$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/42fed2c7-e0b3-3af7-b342-35efac5bef13.roa File: 42fed2c7-e0b3-3af7-b342-35efac5bef13.roa (raw, json) Hash identifier: wkkIlNo2OBJd5uJuxMN1jEL5xzGjaXtDlYrCp/aix1k= Subject key identifier: 6D:DC:ED:83:96:EC:8A:B6:C7:88:BB:A3:EF:36:ED:0E:E8:3D:AA:C2 Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F4328584A7E7B5D815B2154BC4FA19EC0 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/42fed2c7-e0b3-3af7-b342-35efac5bef13.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 6461 IP address blocks: 149.64.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:5d:81:5b:21:54:bc:4f:a1:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=91e33c75-b15f-4d19-87d2-6354d66708d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ed:11:37:11:ac:4b:ab:63:df:53:a2:a5:8e: 67:16:25:96:60:e8:64:67:d2:3e:ca:0d:31:5f:65: bd:40:db:d2:47:66:c3:3d:eb:a5:d8:ca:37:74:6c: 0f:ce:58:03:b2:68:87:d4:b3:3b:0f:62:7d:5a:0a: c3:b2:4c:f1:1c:31:e6:99:33:6f:b7:3d:82:05:7d: 19:c3:d3:35:ac:5a:71:9e:8c:c6:11:19:fd:67:0b: 39:aa:c8:11:79:98:1a:e6:73:5d:6b:36:2f:5c:cf: 03:81:68:3f:b0:78:62:07:24:3f:4d:d3:ad:44:f2: 7b:2b:ee:f8:45:c4:03:be:34:7d:3f:89:0e:25:f3: 4e:eb:87:d9:9c:e7:9b:66:0d:93:b1:e8:70:6d:f5: 3b:e7:56:ee:1c:f4:ec:d6:09:03:e7:c3:9a:39:4f: da:ce:a4:b2:e3:77:f6:c9:83:7a:c7:87:a1:a2:ac: 48:db:5b:ff:e9:d9:20:63:bd:9e:94:dd:ec:2b:cd: 37:1e:7c:b0:2f:8b:34:e4:ee:4c:fd:b1:d7:23:17: da:ff:79:66:5a:5d:27:c7:f7:7d:81:5f:f9:5d:96: 0e:38:cc:db:be:1e:69:8a:cf:37:10:a0:05:86:1e: 0f:88:ca:3e:bc:1e:42:c4:52:45:d3:83:1b:1a:a8: 2e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DC:ED:83:96:EC:8A:B6:C7:88:BB:A3:EF:36:ED:0E:E8:3D:AA:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/42fed2c7-e0b3-3af7-b342-35efac5bef13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 149.64.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:77:86:37:47:47:8c:12:0a:51:7f:ca:45:59:91:d4:bc:66: 5a:18:b7:d6:44:40:7d:b6:c7:3d:9a:f3:f5:76:36:9b:ae:f5: ec:81:c6:a9:98:0d:24:8d:94:a5:cd:4b:ae:9d:be:6b:0b:15: 71:48:bd:c5:15:b6:29:b4:0d:0f:c5:e6:12:ae:3e:f4:f0:39: 04:89:81:7a:47:b3:10:b5:ae:1a:37:d2:37:5e:cf:16:34:28: f9:9a:cf:f0:ca:a3:20:e4:42:e1:65:28:94:dd:75:24:59:c6: 43:50:98:a6:21:0e:85:06:a3:d2:4f:8a:2c:9d:88:f9:3b:1d: af:23:7b:bf:00:f0:5c:ba:33:82:8b:4c:af:05:f4:14:bf:27: ea:dc:a8:ee:e2:94:69:61:5e:0d:11:9e:5c:ac:e3:7f:ca:50: 48:39:49:46:a9:96:40:99:fb:e6:fc:3f:18:78:57:c9:99:58: ef:e4:a8:cc:75:e7:2b:6d:9e:de:35:90:a6:db:9a:d2:5f:d5: 22:9d:68:dc:95:f7:21:a0:f4:de:3f:06:10:e0:b5:77:80:15: 45:bb:f4:e4:dd:70:4e:48:19:99:aa:56:72:ae:aa:2c:80:ba: f4:67:7c:ad:f7:af:9a:e4:d4:0d:b3:9f:e9:ee:09:66:50:64: 72:60:72:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e12BWyFUvE+hnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk OTFlMzNjNzUtYjE1Zi00ZDE5LTg3ZDItNjM1NGQ2NjcwOGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO0RNxGsS6tj31OipY5nFiWWYOhkZ9I+yg0x X2W9QNvSR2bDPeul2Mo3dGwPzlgDsmiH1LM7D2J9WgrDskzxHDHmmTNvtz2CBX0Z w9M1rFpxnozGERn9Zws5qsgReZga5nNdazYvXM8DgWg/sHhiByQ/TdOtRPJ7K+74 RcQDvjR9P4kOJfNO64fZnOebZg2TsehwbfU751buHPTs1gkD58OaOU/azqSy43f2 yYN6x4ehoqxI21v/6dkgY72elN3sK803HnywL4s05O5M/bHXIxfa/3lmWl0nx/d9 gV/5XZYOOMzbvh5pis83EKAFhh4PiMo+vB5CxFJF04MbGqguewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3c7YOW7Iq2x4i7o+827Q7oParCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvNDJmZWQyYzctZTBiMy0z YWY3LWIzNDItMzVlZmFjNWJlZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUDiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB3hjdHR4wSClF/ykVZkdS8ZloYt9ZEQH22xz2a8/V2Npuu9eyBxqmY DSSNlKXNS66dvmsLFXFIvcUVtim0DQ/F5hKuPvTwOQSJgXpHsxC1rho30jdezxY0 KPmaz/DKoyDkQuFlKJTddSRZxkNQmKYhDoUGo9JPiiydiPk7Ha8je78A8Fy6M4KL TK8F9BS/J+rcqO7ilGlhXg0Rnlys43/KUEg5SUaplkCZ++b8Pxh4V8mZWO/kqMx1 5yttnt41kKbbmtJf1SKdaNyV9yGg9N4/BhDgtXeAFUW79OTdcE5IGZmqVnKuqiyA uvRnfK33r5rk1A2zn+nuCWZQZHJgcrs= -----END CERTIFICATE-----Generated at Mon Jul 21 02:32:07 2025 by rpki-client