0D:50:10:56:81:B4:5F:87 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584A7A4B3104D7579882809CC980 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/29405407-ca65-35ca-bd75-7cd4d56b8692.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 396982 IP address blocks: 199.65.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:31:04:d7:57:98:82:80:9c:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=8d019876-b3bd-4b3b-bb3d-0ed7ea39c21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d5:76:16:8c:d4:34:fb:e3:e5:ce:30:0b:6e: 75:84:05:7e:23:ac:85:fe:b9:54:fd:dd:b7:50:01: c3:f7:bd:d8:c5:f4:0b:70:cf:49:a7:5d:04:14:77: ee:a8:2f:f1:5f:67:40:6f:e2:e9:a1:d5:bf:70:81: 3c:e7:c7:f2:0e:e8:27:f8:c0:c9:1e:99:54:65:b3: 41:f9:9c:b3:ba:04:3f:5f:cf:9d:6b:75:54:33:4a: 4a:de:dd:2b:42:87:b3:3d:6d:8a:34:f9:df:3a:5a: f1:d5:54:f8:f9:0e:ef:e7:42:24:5c:63:51:1a:50: 75:9a:91:c6:cb:c7:bb:af:43:3b:af:b9:85:de:89: 14:fc:32:e4:d7:eb:5b:4c:da:48:03:ca:05:01:a0: 6e:33:c5:43:22:c6:62:ce:cb:c0:fb:38:47:de:ea: 91:b2:bc:e6:1f:51:bc:30:1d:b8:43:27:d0:5e:48: 62:71:7b:72:b0:c1:ae:c9:75:8f:42:79:65:40:dc: 8d:a0:a9:6f:b0:59:30:e9:60:59:4d:71:4b:14:a6: 07:85:09:0b:4e:47:de:62:66:6e:b1:ee:2d:9b:4d: 93:cf:63:b8:b6:1a:93:cc:42:ff:82:c3:82:eb:44: 7a:22:4c:e3:93:56:9c:91:ad:96:48:63:0e:54:55: 1e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6C:76:5A:4A:0A:76:DC:8F:8B:B8:A0:0D:50:10:56:81:B4:5F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/29405407-ca65-35ca-bd75-7cd4d56b8692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:bb:2c:03:f8:d2:bc:a9:50:b6:33:01:09:bd:9b:98:20:f2: 0c:3d:26:97:29:4d:db:4c:0e:51:91:0f:ea:3f:84:eb:f9:46: a8:9e:9e:0b:53:59:85:b1:cb:2e:d1:f3:8b:c8:bf:00:e8:88: c2:97:67:ca:f3:a7:c9:84:e1:68:ae:dc:ff:1e:62:05:4a:19: 61:a9:33:d4:62:d3:95:55:20:10:68:0e:eb:81:45:73:3e:e8: f1:fc:da:34:4e:9c:0e:14:85:06:45:f4:00:2c:ee:e3:09:83: bb:fb:81:34:9f:56:ce:f6:e7:27:df:15:c5:05:28:35:6f:72: ab:d0:57:2e:1a:af:bd:e0:67:7d:39:db:9a:68:2a:50:4b:fc: c5:5e:1c:21:fe:03:46:cd:25:6b:80:8e:f2:d8:01:34:5b:fc: 6f:c1:52:85:1d:75:17:e9:af:d2:00:fa:b7:60:0c:dd:4d:d0: 52:e0:e4:5b:c3:e3:fe:57:4c:76:a3:cd:ba:3e:9a:28:ff:66: ea:83:45:39:64:05:ef:15:d2:02:7b:2c:41:6d:6e:35:f2:fb: 46:af:76:5f:8c:be:94:78:31:1b:0d:eb:d2:7d:84:54:d9:be: 06:a1:2d:c7:f0:06:4e:61:1a:a2:f4:36:e6:52:50:6e:68:bd: 46:44:c9:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzEE11eYgoCcyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk OGQwMTk4NzYtYjNiZC00YjNiLWJiM2QtMGVkN2VhMzljMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tV2FozUNPvj5c4wC251hAV+I6yF/rlU/d23 UAHD973YxfQLcM9Jp10EFHfuqC/xX2dAb+LpodW/cIE858fyDugn+MDJHplUZbNB +ZyzugQ/X8+da3VUM0pK3t0rQoezPW2KNPnfOlrx1VT4+Q7v50IkXGNRGlB1mpHG y8e7r0M7r7mF3okU/DLk1+tbTNpIA8oFAaBuM8VDIsZizsvA+zhH3uqRsrzmH1G8 MB24QyfQXkhicXtysMGuyXWPQnllQNyNoKlvsFkw6WBZTXFLFKYHhQkLTkfeYmZu se4tm02Tz2O4thqTzEL/gsOC60R6Ikzjk1acka2WSGMOVFUeCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBsdlpKCnbcj4u4oA1QEFaBtF+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvMjk0MDU0MDctY2E2NS0z NWNhLWJkNzUtN2NkNGQ1NmI4NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0EoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC7LAP40rypULYzAQm9m5gg8gw9JpcpTdtMDlGRD+o/hOv5RqiengtT WYWxyy7R84vIvwDoiMKXZ8rzp8mE4Wiu3P8eYgVKGWGpM9Ri05VVIBBoDuuBRXM+ 6PH82jROnA4UhQZF9AAs7uMJg7v7gTSfVs725yffFcUFKDVvcqvQVy4ar73gZ305 25poKlBL/MVeHCH+A0bNJWuAjvLYATRb/G/BUoUddRfpr9IA+rdgDN1N0FLg5FvD 4/5XTHajzbo+mij/ZuqDRTlkBe8V0gJ7LEFtbjXy+0avdl+MvpR4MRsN69J9hFTZ vgahLcfwBk5hGqL0NuZSUG5ovUZEybQ= -----END CERTIFICATE-----Generated at Thu Jul 24 12:24:16 2025 by rpki-client