$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/de2a3a80-a117-3d4b-b4d6-d1e81bee83af.roa File: de2a3a80-a117-3d4b-b4d6-d1e81bee83af.roa (raw, json) Hash identifier: bETQBD6M/2GQmJ/sRKFoZTewj+U/zZ46qjeD/CComZI= Subject key identifier: 0E:AE:42:B0:E0:B1:10:21:C7:E9:45:FE:36:6B:B1:2E:0D:F0:8F:8A Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584AFEE69FB967CDA0008A31A540 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/de2a3a80-a117-3d4b-b4d6-d1e81bee83af.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 15092 IP address blocks: 199.15.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:9f:b9:67:cd:a0:00:8a:31:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=f6aecc97-df90-4250-ad89-a5a6aa2b6b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:71:c0:4c:07:b5:f4:e9:59:3e:7e:db:6e:0e: d7:6f:c7:e8:1c:c4:8e:74:01:c2:04:fd:36:7e:63: 6f:4a:d6:52:da:e0:31:de:bd:b6:c5:09:03:da:56: 17:29:9d:a7:98:b1:48:c8:7e:e4:2d:0e:23:a8:84: 59:91:50:55:81:a8:17:52:e3:79:52:e6:be:72:db: d2:42:ce:a8:43:db:fa:12:98:af:b6:3c:a4:f8:e7: 43:4e:30:31:d0:12:a7:7c:a4:2a:1b:03:e9:88:06: 34:2b:58:24:8c:06:b8:a8:c5:41:a0:82:11:69:06: 0b:9f:b4:a3:5e:59:f9:a3:f0:1d:8f:4d:f0:4a:1b: d3:95:71:9a:41:e8:6d:89:56:7f:ff:c7:97:29:40: 9a:f7:97:1c:dc:0e:6b:cb:86:89:61:5f:a8:08:00: ec:f1:5b:fb:62:d1:06:01:99:94:93:9b:fd:d5:94: b0:ba:27:a8:8b:6f:01:86:4b:bc:d8:21:a3:89:5b: 21:1a:aa:cb:da:8e:85:8f:4d:1a:29:37:06:e0:0f: b3:30:26:dd:b2:c6:82:ec:fa:b0:a9:55:92:25:f3: 12:97:b8:85:96:6e:67:97:b4:bd:52:07:8e:2c:ec: bd:ea:46:64:0f:50:2c:3a:6b:d3:ae:f4:41:a3:20: 67:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AE:42:B0:E0:B1:10:21:C7:E9:45:FE:36:6B:B1:2E:0D:F0:8F:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/de2a3a80-a117-3d4b-b4d6-d1e81bee83af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 199.15.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:88:d0:43:60:23:ba:b5:69:c5:2f:11:4b:e8:19:ff:a9:1d: 97:13:e8:d5:a9:4b:67:3b:cd:1e:fd:4f:68:98:17:de:a6:d2: 6b:ac:a6:1e:77:02:88:bd:58:83:86:bb:35:83:36:10:d4:f1: 21:a9:71:9b:97:78:fc:9a:5b:8a:5a:79:29:90:d1:a5:f1:8c: 6e:2a:2f:08:9e:9d:ba:71:24:90:6a:85:2b:87:68:bd:95:cd: 64:49:85:5f:90:54:88:81:e0:d9:08:5c:45:1a:73:44:ca:52: dd:56:e4:af:93:3c:91:28:c5:93:24:ed:f8:f5:9e:ea:dc:1c: 54:58:a5:de:b0:e3:da:e4:21:8a:d8:49:f7:3e:91:04:f5:8c: 18:98:fa:6d:1b:79:97:53:42:c8:d8:c3:f3:99:72:7e:c3:3b: b6:1e:6b:86:f8:d7:38:3e:05:bb:0e:db:cb:88:fc:e6:a0:7c: 27:b8:49:ca:26:f4:ac:e4:72:63:1a:0a:67:d8:20:c8:e5:ad: 33:15:bd:29:d2:e4:38:dc:4a:26:38:2a:d1:7b:c0:68:30:20: 8b:bb:48:02:7f:40:21:6f:ee:01:bb:ab:d8:99:4c:4a:1b:03: 3a:2b:9e:52:70:95:6b:13:04:9c:da:ca:7b:67:40:90:6a:34: d0:9e:14:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5p+5Z82gAIoxpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZjZhZWNjOTctZGY5MC00MjUwLWFkODktYTVhNmFhMmI2YjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXHATAe19OlZPn7bbg7Xb8foHMSOdAHCBP02 fmNvStZS2uAx3r22xQkD2lYXKZ2nmLFIyH7kLQ4jqIRZkVBVgagXUuN5Uua+ctvS Qs6oQ9v6Epivtjyk+OdDTjAx0BKnfKQqGwPpiAY0K1gkjAa4qMVBoIIRaQYLn7Sj Xln5o/Adj03wShvTlXGaQehtiVZ//8eXKUCa95cc3A5ry4aJYV+oCADs8Vv7YtEG AZmUk5v91ZSwuieoi28Bhku82CGjiVshGqrL2o6Fj00aKTcG4A+zMCbdssaC7Pqw qVWSJfMSl7iFlm5nl7S9UgeOLOy96kZkD1AsOmvTrvRBoyBndwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6uQrDgsRAhx+lF/jZrsS4N8I+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvZGUyYTNhODAtYTExNy0z ZDRiLWI0ZDYtZDFlODFiZWU4M2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxw+0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKI0ENgI7q1acUvEUvoGf+pHZcT6NWpS2c7zR79T2iYF96m0musph53 Aoi9WIOGuzWDNhDU8SGpcZuXePyaW4paeSmQ0aXxjG4qLwienbpxJJBqhSuHaL2V zWRJhV+QVIiB4NkIXEUac0TKUt1W5K+TPJEoxZMk7fj1nurcHFRYpd6w49rkIYrY Sfc+kQT1jBiY+m0beZdTQsjYw/OZcn7DO7Yea4b41zg+BbsO28uI/OagfCe4Scom 9KzkcmMaCmfYIMjlrTMVvSnS5DjcSiY4KtF7wGgwIIu7SAJ/QCFv7gG7q9iZTEob AzornlJwlWsTBJzayntnQJBqNNCeFB4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:58 2025 by rpki-client