$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa File: 520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa (raw, json) Hash identifier: 0Uwbn75v1gr0lyrGWrcEy242ouhHFW9obwF45SDbQt0= Subject key identifier: 71:B5:19:70:16:BE:3A:A9:7D:33:06:EE:38:04:8B:3B:1D:62:D9:17 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584ADECBB59FE96E87924F2F2880 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 199.16.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b5:9f:e9:6e:87:92:4f:2f:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=450cebe7-88f1-49c5-adb0-6f0cbfefdfe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:5f:1d:d8:d0:2f:13:1b:46:a5:8c:c9:7b: a4:73:6e:15:b2:45:2a:d5:c7:fb:35:b4:28:46:71: 45:5b:09:ea:13:83:e5:6f:11:31:9d:b0:25:0a:b4: 9f:6a:13:c9:08:37:64:66:dd:9e:84:04:cf:a1:fc: 1f:9e:6b:d9:c9:88:c9:53:f0:67:4b:f6:07:77:8e: f7:7d:43:6b:ad:14:e8:6d:c6:eb:33:7d:5d:30:60: a1:59:68:5f:1a:28:78:77:c2:48:b1:e4:7c:8c:b2: ba:52:16:84:64:9d:b6:fb:fa:99:5a:cc:41:4f:a5: d5:45:a9:e7:04:3e:68:99:ee:88:86:50:cb:71:13: 91:77:dc:a8:95:c8:1e:a3:76:02:09:4a:7a:06:43: cf:44:ca:5b:11:5d:5a:9d:ee:9b:a3:1e:bd:27:f9: 2a:c6:f5:de:2d:10:06:f0:cc:be:99:44:80:50:27: 47:e4:c2:7c:16:ce:e7:cf:59:f1:90:36:eb:29:7c: 2c:d3:ed:00:0f:b7:dc:48:94:ef:13:f3:e7:7c:b2: 30:0d:e2:7e:d5:79:a7:d9:cb:05:31:a8:29:1b:60: bd:00:3f:ad:a8:61:e6:0b:b8:f6:17:9d:93:62:17: a8:ff:b6:9d:2a:72:d8:c1:e7:f1:f3:f0:55:a6:79: 00:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B5:19:70:16:BE:3A:A9:7D:33:06:EE:38:04:8B:3B:1D:62:D9:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:a8:72:4f:58:bd:c8:3d:ee:f9:c0:0a:77:1c:bd:cb:9a:84: a1:26:2d:26:ad:f6:c2:5f:04:a0:45:6d:b6:82:ce:a1:83:74: 21:85:9e:bd:8c:f4:f3:b1:ef:3f:ec:93:79:0b:7c:66:e0:0b: 91:82:25:34:59:71:d4:3d:0c:71:cf:98:86:b3:ba:5b:4b:7c: d8:a8:be:31:f8:b6:88:06:19:e4:2a:e7:ca:db:21:1d:0a:36: 40:80:b6:87:3c:32:29:1a:b6:34:78:8e:d8:5b:5e:61:07:43: e9:53:73:ea:69:eb:77:58:cb:f8:55:d5:43:54:40:a7:0c:66: 1f:51:5b:e3:71:16:8b:b1:03:7a:2c:32:ee:42:b8:7e:62:ea: b3:7a:60:98:5e:77:6a:54:ea:f5:25:a3:ad:75:a4:ca:81:50: 54:be:ae:50:84:f7:f2:48:7a:f3:20:f0:19:a3:0f:38:3f:78: 40:d8:93:d0:4b:3c:02:7c:ab:ba:11:4e:cf:05:cc:18:0b:dc: d4:e9:df:dc:fc:bf:0b:7d:c8:01:27:21:b9:92:18:e4:07:65: 6d:68:33:ee:7a:20:35:93:d7:88:3b:81:b1:fc:c3:a8:fe:47: 28:a4:0e:6f:3c:5f:e9:9f:a3:f1:f6:45:2c:7c:0b:f7:6b:7c: e5:af:23:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7Wf6W6Hkk8vKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NDUwY2ViZTctODhmMS00OWM1LWFkYjAtNmYwY2JmZWZkZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIlfHdjQLxMbRqWMyXukc24VskUq1cf7NbQo RnFFWwnqE4PlbxExnbAlCrSfahPJCDdkZt2ehATPofwfnmvZyYjJU/BnS/YHd473 fUNrrRTobcbrM31dMGChWWhfGih4d8JIseR8jLK6UhaEZJ22+/qZWsxBT6XVRann BD5ome6IhlDLcRORd9yolcgeo3YCCUp6BkPPRMpbEV1ane6box69J/kqxvXeLRAG 8My+mUSAUCdH5MJ8Fs7nz1nxkDbrKXws0+0AD7fcSJTvE/PnfLIwDeJ+1Xmn2csF MagpG2C9AD+tqGHmC7j2F52TYheo/7adKnLYwefx8/BVpnkAmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHG1GXAWvjqpfTMG7jgEizsdYtkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNTIwYmM3ZWQtMjViMS0z ZDljLWIzYWYtNmEwM2U3MmE1MDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxxCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiock9Yvcg97vnACnccvcuahKEmLSat9sJfBKBFbbaCzqGDdCGFnr2M 9POx7z/sk3kLfGbgC5GCJTRZcdQ9DHHPmIazultLfNiovjH4togGGeQq58rbIR0K NkCAtoc8MikatjR4jthbXmEHQ+lTc+pp63dYy/hV1UNUQKcMZh9RW+NxFouxA3os Mu5CuH5i6rN6YJhed2pU6vUlo611pMqBUFS+rlCE9/JIevMg8BmjDzg/eEDYk9BL PAJ8q7oRTs8FzBgL3NTp39z8vwt9yAEnIbmSGOQHZW1oM+56IDWT14g7gbH8w6j+ RyikDm88X+mfo/H2RSx8C/drfOWvI8s= -----END CERTIFICATE-----Generated at Sun Aug 24 01:23:42 2025 by rpki-client