$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa File: 822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa (raw, json) Hash identifier: Xi9RLGG20dwInTIl5wkxKrV34RBrEJOgNO0dpsOoREg= Subject key identifier: 75:DB:72:05:03:06:51:D3:0F:BA:0E:74:D1:28:2D:84:3D:0E:F8:AE Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584AECC12FCDDB11267165149500 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 611 IP address blocks: 131.202.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:2f:cd:db:11:26:71:65:14:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0140e348-eab3-4e59-9224-8d5cd5274030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:65:c6:94:32:c6:2c:98:72:22:59:d6:6d:43: 28:dd:3f:68:a6:f1:fe:5c:17:34:bc:9c:9a:27:34: 55:10:fa:ff:ff:84:e0:88:47:45:c7:13:31:0c:e8: 3f:75:14:bc:19:b6:0b:1f:96:46:0b:df:9f:b1:20: 58:04:fa:a3:57:98:68:5f:df:86:5d:e6:02:2a:d0: ed:9c:5b:12:05:d1:45:e6:1d:a3:3d:34:45:1d:c3: bf:6e:cf:29:d4:18:fb:4a:e9:98:79:01:93:dc:7d: 1b:ca:ba:74:7f:df:44:f1:ab:37:4b:e0:b9:e3:bd: 5d:1f:55:81:97:85:bf:f5:96:e2:ad:3d:30:62:89: 81:4d:2e:a4:34:34:6e:f5:27:2e:8e:d7:af:76:f1: bd:6b:e9:86:86:67:81:be:f9:03:db:70:62:7f:fa: 89:b7:0e:f7:27:cc:d1:02:98:fe:32:46:1c:d9:19: e6:b5:ed:ee:d1:f9:fc:ab:22:25:ea:34:18:44:4c: d1:bb:fc:76:f9:8f:2a:d4:83:98:2a:5f:9f:11:b8: 7c:3d:cb:a8:5d:17:ba:a5:41:27:eb:df:4d:c4:74: 46:3a:7d:ef:c1:77:37:bb:f8:ae:c1:b6:c9:76:b8: cc:8b:b4:74:6a:df:a2:ee:84:27:78:43:b2:f6:4a: 5d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DB:72:05:03:06:51:D3:0F:BA:0E:74:D1:28:2D:84:3D:0E:F8:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 131.202.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e7:54:04:86:55:e6:a6:9b:0f:05:02:39:07:79:69:73:db: 17:81:1a:5f:30:36:64:50:42:59:d9:c3:7c:ce:5b:3b:47:bc: 6d:9b:76:fa:03:6f:39:fd:93:7d:c2:fb:fa:b9:8c:5a:70:c5: d6:58:43:9d:a3:b5:6d:f6:99:49:dd:c2:4c:bb:a4:71:0b:3e: a1:56:b2:d6:41:8f:34:39:64:c5:37:27:b3:de:74:24:4c:95: 96:11:77:42:ab:98:13:37:a0:c1:4b:0f:9a:6a:5e:a8:f0:0a: 6f:b3:a7:80:4c:6a:89:3b:bb:04:ac:40:13:e2:43:69:b0:3c: cc:de:07:98:3f:fd:fd:de:79:10:3e:87:af:99:fc:c1:8c:e0: 45:54:26:91:bc:ee:b6:13:a9:67:82:d4:46:b4:33:64:3b:7d: 34:40:30:60:7f:1e:17:10:fe:4d:08:a3:55:59:15:a7:0d:08: b7:cb:20:b0:94:45:32:e1:0b:32:a7:e6:96:7c:15:f3:27:8c: e6:be:ce:d5:d7:a9:f3:60:94:75:cc:c8:96:83:d6:6e:00:f2: 4c:97:36:59:19:bf:a4:89:82:b7:22:6d:7f:a4:6c:d3:a3:0b: 67:e3:22:cd:d2:77:4e:49:0a:16:fa:d4:6b:a7:ad:9b:ae:98: eb:aa:42:de -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErswS/N2xEmcWUUlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDE0MGUzNDgtZWFiMy00ZTU5LTkyMjQtOGQ1Y2Q1Mjc0MDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWXGlDLGLJhyIlnWbUMo3T9opvH+XBc0vJya JzRVEPr//4TgiEdFxxMxDOg/dRS8GbYLH5ZGC9+fsSBYBPqjV5hoX9+GXeYCKtDt nFsSBdFF5h2jPTRFHcO/bs8p1Bj7SumYeQGT3H0byrp0f99E8as3S+C5471dH1WB l4W/9ZbirT0wYomBTS6kNDRu9ScujtevdvG9a+mGhmeBvvkD23Bif/qJtw73J8zR Apj+MkYc2Rnmte3u0fn8qyIl6jQYREzRu/x2+Y8q1IOYKl+fEbh8PcuoXRe6pUEn 699NxHRGOn3vwXc3u/iuwbbJdrjMi7R0at+i7oQneEOy9kpdFwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHXbcgUDBlHTD7oOdNEoLYQ9DviuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvODIyNzAwZTItMzljNC0z NzBkLWEyZDYtM2U1YjRhYzA2ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg8owVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXOdUBIZV5qabDwUCOQd5aXPbF4EaXzA2ZFBCWdnDfM5bO0e8bZt2+gNv Of2TfcL7+rmMWnDF1lhDnaO1bfaZSd3CTLukcQs+oVay1kGPNDlkxTcns950JEyV lhF3QquYEzegwUsPmmpeqPAKb7OngExqiTu7BKxAE+JDabA8zN4HmD/9/d55ED6H r5n8wYzgRVQmkbzuthOpZ4LURrQzZDt9NEAwYH8eFxD+TQijVVkVpw0It8sgsJRF MuELMqfmlnwV8yeM5r7O1dep82CUdczIloPWbgDyTJc2WRm/pImCtyJtf6Rs06ML Z+MizdJ3TkkKFvrUa6etm66Y66pC3g== -----END CERTIFICATE-----Generated at Sun Aug 24 07:55:49 2025 by rpki-client