$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa File: 1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa (raw, json) Hash identifier: mjm3dVbC/UVr/xAloL1zSeWeTVwGPf0GkPjzgnMuDHQ= Subject key identifier: C1:F1:17:84:42:4E:5B:CD:A2:68:35:B5:23:E6:A5:B1:DB:C8:AF:97 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584ADECBAE3FBF01B3446C9EE6C0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 199.16.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:ae:3f:bf:01:b3:44:6c:9e:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=bd25862f-e8f4-4362-974e-9ff9d2aba494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:12:bc:75:7f:3d:e8:32:08:59:a5:74:27:e5: 54:bf:2f:01:72:4c:c6:f3:65:d9:7c:e8:17:58:b4: b4:41:74:d3:e4:f9:ef:24:9a:46:4f:db:11:1b:9c: 5e:d5:5a:24:68:b6:4a:e1:35:1b:9c:b9:43:9d:40: 1f:20:79:32:d5:c8:8c:1c:b0:17:12:d8:09:b1:e9: f6:7d:98:8f:e0:3c:bf:f7:3e:45:83:f0:75:0f:e1: b2:a7:2c:a6:5c:6a:19:56:4d:57:db:87:84:01:77: 1b:b5:00:58:0f:91:d4:81:ee:f1:2d:df:3f:0a:23: 1a:65:83:db:27:a1:21:f0:49:11:c9:ee:e2:c3:09: 9b:34:55:da:cb:6a:f1:2e:d5:17:7e:dc:36:d9:fa: 95:67:b3:2a:f7:c0:56:f4:cd:a5:3e:8d:3e:75:d3: ec:ae:dc:fa:b9:73:67:30:e2:b9:80:5d:2b:a4:84: fc:09:0c:74:85:ee:db:50:ac:cb:dd:46:43:9c:90: bc:bd:64:04:6e:d4:49:f8:e0:69:eb:8b:7c:b6:e5: e6:c6:a4:70:c2:27:33:8a:f0:79:8b:49:70:c3:7b: f5:ea:12:de:6b:aa:ea:36:ca:12:e0:26:00:b9:7c: a7:1d:69:45:85:57:e5:80:c1:c3:d5:e5:70:ee:55: 4d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F1:17:84:42:4E:5B:CD:A2:68:35:B5:23:E6:A5:B1:DB:C8:AF:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:19:05:e7:d6:12:7f:16:d3:93:51:89:65:0a:40:cf:02:0d: 32:18:f0:42:f8:1e:ed:c7:d0:65:de:28:5c:e4:61:ef:75:ea: 86:6f:bd:36:16:bd:83:f6:85:84:78:85:94:d7:5a:b5:98:8d: 19:c7:2b:e8:10:49:4f:0f:c3:c0:c0:cf:aa:7e:36:b7:c2:cc: ee:64:cc:5b:65:01:28:63:94:ac:b0:ce:ca:6e:8b:c6:1c:2d: 79:9e:e3:27:13:c2:84:b6:9f:1d:5d:ca:9c:ca:ef:db:38:04: 0a:2f:18:c9:3c:b9:d6:36:31:26:02:d6:2e:bd:b6:57:4f:ac: f1:46:9a:cf:86:da:fb:8c:9b:26:55:16:b3:d5:06:16:90:1d: bb:11:15:3a:7f:e0:02:7f:cc:a9:8e:e2:b9:29:91:03:34:2d: fa:e0:ec:1d:19:81:53:02:90:97:3d:f0:fd:5c:10:9a:be:32: 6b:e3:c9:6a:9f:26:ee:77:ec:2f:f2:dc:ee:56:88:b0:de:11: 3b:5d:00:a4:19:92:79:a5:1b:d4:0c:8d:33:f5:b0:37:65:58: 97:fd:67:06:23:00:91:63:dc:0f:11:24:e1:c2:8a:39:7d:e7: 9f:db:d3:34:d0:18:e9:06:76:a0:1a:35:d2:4d:29:0e:2a:69: 00:ef:70:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey64/vwGzRGye5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YmQyNTg2MmYtZThmNC00MzYyLTk3NGUtOWZmOWQyYWJhNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhK8dX896DIIWaV0J+VUvy8BckzG82XZfOgX WLS0QXTT5PnvJJpGT9sRG5xe1VokaLZK4TUbnLlDnUAfIHky1ciMHLAXEtgJsen2 fZiP4Dy/9z5Fg/B1D+GypyymXGoZVk1X24eEAXcbtQBYD5HUge7xLd8/CiMaZYPb J6Eh8EkRye7iwwmbNFXay2rxLtUXftw22fqVZ7Mq98BW9M2lPo0+ddPsrtz6uXNn MOK5gF0rpIT8CQx0he7bUKzL3UZDnJC8vWQEbtRJ+OBp64t8tuXmxqRwwiczivB5 i0lww3v16hLea6rqNsoS4CYAuXynHWlFhVflgMHD1eVw7lVNHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHxF4RCTlvNomg1tSPmpbHbyK+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMWJhNWQ5ZGMtMWE2Yi0z ODAzLWEzNjgtMmYzYTgyNGJjZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxCfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAZBefWEn8W05NRiWUKQM8CDTIY8EL4Hu3H0GXeKFzkYe916oZvvTYW vYP2hYR4hZTXWrWYjRnHK+gQSU8Pw8DAz6p+NrfCzO5kzFtlAShjlKywzspui8Yc LXme4ycTwoS2nx1dypzK79s4BAovGMk8udY2MSYC1i69tldPrPFGms+G2vuMmyZV FrPVBhaQHbsRFTp/4AJ/zKmO4rkpkQM0Lfrg7B0ZgVMCkJc98P1cEJq+MmvjyWqf Ju537C/y3O5WiLDeETtdAKQZknmlG9QMjTP1sDdlWJf9ZwYjAJFj3A8RJOHCijl9 55/b0zTQGOkGdqAaNdJNKQ4qaQDvcDQ= -----END CERTIFICATE-----Generated at Sun Aug 24 07:37:34 2025 by rpki-client