$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b86e1712-c465-324d-b026-de233c4ea59c.roa File: b86e1712-c465-324d-b026-de233c4ea59c.roa (raw, json) Hash identifier: yJXKF6cBu5fjePpyRXnEiAleUiglVO7UtWs6XxsJVow= Subject key identifier: 12:20:B8:E2:BA:8A:81:61:0B:C3:8F:5E:64:5A:6B:AE:51:29:79:B0 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584ADECBAE2D4CAB60A003E48B08 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b86e1712-c465-324d-b026-de233c4ea59c.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 199.16.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:ae:2d:4c:ab:60:a0:03:e4:8b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=1f8d9ddb-4e3f-4d97-9e01-7b347ff1d28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:96:de:b9:59:a1:5d:87:9b:87:16:ed:e0:a1: 6d:a7:4f:ef:16:95:d1:06:2d:ae:0f:ac:fa:01:b1: cd:ad:fb:e8:06:d2:ad:a7:ca:34:2e:31:69:92:3d: 55:c7:c6:b5:76:7d:2d:18:7d:c4:86:be:7f:52:1e: 85:fe:ff:bd:d3:9d:d8:1c:8c:69:d5:05:ad:e7:71: 06:ff:71:f0:d2:8d:ae:b1:35:35:06:33:d2:33:d5: 04:e9:f9:10:ca:52:2d:a3:f9:33:df:e2:ce:55:59: 78:54:e7:13:9b:68:04:01:a6:8b:18:8a:70:31:23: a8:4f:2d:cf:7e:d4:a3:a3:2d:11:73:ec:24:91:1d: 94:bb:41:9f:c9:bc:bf:82:34:55:8f:b2:60:1e:4f: f6:67:79:cc:66:40:ea:fc:fb:d2:ed:46:3c:1f:2f: 6f:a0:ff:8e:80:77:c3:c6:2c:c4:3f:4f:9e:a1:7d: e5:b7:14:f2:5c:07:f0:9d:c6:0c:2e:c5:7c:c4:34: fe:3d:02:de:2a:2a:81:d3:2e:c2:50:14:0b:1e:a3: 83:d6:60:3b:0a:f9:fb:2a:fd:75:47:de:51:26:17: de:36:7b:ac:83:09:2d:61:8e:89:87:83:1c:12:da: 00:25:6b:e8:8f:21:8a:f2:c9:1d:ca:7a:47:23:95: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:20:B8:E2:BA:8A:81:61:0B:C3:8F:5E:64:5A:6B:AE:51:29:79:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b86e1712-c465-324d-b026-de233c4ea59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:46:c7:00:d8:72:de:41:7c:ac:01:c6:b3:87:dc:e5:85:ad: 0a:28:64:46:68:02:c4:8c:f3:b0:c0:e5:dd:fe:3e:b9:b4:6b: f8:80:51:a4:3d:8d:fe:5b:1f:68:87:e4:5e:96:cc:88:7d:a0: 85:48:e5:87:4f:05:ad:ed:f7:6d:00:88:e5:f4:20:db:79:43: 24:a8:2f:65:6c:10:3c:c9:89:5d:1f:d4:98:3a:03:c6:19:7b: 67:bf:b6:81:a1:1b:49:87:4e:57:59:6e:cc:1c:d2:d5:4b:74: 97:b3:5d:c8:03:6b:0e:f8:f9:ec:b7:19:07:5d:e5:83:00:33: ea:54:ab:44:8b:4c:36:5b:02:86:56:ad:8a:28:e8:e9:d2:77: 2b:38:11:9b:f5:5d:3e:65:87:a9:6d:6b:f5:54:9b:9b:46:85: de:fb:7a:f1:93:86:a4:5e:fe:31:40:ce:3b:3f:1a:d5:75:99: cf:57:fa:6e:41:d9:86:3e:f7:bf:81:20:be:00:f2:44:7a:b1: b6:22:b4:8c:cb:66:ec:5b:d7:32:2f:d3:6a:f7:e5:d5:97:f1: f1:d8:25:f4:a6:10:7e:22:79:87:d8:0a:19:7d:5c:28:8e:04: 50:94:be:85:2d:5f:ba:5f:ba:75:ff:d3:5a:e6:d0:10:fd:22: 86:7b:87:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey64tTKtgoAPkiwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MWY4ZDlkZGItNGUzZi00ZDk3LTllMDEtN2IzNDdmZjFkMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJbeuVmhXYebhxbt4KFtp0/vFpXRBi2uD6z6 AbHNrfvoBtKtp8o0LjFpkj1Vx8a1dn0tGH3Ehr5/Uh6F/v+9053YHIxp1QWt53EG /3Hw0o2usTU1BjPSM9UE6fkQylIto/kz3+LOVVl4VOcTm2gEAaaLGIpwMSOoTy3P ftSjoy0Rc+wkkR2Uu0Gfyby/gjRVj7JgHk/2Z3nMZkDq/PvS7UY8Hy9voP+OgHfD xizEP0+eoX3ltxTyXAfwncYMLsV8xDT+PQLeKiqB0y7CUBQLHqOD1mA7Cvn7Kv11 R95RJhfeNnusgwktYY6Jh4McEtoAJWvojyGK8skdynpHI5VqPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIguOK6ioFhC8OPXmRaa65RKXmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYjg2ZTE3MTItYzQ2NS0z MjRkLWIwMjYtZGUyMzNjNGVhNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtGxwDYct5BfKwBxrOH3OWFrQooZEZoAsSM87DA5d3+Prm0a/iAUaQ9 jf5bH2iH5F6WzIh9oIVI5YdPBa3t920AiOX0INt5QySoL2VsEDzJiV0f1Jg6A8YZ e2e/toGhG0mHTldZbswc0tVLdJezXcgDaw74+ey3GQdd5YMAM+pUq0SLTDZbAoZW rYoo6OnSdys4EZv1XT5lh6lta/VUm5tGhd77evGThqRe/jFAzjs/GtV1mc9X+m5B 2YY+97+BIL4A8kR6sbYitIzLZuxb1zIv02r35dWX8fHYJfSmEH4ieYfYChl9XCiO BFCUvoUtX7pfunX/01rm0BD9IoZ7h7E= -----END CERTIFICATE-----Generated at Sun Aug 24 05:42:56 2025 by rpki-client