$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/c02dd316-4f22-3bfd-a067-da3218dd31a1.roa File: c02dd316-4f22-3bfd-a067-da3218dd31a1.roa (raw, json) Hash identifier: mnzNsuSE0hgi0CmLIuWcvYT9+sWiKlAKx/UoGQHq9c4= Subject key identifier: C7:2C:4C:74:02:F5:BD:05:5F:01:C5:DB:FF:86:7A:CD:9D:CF:88:58 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584B5B07620CEC7761A6ED1EE108 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/c02dd316-4f22-3bfd-a067-da3218dd31a1.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 396982 IP address blocks: 199.65.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:62:0c:ec:77:61:a6:ed:1e:e1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=23e7699a-0cfd-40bc-b971-767de35e7c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:21:71:ee:6f:59:eb:a2:02:64:dd:93:a9:88: 30:e3:f7:db:ea:1b:a8:0d:37:2c:00:40:c5:6a:09: d8:ec:87:4d:73:34:89:44:b0:66:03:df:6a:e4:18: c2:df:13:ff:3a:14:cb:24:bf:5b:c6:ea:9f:1c:d0: bb:95:1b:54:9e:2c:b1:b4:bd:d0:22:77:4c:02:35: b7:32:5b:45:3a:ed:9c:ed:5b:91:ee:90:bd:2b:d8: 68:e0:eb:f5:be:9f:78:c9:5b:59:90:95:ff:95:96: 3e:f4:96:89:2e:cd:0e:fa:2c:8f:65:e3:60:e1:f8: d7:0f:79:73:41:2f:b3:35:4e:1a:e7:7b:7e:ca:75: 43:80:50:b4:0c:e6:cf:85:fe:a6:8a:af:bd:94:81: a7:8d:88:38:45:6a:a4:bd:7a:e0:e5:dd:42:00:de: 18:0c:48:8b:49:94:59:90:a5:28:14:93:e8:56:8d: 30:67:4e:46:37:2a:48:65:44:69:6c:1d:3f:5f:48: f3:56:9e:94:e1:86:7a:2a:79:e4:7a:1b:53:45:24: ab:ce:23:ff:5c:7c:ce:a3:30:9b:dc:98:d1:6b:66: 2a:18:da:a8:62:52:9f:98:83:0c:39:6a:d6:a6:e6: ab:5c:4c:ae:39:5e:ab:43:a0:db:28:45:c8:f2:bc: 13:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2C:4C:74:02:F5:BD:05:5F:01:C5:DB:FF:86:7A:CD:9D:CF:88:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/c02dd316-4f22-3bfd-a067-da3218dd31a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:fc:07:90:34:24:7e:5a:16:5b:5f:f3:ec:3f:11:98:63:47: f7:29:f9:7f:f9:09:10:9a:62:26:19:d1:fd:6b:dc:86:c2:b2: dc:22:fd:17:73:4b:90:13:b1:18:73:d6:ce:6e:93:31:eb:04: 9d:af:12:3e:26:1a:18:d5:e5:a0:a0:68:cf:ea:4b:ce:63:70: 74:9e:a3:9a:62:7c:91:12:ee:46:24:67:7b:52:3b:3b:f9:40: 7c:4a:51:4b:47:05:9a:06:00:95:89:ba:94:5f:62:7d:20:f1: 93:27:9a:be:a2:5d:10:1c:51:02:74:8c:b5:82:a5:c8:49:2b: e3:e5:ff:e0:ee:d7:35:ce:5b:ba:de:46:a2:e7:ae:9b:6c:58: 88:b9:32:86:4e:68:76:c8:d0:ef:e0:ac:1e:4a:bb:80:71:86: 86:83:5d:a1:27:ed:1d:1b:4e:e8:8b:4e:f3:af:76:1b:53:b0: bd:50:d1:ae:57:7a:b8:fb:92:e5:68:2f:4a:6e:6b:d6:12:4f: 8e:10:41:95:ca:1f:1c:a8:72:5d:bc:7e:97:98:e2:e9:1a:8a: 94:59:ef:f2:6b:29:e2:f6:a7:59:87:77:0a:e3:43:0e:fe:5a: f1:d5:69:e0:6a:14:85:c2:b6:70:dd:33:10:6b:35:0f:e3:1e: 1e:c4:02:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2IM7Hdhpu0e4QgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MjNlNzY5OWEtMGNmZC00MGJjLWI5NzEtNzY3ZGUzNWU3YzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCFx7m9Z66ICZN2TqYgw4/fb6huoDTcsAEDF agnY7IdNczSJRLBmA99q5BjC3xP/OhTLJL9bxuqfHNC7lRtUniyxtL3QIndMAjW3 MltFOu2c7VuR7pC9K9ho4Ov1vp94yVtZkJX/lZY+9JaJLs0O+iyPZeNg4fjXD3lz QS+zNU4a53t+ynVDgFC0DObPhf6miq+9lIGnjYg4RWqkvXrg5d1CAN4YDEiLSZRZ kKUoFJPoVo0wZ05GNypIZURpbB0/X0jzVp6U4YZ6KnnkehtTRSSrziP/XHzOozCb 3JjRa2YqGNqoYlKfmIMMOWrWpuarXEyuOV6rQ6DbKEXI8rwTwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcsTHQC9b0FXwHF2/+Ges2dz4hYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvYzAyZGQzMTYtNGYyMi0z YmZkLWEwNjctZGEzMjE4ZGQzMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX8B5A0JH5aFltf8+w/EZhjR/cp+X/5CRCaYiYZ0f1r3IbCstwi/Rdz S5ATsRhz1s5ukzHrBJ2vEj4mGhjV5aCgaM/qS85jcHSeo5pifJES7kYkZ3tSOzv5 QHxKUUtHBZoGAJWJupRfYn0g8ZMnmr6iXRAcUQJ0jLWCpchJK+Pl/+Du1zXOW7re RqLnrptsWIi5MoZOaHbI0O/grB5Ku4BxhoaDXaEn7R0bTuiLTvOvdhtTsL1Q0a5X erj7kuVoL0pua9YST44QQZXKHxyocl28fpeY4ukaipRZ7/JrKeL2p1mHdwrjQw7+ WvHVaeBqFIXCtnDdMxBrNQ/jHh7EAqU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:58:13 2025 by rpki-client