$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/a2a5412a-3648-378f-aff7-c7d443d07c08.roa File: a2a5412a-3648-378f-aff7-c7d443d07c08.roa (raw, json) Hash identifier: +57VrhQlXpkZEnRnuZS7X9Jjf/KPFUoo3JUQYNr1dXg= Subject key identifier: C2:F4:A9:F9:2A:11:8D:DC:2A:A6:22:6B:D7:F7:D3:09:1E:A4:63:D0 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584AE89135212C30FC15F3717E80 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/a2a5412a-3648-378f-aff7-c7d443d07c08.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 3320 IP address blocks: 81.199.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:35:21:2c:30:fc:15:f3:71:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=2f5974eb-39fc-43d3-a8c7-ce49dcdd907b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dc:75:a6:cc:0c:ee:c1:a1:ab:38:11:4d:e2: 7e:3a:ae:32:9f:ac:8b:f1:5b:11:43:f7:1b:13:4f: c6:c4:e2:fa:ba:13:a6:ca:62:44:52:47:e9:1d:8c: 9e:fa:a8:4c:f7:71:d1:e1:f3:a4:a7:fa:5b:37:e4: b7:28:29:5f:ad:f8:86:d2:e0:b2:e5:cc:2f:08:83: 2c:f2:cd:ea:57:04:db:43:24:d7:ae:3f:0f:d7:5a: 32:22:e7:64:0f:55:5c:8f:40:3b:9e:51:67:17:c2: f4:90:b8:c6:3e:13:ae:2f:59:e8:9b:1c:1a:2f:24: aa:c2:c6:0d:b0:12:21:32:3d:78:0d:60:6c:33:b9: 2b:d8:c1:8c:43:4e:0e:42:e2:66:41:21:73:6e:96: 75:e2:be:1f:59:3b:ff:40:ca:2d:bc:9e:8d:74:90: bc:1a:60:8b:b4:06:6d:bf:c8:cf:11:0c:07:55:1c: 6a:4c:0e:00:d9:d3:2a:63:c0:4a:d6:bc:01:7a:42: f5:73:91:6e:c3:d2:be:d2:58:1a:0e:ff:bd:bc:cc: 8f:b7:75:a0:8a:49:bf:dd:e0:07:e1:18:7e:6b:46: 09:8b:5e:5a:8b:7b:04:22:70:5c:90:de:fd:db:72: 03:fb:20:86:19:3c:14:52:25:6f:82:1e:a2:33:b6: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F4:A9:F9:2A:11:8D:DC:2A:A6:22:6B:D7:F7:D3:09:1E:A4:63:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/a2a5412a-3648-378f-aff7-c7d443d07c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f8:4d:bb:7c:a5:19:3e:32:31:85:9f:7f:c6:f4:70:15:c1: 8f:01:b1:11:6c:d5:2f:78:00:8c:13:f6:65:dd:89:2a:37:83: 03:d4:ff:39:44:30:b5:17:18:06:be:97:6b:c3:2f:b6:50:24: 57:14:29:6d:64:a0:79:a4:41:a0:14:2d:8c:9f:aa:5b:e5:0d: 0f:4b:6b:b5:44:c3:f6:70:94:99:9f:a9:1c:dd:a3:38:d4:93: 82:70:30:2a:89:99:85:1b:b6:5f:0c:13:eb:30:83:d7:90:8d: 76:29:2e:a4:b1:08:67:91:e9:a8:3f:ff:b9:32:11:1d:44:6b: 47:36:65:fb:38:28:24:c4:71:f2:05:14:7a:8a:7f:8b:76:4a: 96:0c:0d:e3:83:ba:bd:6e:2f:37:6d:a1:d3:2a:68:c9:1f:b3: 71:41:d5:c8:3d:2b:de:79:f6:d0:03:99:79:35:a0:f8:f0:b1: a9:1a:04:55:c8:c0:89:67:7d:1f:d1:bd:1a:35:58:f0:58:f6: b0:44:c1:69:f6:83:a1:3e:43:40:55:9c:64:bf:03:a1:9e:31: dd:be:6d:3f:3d:c0:cd:44:77:67:74:08:8a:e8:f3:b8:f1:69: 35:09:c7:5e:31:20:ce:c9:a4:6b:fa:16:93:a7:21:37:1e:22: 72:34:62:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTUhLDD8FfNxfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MmY1OTc0ZWItMzlmYy00M2QzLWE4YzctY2U0OWRjZGQ5MDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dx1pswM7sGhqzgRTeJ+Oq4yn6yL8VsRQ/cb E0/GxOL6uhOmymJEUkfpHYye+qhM93HR4fOkp/pbN+S3KClfrfiG0uCy5cwvCIMs 8s3qVwTbQyTXrj8P11oyIudkD1Vcj0A7nlFnF8L0kLjGPhOuL1nomxwaLySqwsYN sBIhMj14DWBsM7kr2MGMQ04OQuJmQSFzbpZ14r4fWTv/QMotvJ6NdJC8GmCLtAZt v8jPEQwHVRxqTA4A2dMqY8BK1rwBekL1c5Fuw9K+0lgaDv+9vMyPt3Wgikm/3eAH 4Rh+a0YJi15ai3sEInBckN7923ID+yCGGTwUUiVvgh6iM7YajwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFML0qfkqEY3cKqYia9f30wkepGPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvYTJhNTQxMmEtMzY0OC0z NzhmLWFmZjctYzdkNDQzZDA3YzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUcdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb4Tbt8pRk+MjGFn3/G9HAVwY8BsRFs1S94AIwT9mXdiSo3gwPU/zlE MLUXGAa+l2vDL7ZQJFcUKW1koHmkQaAULYyfqlvlDQ9La7VEw/ZwlJmfqRzdozjU k4JwMCqJmYUbtl8ME+swg9eQjXYpLqSxCGeR6ag//7kyER1Ea0c2Zfs4KCTEcfIF FHqKf4t2SpYMDeODur1uLzdtodMqaMkfs3FB1cg9K9559tADmXk1oPjwsakaBFXI wIlnfR/RvRo1WPBY9rBEwWn2g6E+Q0BVnGS/A6GeMd2+bT89wM1Ed2d0CIro87jx aTUJx14xIM7JpGv6FpOnITceInI0Yms= -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:44 2025 by rpki-client