$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa File: d508a1f5-3140-32b0-b64e-df158da10677.roa (raw, json) Hash identifier: hLG5GDrMytn8hbeBtJeL9ayEcqX2clMiLq85U1fJSCg= Subject key identifier: 3D:17:79:7F:7F:6B:91:2D:65:2A:C4:3B:66:55:4E:54:66:60:43:55 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584BC96AEB46E56040D1F0735DB0 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 16509 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6a:eb:46:e5:60:40:d1:f0:73:5d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=66ec2ea7-0854-443a-b7c1-b2b4eaf61e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:3f:7b:73:7f:11:65:34:c1:d5:48:4a:0b: 14:35:91:79:f2:f1:28:4b:72:49:ac:02:ed:02:71: a2:28:0e:d3:75:4f:f7:12:d7:a5:ca:9d:a2:36:02: 6e:50:5e:d7:57:93:b2:53:9a:24:7d:f1:f4:ef:f5: ba:12:c1:f1:6c:07:38:73:71:ba:49:9f:db:78:01: 94:e3:ef:df:a4:9a:1c:11:19:88:1c:ca:6e:48:aa: 51:ff:b1:5b:fa:09:3e:57:5f:60:a4:c3:c0:f0:9c: 32:a5:5b:57:c2:83:3d:41:23:7c:20:3c:f8:84:de: bc:8f:b4:b1:9f:44:6a:e9:c8:cd:54:ff:c2:5c:b9: 68:d0:4b:4c:05:e2:4c:42:3d:bd:bc:6e:f5:4d:b2: be:ac:1f:5d:55:0b:13:79:d2:36:e1:1a:e4:07:01: 59:1b:5d:5e:1e:c8:52:af:48:97:97:4a:a6:14:fc: 1e:fe:ec:b1:25:d0:bb:80:2d:56:20:62:8c:0e:89: 81:38:a2:81:9f:a6:0d:1c:ae:41:1a:61:b0:c6:02: 83:6d:e2:a3:da:b3:b1:3c:63:99:87:af:17:9f:71: c9:bb:f3:44:43:0c:97:82:0d:1c:23:46:92:10:b1: a0:d9:2f:6d:72:d3:36:ad:f0:7c:f3:48:ec:7d:57: 83:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:17:79:7F:7F:6B:91:2D:65:2A:C4:3B:66:55:4E:54:66:60:43:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b0:9d:31:e0:f4:26:b3:7d:91:8b:bf:28:2e:09:57:48:c4: 13:e7:fe:d4:d7:76:30:b6:b1:06:10:55:dc:60:15:0d:34:22: ac:90:f8:a6:e5:93:79:9d:be:4c:27:fd:e9:f5:74:76:33:46: 93:ee:55:c6:dd:b3:e7:f8:87:0f:5b:c9:f7:a8:6a:6f:ea:e4: 31:fb:f9:58:4e:ee:3e:59:57:61:55:3c:2f:40:f4:b7:9e:37: 3f:33:32:31:32:ca:6c:b4:08:fa:24:d2:ae:8b:02:fe:8a:70: dc:32:0f:78:6b:86:96:2a:cb:43:91:46:bf:5f:b2:eb:0c:cd: 83:6e:06:a3:ab:e1:cc:4d:9a:35:df:95:88:a4:64:18:bf:0c: 32:54:34:58:c3:00:18:81:e8:39:10:7a:69:e6:d8:91:93:54: 0b:72:50:da:17:c6:5a:be:2b:26:84:69:0d:75:9d:34:b5:73: e5:8a:8a:f1:e4:a9:93:92:c0:ad:44:5d:67:4c:ec:b6:06:45: 5c:3e:da:f5:1a:b6:35:71:c0:7b:90:ae:fd:9a:90:1d:da:21: b1:d4:7b:a8:78:13:85:a3:26:11:cc:9e:9e:9e:d5:7c:de:11: a1:c3:e1:8e:99:2b:9d:1a:1d:61:3c:39:16:c2:6b:a2:b6:3f: 66:77:85:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvJautG5WBA0fBzXbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk NjZlYzJlYTctMDg1NC00NDNhLWI3YzEtYjJiNGVhZjYxZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4w/e3N/EWU0wdVISgsUNZF58vEoS3JJrALt AnGiKA7TdU/3Etelyp2iNgJuUF7XV5OyU5okffH07/W6EsHxbAc4c3G6SZ/beAGU 4+/fpJocERmIHMpuSKpR/7Fb+gk+V19gpMPA8JwypVtXwoM9QSN8IDz4hN68j7Sx n0Rq6cjNVP/CXLlo0EtMBeJMQj29vG71TbK+rB9dVQsTedI24RrkBwFZG11eHshS r0iXl0qmFPwe/uyxJdC7gC1WIGKMDomBOKKBn6YNHK5BGmGwxgKDbeKj2rOxPGOZ h68Xn3HJu/NEQwyXgg0cI0aSELGg2S9tctM2rfB880jsfVeDJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0XeX9/a5EtZSrEO2ZVTlRmYENVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvZDUwOGExZjUtMzE0MC0z MmIwLWI2NGUtZGYxNThkYTEwNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKwnTHg9CazfZGLvyguCVdIxBPn/tTXdjC2sQYQVdxgFQ00IqyQ+Kbl k3mdvkwn/en1dHYzRpPuVcbds+f4hw9byfeoam/q5DH7+VhO7j5ZV2FVPC9A9Lee Nz8zMjEyymy0CPok0q6LAv6KcNwyD3hrhpYqy0ORRr9fsusMzYNuBqOr4cxNmjXf lYikZBi/DDJUNFjDABiB6DkQemnm2JGTVAtyUNoXxlq+KyaEaQ11nTS1c+WKivHk qZOSwK1EXWdM7LYGRVw+2vUatjVxwHuQrv2akB3aIbHUe6h4E4WjJhHMnp6e1Xze EaHD4Y6ZK50aHWE8ORbCa6K2P2Z3hQQ= -----END CERTIFICATE-----Generated at Tue Nov 18 09:36:49 2025 by rpki-client