$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa File: 0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa (raw, json) Hash identifier: Mxy7HQMiXaowogFJBQijmsCFgy0U9d8T876F30IDDoI= Subject key identifier: CB:A0:C9:14:DE:C8:66:AA:9B:0C:C1:74:E8:C2:2D:38:38:1E:F8:0C Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F4328584B21CC2CE2998E2912CC973F00 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 8987 IP address blocks: 198.22.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2c:e2:99:8e:29:12:cc:97:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=42ae3adb-2ab8-40ea-973b-716a34af534d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e0:6e:a2:47:a8:de:df:2a:a2:4e:ee:73:3c: 87:23:ad:99:48:82:16:93:fc:6f:b6:6f:1b:f4:91: 61:d6:a0:24:4d:85:ce:a1:d7:3c:5e:3a:e4:a2:4b: 81:bb:9a:e2:db:07:26:56:a0:2d:8e:7e:5f:70:12: 13:aa:3e:43:a3:c7:68:20:97:06:2a:d1:10:df:1d: ef:e1:79:47:b0:a7:2b:9b:86:45:34:df:d3:0f:65: 15:71:04:66:ae:aa:87:db:1c:40:3f:e9:59:ca:5f: 98:5e:fc:99:16:4e:8f:a1:7c:95:f2:2e:1a:46:81: ef:67:46:b4:36:2e:9d:7f:49:8b:03:b7:29:47:49: 70:8e:66:e8:2d:1a:e1:33:52:75:f4:a7:fa:cc:71: b8:d8:2f:33:f2:56:8c:70:1f:ca:ca:08:f0:74:e1: 1d:4b:d3:13:f4:14:45:e1:9a:95:f9:1f:00:2d:27: e7:20:8a:61:8a:31:b0:4b:81:07:cc:6c:5d:34:a7: e8:4b:63:ac:fb:9e:7c:04:7e:db:e5:d2:aa:45:14: e0:66:93:64:41:7d:3b:44:f9:3c:1d:2d:58:f2:54: 15:41:0b:db:7a:2e:01:51:c4:80:42:fd:55:72:30: 50:2d:3f:af:0e:fe:78:8f:98:d7:69:8a:9a:81:08: d7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A0:C9:14:DE:C8:66:AA:9B:0C:C1:74:E8:C2:2D:38:38:1E:F8:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 198.22.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d5:1e:3e:c4:c3:d7:cd:37:23:5a:bc:5b:a6:83:35:0a:e0: 12:e0:f3:0e:9b:0c:1b:21:21:d1:43:82:27:ec:3a:fc:a5:58: 3a:ed:96:04:c8:64:7c:09:18:f4:7f:46:17:e4:e2:69:a0:d1: 0a:6d:2d:bc:f1:64:48:90:82:52:40:90:b9:af:42:93:7e:52: 8e:67:2e:34:62:b4:f5:80:b5:24:74:45:e3:d5:45:fd:ca:1b: 03:ec:e7:68:83:49:61:52:93:d3:05:fa:f0:e3:cf:20:54:e1: 6c:8d:7c:15:7d:00:4a:4c:f6:52:00:c3:b8:38:51:cc:49:10: 02:c0:ac:b9:c9:73:5b:8f:f6:f3:6b:93:50:a9:1c:43:2a:17: e9:1e:aa:1d:9c:25:a6:0d:6a:7e:b3:9f:29:90:83:e4:c0:cb: 96:cd:d9:59:60:73:6e:1a:23:35:3f:61:c9:7b:88:53:8f:ca: d7:4f:3d:62:4b:aa:bb:a7:9c:a3:29:25:07:cb:b1:b7:a0:f5: 20:b2:1a:a0:9a:31:37:8e:5a:35:c9:f0:90:a4:80:87:83:0f: fd:11:c7:45:cb:df:5f:e6:ba:dd:85:42:73:56:44:05:5b:9b: 74:ac:20:43:a1:e9:35:e3:97:9c:13:36:89:7e:e2:b6:e8:ed: f6:b1:34:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCzimY4pEsyXPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NDJhZTNhZGItMmFiOC00MGVhLTk3M2ItNzE2YTM0YWY1MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+Buokeo3t8qok7uczyHI62ZSIIWk/xvtm8b 9JFh1qAkTYXOodc8XjrkokuBu5ri2wcmVqAtjn5fcBITqj5Do8doIJcGKtEQ3x3v 4XlHsKcrm4ZFNN/TD2UVcQRmrqqH2xxAP+lZyl+YXvyZFk6PoXyV8i4aRoHvZ0a0 Ni6df0mLA7cpR0lwjmboLRrhM1J19Kf6zHG42C8z8laMcB/KygjwdOEdS9MT9BRF 4ZqV+R8ALSfnIIphijGwS4EHzGxdNKfoS2Os+558BH7b5dKqRRTgZpNkQX07RPk8 HS1Y8lQVQQvbei4BUcSAQv1VcjBQLT+vDv54j5jXaYqagQjXBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMugyRTeyGaqmwzBdOjCLTg4HvgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvMGRkYTc4MTAtNzU0MS0z OWMxLTk1YWQtOWNmOTJlNmU1OGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXVHj7Ew9fNNyNavFumgzUK4BLg8w6bDBshIdFDgifsOvylWDrtlgTI ZHwJGPR/Rhfk4mmg0QptLbzxZEiQglJAkLmvQpN+Uo5nLjRitPWAtSR0RePVRf3K GwPs52iDSWFSk9MF+vDjzyBU4WyNfBV9AEpM9lIAw7g4UcxJEALArLnJc1uP9vNr k1CpHEMqF+keqh2cJaYNan6znymQg+TAy5bN2Vlgc24aIzU/Ycl7iFOPytdPPWJL qrunnKMpJQfLsbeg9SCyGqCaMTeOWjXJ8JCkgIeDD/0Rx0XL31/mut2FQnNWRAVb m3SsIEOh6TXjl5wTNol+4rbo7faxNDY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:59 2025 by rpki-client