$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa File: d508a1f5-3140-32b0-b64e-df158da10677.roa (raw, json) Hash identifier: 2ENuJfayiTuC4RWcWZMGdeRK1m+rfzym40rEbiZzF64= Subject key identifier: 13:12:27:8D:99:5E:0B:A0:C8:3B:EB:EC:93:BB:FB:8C:1B:19:54:92 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584AE8912A35024C47EC18EB5100 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2a:35:02:4c:47:ec:18:eb:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=14484b73-90c6-4317-9c7c-61f1b05c6d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:35:5b:70:d2:d5:dc:8a:34:b0:00:6d:ee: 1c:f9:01:c9:3c:aa:b8:42:ec:3f:67:07:1a:09:da: 2a:2a:ec:bc:f5:40:06:32:16:9c:c0:ec:e0:60:7b: 08:1c:75:de:c5:74:9d:3a:69:fb:a2:45:1f:2f:78: 0e:8f:d2:4c:72:c7:2e:ba:86:36:25:94:5a:e8:cd: 76:bb:e0:24:4b:2f:b3:a2:49:06:01:ab:b5:2d:41: a7:d2:fe:2f:ef:8f:9d:40:c7:15:8a:45:a8:7e:f4: 6e:4e:af:e5:96:f6:9f:0b:89:b0:c8:d9:38:9c:3a: 30:4c:00:26:46:08:82:6f:0c:8d:26:d2:c7:62:d3: 3e:1c:3a:b9:56:73:29:79:15:ec:68:cd:34:d0:df: d8:77:92:32:65:70:8e:43:05:29:4a:a8:df:67:b3: de:7d:2c:79:dc:05:6d:ef:62:1e:2b:e0:97:23:51: d7:c8:2a:f9:5a:6c:93:b0:e1:02:e3:3c:63:fe:83: 37:89:51:22:b4:5e:19:fe:ec:f5:82:e9:6c:3e:a6: 90:f5:cf:43:37:07:66:37:3a:fd:84:6d:7f:35:3b: 7f:e0:ef:44:3d:71:07:d5:ca:f9:36:30:5d:bb:82: ac:e0:e0:d9:d3:44:18:61:47:bf:03:06:7d:cb:a7: ff:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:12:27:8D:99:5E:0B:A0:C8:3B:EB:EC:93:BB:FB:8C:1B:19:54:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ed:fb:c9:02:a3:d5:79:22:0c:07:e6:94:9d:e4:ef:b0:1f: ee:ff:3a:1a:ad:f6:97:6e:44:5f:48:4d:7b:38:6b:3d:df:34: ef:06:0a:83:43:82:68:e2:39:be:05:6f:06:6b:85:13:b2:a4: 07:4c:c0:18:b5:85:97:7e:42:98:31:2c:17:3f:51:76:48:6a: 3e:90:3a:d0:38:8c:14:85:a0:2c:19:6b:f4:3a:70:c7:5a:b8: 42:35:cf:cb:92:f5:78:32:25:0d:8b:8d:34:6a:48:74:5c:0f: 53:c3:7d:da:0a:8a:2a:a7:24:72:e3:20:d6:04:d1:f2:d9:f4: be:ff:3a:c2:d5:50:53:b3:9c:77:2d:16:52:7b:26:21:6d:ec: db:7a:84:89:70:77:4c:2b:68:f0:d5:fc:5a:ab:da:17:51:20: d4:29:48:f4:c2:01:79:d1:3b:a9:fc:20:20:39:b0:88:d6:de: 4c:73:ae:ff:08:6e:7f:37:5b:bd:5e:be:bb:9e:f3:a1:61:3f: 17:d9:12:d4:b0:e6:00:1a:f5:97:1d:f4:33:c7:44:22:66:51: 5c:db:ee:5a:22:7a:be:73:2e:9c:f4:f9:4b:b9:e9:0d:d2:e6: 74:de:1c:23:9d:22:6f:f2:7e:c9:f9:92:f4:47:00:d7:ca:27: 2f:7c:7d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSo1AkxH7BjrUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MTQ0ODRiNzMtOTBjNi00MzE3LTljN2MtNjFmMWIwNWM2ZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunI1W3DS1dyKNLAAbe4c+QHJPKq4Quw/Zwca CdoqKuy89UAGMhacwOzgYHsIHHXexXSdOmn7okUfL3gOj9JMcscuuoY2JZRa6M12 u+AkSy+zokkGAau1LUGn0v4v74+dQMcVikWofvRuTq/llvafC4mwyNk4nDowTAAm RgiCbwyNJtLHYtM+HDq5VnMpeRXsaM000N/Yd5IyZXCOQwUpSqjfZ7PefSx53AVt 72IeK+CXI1HXyCr5WmyTsOEC4zxj/oM3iVEitF4Z/uz1gulsPqaQ9c9DNwdmNzr9 hG1/NTt/4O9EPXEH1cr5NjBdu4Ks4ODZ00QYYUe/AwZ9y6f/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMSJ42ZXgugyDvr7JO7+4wbGVSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvZDUwOGExZjUtMzE0MC0z MmIwLWI2NGUtZGYxNThkYTEwNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHt+8kCo9V5IgwH5pSd5O+wH+7/Ohqt9pduRF9ITXs4az3fNO8GCoND gmjiOb4FbwZrhROypAdMwBi1hZd+QpgxLBc/UXZIaj6QOtA4jBSFoCwZa/Q6cMda uEI1z8uS9XgyJQ2LjTRqSHRcD1PDfdoKiiqnJHLjINYE0fLZ9L7/OsLVUFOznHct FlJ7JiFt7Nt6hIlwd0wraPDV/Fqr2hdRINQpSPTCAXnRO6n8ICA5sIjW3kxzrv8I bn83W71evrue86FhPxfZEtSw5gAa9Zcd9DPHRCJmUVzb7loier5zLpz0+Uu56Q3S 5nTeHCOdIm/yfsn5kvRHANfKJy98fVg= -----END CERTIFICATE-----Generated at Sat Aug 23 08:22:12 2025 by rpki-client