$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/29405407-ca65-35ca-bd75-7cd4d56b8692.roa File: 29405407-ca65-35ca-bd75-7cd4d56b8692.roa (raw, json) Hash identifier: tbTBUGkdPMU807RyfoORFBPfZBv/CGAU8fu7eO8RYD4= Subject key identifier: FB:5E:1C:26:BE:21:F3:B8:D2:27:23:92:5B:35:CF:C4:97:0F:08:BB Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584B5B072AE6744838FDE76508A0 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/29405407-ca65-35ca-bd75-7cd4d56b8692.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 396982 IP address blocks: 199.65.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:2a:e6:74:48:38:fd:e7:65:08:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=3ac153c8-5cb4-45aa-b9e6-755bcd209b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d5:3f:ea:5e:1c:cf:a4:a0:75:2c:4a:4b:c0: 28:0e:70:e1:1c:9b:b1:6c:70:19:9f:75:45:42:f4: 02:95:66:e0:f3:bf:43:8f:56:df:5c:a2:9f:0f:a1: aa:2d:58:ac:47:31:15:6b:ed:21:32:91:37:a2:e3: 78:a5:70:36:40:ad:b6:c0:e2:ba:f9:22:61:82:7f: 5b:b9:24:aa:99:d3:bf:87:f0:96:dd:4d:0a:60:a3: 89:bd:ba:13:ae:61:7c:22:d5:da:d6:59:8f:0e:eb: 21:51:b8:57:cd:ec:a5:48:d7:e5:46:37:02:fb:f5: 0a:c7:b8:e4:4b:d7:eb:9e:05:41:d3:0f:c9:cb:70: 9d:82:28:f7:de:cc:c5:8b:65:cc:0d:e3:26:6d:89: e8:d6:09:fa:63:af:36:2e:41:8d:53:64:c4:80:fa: b8:ed:13:f9:bc:91:d9:2a:49:91:39:32:75:b0:8c: 0c:a1:85:20:6f:77:12:80:38:e5:21:6e:e8:33:0d: 58:2b:95:a4:48:46:df:9d:a5:26:bf:73:d0:99:f5: 9f:b7:11:b1:50:5b:b8:2f:46:ca:54:dc:03:ea:77: ac:e9:d4:c3:12:2a:6b:bf:0e:37:26:a5:4c:ad:1e: 67:ed:31:49:3c:e4:aa:6e:86:20:af:e1:e2:08:63: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5E:1C:26:BE:21:F3:B8:D2:27:23:92:5B:35:CF:C4:97:0F:08:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/29405407-ca65-35ca-bd75-7cd4d56b8692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a3:9a:4a:93:39:77:c9:a9:c5:e4:e6:b4:83:ce:63:51:2b: dd:37:59:a0:68:46:b1:2a:2f:7b:9b:d5:8a:bb:d8:25:39:2b: 13:92:93:0b:95:54:45:62:2f:40:f3:14:f2:30:a0:a2:19:20: 91:4c:dc:8b:37:ce:91:d4:df:a0:15:c9:d5:db:4e:5f:d2:b9: 68:05:d1:ff:b7:03:fa:e9:d5:dd:3b:fd:39:bc:6c:a2:42:39: 43:2b:8c:0a:ce:ec:81:c0:fd:b0:cd:c5:7c:d2:f6:58:6f:db: 32:39:c4:a8:f5:17:01:ab:a5:c8:1a:ab:30:5e:2f:68:db:76: 84:de:6a:ca:de:e9:68:bd:e0:12:c4:ae:c8:77:11:7a:66:ab: e3:14:d5:63:58:62:52:24:62:e6:0d:85:9d:bd:23:dc:83:48: 55:cf:71:41:17:a6:c8:a6:27:4c:b9:bc:17:49:c1:8e:7f:37: 7b:40:8a:eb:96:5b:cd:bd:9d:24:9e:13:d3:9b:98:f7:db:89: 4e:4a:92:a0:4e:8c:6e:e0:d2:78:dd:20:a7:b8:b2:ff:93:43: fb:be:71:82:96:b1:e1:f5:ca:dd:b8:8c:1a:0f:b5:c4:10:ef: f6:be:71:21:57:76:68:8b:a9:02:88:89:2f:d7:5d:3b:c6:02: aa:38:15:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbByrmdEg4/edlCKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk M2FjMTUzYzgtNWNiNC00NWFhLWI5ZTYtNzU1YmNkMjA5YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dU/6l4cz6SgdSxKS8AoDnDhHJuxbHAZn3VF QvQClWbg879Dj1bfXKKfD6GqLVisRzEVa+0hMpE3ouN4pXA2QK22wOK6+SJhgn9b uSSqmdO/h/CW3U0KYKOJvboTrmF8ItXa1lmPDushUbhXzeylSNflRjcC+/UKx7jk S9frngVB0w/Jy3Cdgij33szFi2XMDeMmbYno1gn6Y682LkGNU2TEgPq47RP5vJHZ KkmROTJ1sIwMoYUgb3cSgDjlIW7oMw1YK5WkSEbfnaUmv3PQmfWftxGxUFu4L0bK VNwD6nes6dTDEiprvw43JqVMrR5n7TFJPOSqboYgr+HiCGPSpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPteHCa+IfO40icjkls1z8SXDwi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvMjk0MDU0MDctY2E2NS0z NWNhLWJkNzUtN2NkNGQ1NmI4NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0EoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqjmkqTOXfJqcXk5rSDzmNRK903WaBoRrEqL3ub1Yq72CU5KxOSkwuV VEViL0DzFPIwoKIZIJFM3Is3zpHU36AVydXbTl/SuWgF0f+3A/rp1d07/Tm8bKJC OUMrjArO7IHA/bDNxXzS9lhv2zI5xKj1FwGrpcgaqzBeL2jbdoTeasre6Wi94BLE rsh3EXpmq+MU1WNYYlIkYuYNhZ29I9yDSFXPcUEXpsimJ0y5vBdJwY5/N3tAiuuW W829nSSeE9ObmPfbiU5KkqBOjG7g0njdIKe4sv+TQ/u+cYKWseH1yt24jBoPtcQQ 7/a+cSFXdmiLqQKIiS/XXTvGAqo4Fag= -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:22 2025 by rpki-client