$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ad039e30-d35a-3212-ab40-0e7e21434e3a.roa File: ad039e30-d35a-3212-ab40-0e7e21434e3a.roa (raw, json) Hash identifier: Y0Cg/eJ43ofRvv+Xpjb+7N1XFqF1SbsOleq0TldbfWM= Subject key identifier: CC:C4:AC:A9:F8:14:4C:18:C4:50:BE:D8:09:B5:C6:F6:59:78:D2:B2 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584AF0F13A37F8AC80002EB11780 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ad039e30-d35a-3212-ab40-0e7e21434e3a.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 8075 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3a:37:f8:ac:80:00:2e:b1:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=eafe19dc-96d2-4df1-8ded-451da3345d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:15:bc:88:01:fc:ea:d5:41:ba:81:d8:0b:01: 40:ca:b8:52:67:bf:19:91:01:39:88:dc:f7:fd:19: 8a:f0:74:1d:4e:87:b8:e7:69:9e:45:48:54:51:9f: 82:82:69:73:41:db:5a:64:b8:e7:92:09:8d:17:87: 1e:7f:dd:7d:1a:74:97:2d:90:cb:a8:6d:8c:0f:0c: 94:74:66:9e:8e:2c:59:59:97:a2:cf:31:60:7a:df: d9:c7:2e:5b:15:f2:dd:44:8e:18:cd:bd:0f:09:6a: af:b4:1c:3e:e8:00:4a:fe:8f:8a:ff:cb:d5:b0:8e: 2b:fd:da:85:95:37:29:76:e9:00:86:fd:d2:8c:2c: 1b:e7:f0:c1:bc:bf:28:33:6f:97:9d:48:2d:d3:17: 06:d6:cb:99:5b:d3:a0:62:c9:7b:50:02:3a:ed:61: 4c:c2:79:d6:f1:8a:c2:2f:52:f8:2f:e7:59:51:6c: 91:a4:21:a8:46:40:f0:32:b0:a5:f4:98:d2:03:5c: e1:03:88:2e:54:b7:fe:fb:03:5c:2f:ca:1d:ce:c5: 1f:d6:6c:e0:04:fb:f1:12:6e:3c:f9:29:e1:35:5a: 38:2e:6f:24:b2:2b:d4:18:17:6c:30:8f:8d:85:3c: 97:8d:69:3b:d5:f2:28:b7:8a:9c:c5:0b:7d:f4:d7: e4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C4:AC:A9:F8:14:4C:18:C4:50:BE:D8:09:B5:C6:F6:59:78:D2:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ad039e30-d35a-3212-ab40-0e7e21434e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:83:34:cb:e2:fc:c7:be:b6:e8:30:94:18:ab:1f:8d:78:88: 98:c2:6b:72:1e:75:fc:09:e6:5b:ca:06:a1:4f:39:9e:ea:4a: b0:13:c3:c8:13:93:0c:77:50:f8:13:76:bb:6a:1b:26:e6:f7: a7:83:41:44:e6:39:9f:91:6c:b9:85:b1:10:63:f6:a2:99:ae: fa:a2:da:5c:4f:11:84:19:db:6f:6a:8f:dd:07:ad:14:f1:00: f3:8a:3e:e5:bb:8b:80:6f:c7:4b:8b:9b:d8:6f:a3:21:4b:93: 1c:9a:35:f8:30:c6:e7:09:5b:b4:da:5b:b6:94:0b:b8:ab:4e: 44:68:12:b6:67:f9:71:b8:08:d8:3b:e2:bc:04:ef:73:0e:06: 7a:c8:cf:e0:1d:a6:6c:f0:20:40:83:49:65:ef:94:6b:22:f7: 91:59:2a:e5:fa:9d:58:32:be:3b:7a:87:0d:00:06:67:38:56: e7:3f:1e:75:12:c6:9b:b9:1e:6b:22:1e:59:cb:70:c9:69:0d: 0d:e1:ea:3a:7c:59:cc:7a:30:a3:62:dd:e4:ca:09:04:0a:78: 3b:f0:c5:7a:38:f7:b6:6d:d6:ac:b1:4e:d6:d7:c7:44:3d:70: 60:21:f5:d4:98:e2:b4:74:8f:3b:8f:2d:e2:0d:92:bf:46:f7: 35:8e:6d:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8To3+KyAAC6xF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZWFmZTE5ZGMtOTZkMi00ZGYxLThkZWQtNDUxZGEzMzQ1ZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxW8iAH86tVBuoHYCwFAyrhSZ78ZkQE5iNz3 /RmK8HQdToe452meRUhUUZ+CgmlzQdtaZLjnkgmNF4cef919GnSXLZDLqG2MDwyU dGaejixZWZeizzFget/Zxy5bFfLdRI4Yzb0PCWqvtBw+6ABK/o+K/8vVsI4r/dqF lTcpdukAhv3SjCwb5/DBvL8oM2+XnUgt0xcG1suZW9OgYsl7UAI67WFMwnnW8YrC L1L4L+dZUWyRpCGoRkDwMrCl9JjSA1zhA4guVLf++wNcL8odzsUf1mzgBPvxEm48 +SnhNVo4Lm8ksivUGBdsMI+NhTyXjWk71fIot4qcxQt99Nfk3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzErKn4FEwYxFC+2Am1xvZZeNKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvYWQwMzllMzAtZDM1YS0z MjEyLWFiNDAtMGU3ZTIxNDM0ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGDNMvi/Me+tugwlBirH414iJjCa3IedfwJ5lvKBqFPOZ7qSrATw8gT kwx3UPgTdrtqGybm96eDQUTmOZ+RbLmFsRBj9qKZrvqi2lxPEYQZ229qj90HrRTx APOKPuW7i4Bvx0uLm9hvoyFLkxyaNfgwxucJW7TaW7aUC7irTkRoErZn+XG4CNg7 4rwE73MOBnrIz+AdpmzwIECDSWXvlGsi95FZKuX6nVgyvjt6hw0ABmc4Vuc/HnUS xpu5HmsiHlnLcMlpDQ3h6jp8Wcx6MKNi3eTKCQQKeDvwxXo497Zt1qyxTtbXx0Q9 cGAh9dSY4rR0jzuPLeINkr9G9zWObTo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:10:48 2025 by rpki-client