$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/66ef9f87-9358-351d-bb50-144bab816b93.roa File: 66ef9f87-9358-351d-bb50-144bab816b93.roa (raw, json) Hash identifier: tWyJ9vAPVWBmwgIYh2/hvTol6VbhbMXW7Nw1NfUwlCI= Subject key identifier: 94:24:CE:7A:0E:2F:59:D6:64:EB:A3:E1:0A:32:A0:DE:44:D9:8A:30 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584A7A4B30EC65FD4E6A76272A57 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/66ef9f87-9358-351d-bb50-144bab816b93.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 396982 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:30:ec:65:fd:4e:6a:76:27:2a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=66e45935-9a62-4cde-9b53-aeffd0bed7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:52:eb:ee:cb:58:1b:6b:16:02:31:4f:d2: 58:fe:95:e4:63:5d:1a:01:64:7d:cf:d4:fd:33:6b: fa:f5:f1:29:c8:0d:c9:88:b3:ff:f9:99:b6:1d:84: cf:88:f0:4c:f0:94:10:2c:92:35:d3:b1:9a:66:d3: 0f:7f:21:0c:6a:2d:82:ad:7a:e7:59:b3:5d:b8:e0: 33:69:a7:a4:d8:05:0b:15:0f:d4:8a:14:9e:52:5b: 86:2e:1b:1b:c1:7f:ab:b5:f6:4b:64:78:50:97:62: d8:15:eb:e8:fe:4e:ea:58:7c:54:12:8e:1e:74:aa: b8:2f:90:5a:40:02:f4:e5:67:1a:ce:ba:a8:d8:ad: 30:7c:f5:a6:25:b8:78:6c:87:41:03:f8:b3:09:67: 76:87:79:b8:56:7d:4b:bc:cb:ff:37:73:2b:98:fa: 38:14:ef:81:6c:97:ac:81:6c:0e:1e:cc:3a:26:87: de:3c:56:fb:39:fd:66:f2:db:5a:79:94:34:17:e8: da:fe:e8:40:79:d5:84:a8:eb:91:47:dd:74:17:8e: 12:77:e5:82:8a:7e:6e:3e:73:df:a6:46:c6:6f:8d: 0c:44:28:f8:32:7d:f8:30:8d:e4:49:aa:7b:cd:8c: 0c:94:7d:67:21:af:78:fe:f9:dc:88:fc:b5:91:bb: da:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:24:CE:7A:0E:2F:59:D6:64:EB:A3:E1:0A:32:A0:DE:44:D9:8A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/66ef9f87-9358-351d-bb50-144bab816b93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:43:56:53:6e:3b:96:01:93:dd:e1:dc:d9:c4:ab:0e:e1:0d: ff:a6:65:8b:b9:3c:1b:f7:0a:f6:bf:06:37:b8:97:eb:3c:4e: 01:59:4a:49:5c:cf:ab:f3:f1:93:bf:84:67:9b:67:92:cc:94: 15:68:4b:ad:32:5b:60:55:7f:f3:4e:8b:78:d3:4a:24:5b:29: f7:d9:75:6e:e5:53:0e:b2:06:53:25:f1:4a:52:3c:14:70:2a: 8c:5d:17:7d:8c:9c:4f:e7:58:59:66:cd:4a:a9:cf:69:09:ba: e0:98:33:c0:88:f5:ac:af:de:b1:52:2e:40:30:be:cd:2f:33: d5:7c:9b:ce:57:b9:38:11:fd:3b:9f:77:d3:f9:0d:0d:19:6d: 73:d6:1b:49:58:46:13:a9:be:d1:ea:90:33:8e:4e:b7:e4:1c: b6:e9:98:86:d0:46:86:ae:aa:09:b2:2c:99:18:b5:96:b5:1a: f6:64:bb:b3:bb:83:50:f7:16:60:88:37:a7:70:4d:a3:e8:16: 6b:0f:7c:45:bd:ec:06:4a:a3:63:90:79:a0:b2:86:86:c7:0f: 22:f5:cb:80:2b:5d:d8:5c:68:53:61:17:ca:9b:f0:9d:00:5c: 2d:a3:d4:36:c6:05:3e:9c:0b:3c:f9:a9:89:9f:b2:8b:44:83: 4c:27:ef:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzDsZf1OanYnKlcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NjZlNDU5MzUtOWE2Mi00Y2RlLTliNTMtYWVmZmQwYmVkN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU9S6+7LWBtrFgIxT9JY/pXkY10aAWR9z9T9 M2v69fEpyA3JiLP/+Zm2HYTPiPBM8JQQLJI107GaZtMPfyEMai2CrXrnWbNduOAz aaek2AULFQ/UihSeUluGLhsbwX+rtfZLZHhQl2LYFevo/k7qWHxUEo4edKq4L5Ba QAL05Wcazrqo2K0wfPWmJbh4bIdBA/izCWd2h3m4Vn1LvMv/N3MrmPo4FO+BbJes gWwOHsw6JofePFb7Of1m8ttaeZQ0F+ja/uhAedWEqOuRR910F44Sd+WCin5uPnPf pkbGb40MRCj4Mn34MI3kSap7zYwMlH1nIa94/vnciPy1kbvamwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQkznoOL1nWZOuj4QoyoN5E2YowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvNjZlZjlmODctOTM1OC0z NTFkLWJiNTAtMTQ0YmFiODE2YjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtDVlNuO5YBk93h3NnEqw7hDf+mZYu5PBv3Cva/Bje4l+s8TgFZSklc z6vz8ZO/hGebZ5LMlBVoS60yW2BVf/NOi3jTSiRbKffZdW7lUw6yBlMl8UpSPBRw KoxdF32MnE/nWFlmzUqpz2kJuuCYM8CI9ayv3rFSLkAwvs0vM9V8m85XuTgR/Tuf d9P5DQ0ZbXPWG0lYRhOpvtHqkDOOTrfkHLbpmIbQRoauqgmyLJkYtZa1GvZku7O7 g1D3FmCIN6dwTaPoFmsPfEW97AZKo2OQeaCyhobHDyL1y4ArXdhcaFNhF8qb8J0A XC2j1DbGBT6cCzz5qYmfsotEg0wn720= -----END CERTIFICATE-----Generated at Mon Jul 21 12:49:58 2025 by rpki-client