$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa File: 4de85870-1812-37c2-b185-f215614574da.roa (raw, json) Hash identifier: stgmtlQJp3ZSv1ncOTYOkOTIlLXoYJWKFJ92S3CkXXM= Subject key identifier: 5B:AD:03:96:87:9E:9E:EF:6F:14:DA:14:56:DA:25:71:A4:1D:5A:81 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584ADA9BBFDCDDE3E280365A5580 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 199.65.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:bf:dc:dd:e3:e2:80:36:5a:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=f7fe01b4-0860-494f-9074-9c722fe06418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:58:d9:ec:83:37:a3:2a:8b:12:f2:0d:f4:33: 75:d2:17:d5:76:a9:36:46:92:fb:de:c2:90:18:5d: c0:03:0f:0d:9d:54:a6:44:e3:6d:1c:6f:68:4f:dc: 1c:67:65:5d:67:d9:ec:5f:0b:a9:ba:53:aa:03:5b: 19:7f:eb:81:23:28:fe:42:7c:aa:8e:f8:6c:98:83: 06:e8:dc:47:fc:ac:d1:2d:5e:34:bf:f4:92:fc:f0: 8e:99:38:9b:31:1e:e2:93:96:d2:a0:0a:93:bb:1e: 52:f6:f6:22:63:41:8d:d6:94:91:34:ff:0b:75:6d: 96:92:25:a3:14:4d:56:04:92:1c:82:b3:bf:18:e2: e1:c9:e5:17:09:91:04:d7:6f:9d:6b:84:28:b4:1a: 6e:d7:92:60:af:59:fd:43:02:2f:97:52:8e:6f:c5: 17:de:b0:e8:25:50:6d:eb:26:7e:f9:07:8a:04:17: 5e:f2:40:64:71:40:97:7d:29:50:d1:c5:3f:ad:ca: 5e:ea:ba:0e:31:95:89:b9:a7:20:e8:40:c1:f7:76: f9:07:22:f7:6e:bf:62:7a:43:1f:0b:80:e4:30:9f: be:a5:03:40:a0:37:e9:e0:ff:0e:2e:25:24:a7:2d: c2:95:b9:71:00:f2:ee:c5:74:35:63:9f:cb:8f:0e: 31:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AD:03:96:87:9E:9E:EF:6F:14:DA:14:56:DA:25:71:A4:1D:5A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:12:03:0a:00:7c:85:56:62:b9:b7:3e:7c:31:27:6b:50:d1: 4e:c9:c5:c5:ea:85:60:65:42:7a:bb:6e:58:bd:4c:89:c7:a4: 88:52:e0:c6:f0:b0:8c:92:48:3e:d0:82:32:38:0f:97:ae:64: 57:b3:14:17:66:89:cd:dc:69:21:e6:f6:c4:6e:55:47:e5:4e: 6c:88:a2:21:e2:78:a4:ff:c7:c3:a5:99:bc:47:2f:17:84:75: d6:88:b4:1f:90:36:cf:4c:63:4c:31:07:ef:fe:50:ee:97:4a: 9b:d2:e8:a8:34:ab:60:08:be:e8:ee:ac:a8:73:70:88:07:76: ca:43:f4:96:bf:0c:c8:54:a1:87:04:7d:34:25:74:27:aa:10: c2:a9:31:62:c6:86:83:b6:78:63:27:3f:05:95:fb:83:fc:f5: 0f:c7:fa:bd:55:83:9f:e3:83:32:fe:76:f2:50:aa:16:fc:9c: f4:f0:0b:05:c3:db:39:93:5a:c0:68:8f:d1:e6:58:57:43:a6: 78:22:50:23:42:9c:e1:10:72:ef:4d:e8:af:28:88:ff:4e:b1: 1a:9c:dc:53:22:15:b2:ae:ef:71:de:26:dd:d1:5f:8d:2e:13: 31:1e:e6:15:f5:09:9c:23:3f:ea:bb:72:24:31:8b:bd:df:c4: 58:58:f4:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7/c3ePigDZaVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ZjdmZTAxYjQtMDg2MC00OTRmLTkwNzQtOWM3MjJmZTA2NDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVjZ7IM3oyqLEvIN9DN10hfVdqk2RpL73sKQ GF3AAw8NnVSmRONtHG9oT9wcZ2VdZ9nsXwupulOqA1sZf+uBIyj+QnyqjvhsmIMG 6NxH/KzRLV40v/SS/PCOmTibMR7ik5bSoAqTux5S9vYiY0GN1pSRNP8LdW2WkiWj FE1WBJIcgrO/GOLhyeUXCZEE12+da4QotBpu15Jgr1n9QwIvl1KOb8UX3rDoJVBt 6yZ++QeKBBde8kBkcUCXfSlQ0cU/rcpe6roOMZWJuacg6EDB93b5ByL3br9iekMf C4DkMJ++pQNAoDfp4P8OLiUkpy3ClblxAPLuxXQ1Y5/Ljw4xJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFutA5aHnp7vbxTaFFbaJXGkHVqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvNGRlODU4NzAtMTgxMi0z N2MyLWIxODUtZjIxNTYxNDU3NGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0EoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcSAwoAfIVWYrm3PnwxJ2tQ0U7JxcXqhWBlQnq7bli9TInHpIhS4Mbw sIySSD7QgjI4D5euZFezFBdmic3caSHm9sRuVUflTmyIoiHieKT/x8OlmbxHLxeE ddaItB+QNs9MY0wxB+/+UO6XSpvS6Kg0q2AIvujurKhzcIgHdspD9Ja/DMhUoYcE fTQldCeqEMKpMWLGhoO2eGMnPwWV+4P89Q/H+r1Vg5/jgzL+dvJQqhb8nPTwCwXD 2zmTWsBoj9HmWFdDpngiUCNCnOEQcu9N6K8oiP9OsRqc3FMiFbKu73HeJt3RX40u EzEe5hX1CZwjP+q7ciQxi73fxFhY9GI= -----END CERTIFICATE-----Generated at Sat Aug 23 09:14:45 2025 by rpki-client