$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa File: e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa (raw, json) Hash identifier: ANs0JkzyAs94locFA5Y7ZiunDyO74OaG7Kj26KdLfyo= Subject key identifier: 41:2D:4D:64:2B:66:C2:53:0E:B9:96:C6:1D:5B:E4:E3:95:FC:F3:18 Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F4328584A7FE094AA1F60FD9CD9760240 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 8987 IP address blocks: 198.151.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:94:aa:1f:60:fd:9c:d9:76:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=3b56335b-ea69-42dc-820a-5415f1468fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7a:08:2b:ab:53:50:74:12:dc:c7:f0:92:06: 70:6d:97:16:8d:5e:3d:8a:32:b7:c6:b1:18:fc:cb: 34:bb:8b:e0:0e:e5:59:83:4c:7c:d1:f4:73:c5:66: 11:37:25:c0:1c:d7:71:ed:a6:e0:e7:8b:9e:b1:51: de:94:c9:9a:40:c0:c2:d0:be:d6:49:f9:8a:ee:af: 3f:16:22:59:00:ad:d4:ae:e4:83:24:58:36:d3:8c: 3c:64:41:47:fc:5d:96:8e:be:40:09:3e:3b:cd:3c: c9:12:48:30:99:c8:e1:03:f5:52:60:e3:cf:6f:17: aa:95:01:d0:89:ee:1a:7e:16:72:40:96:b1:46:db: fd:17:07:d5:84:6c:0f:36:34:09:b5:8b:87:ed:c1: c1:48:8c:db:b2:c7:87:54:20:a1:c0:81:0a:aa:d2: f0:6a:c0:ff:e7:42:f3:8b:93:1c:35:4f:6c:08:dd: 4f:d4:51:87:82:af:66:0d:f5:ff:ff:43:e1:dd:4a: 85:51:54:a0:a8:12:9f:8e:3a:fd:a0:1b:f1:4e:b2: 5b:76:b9:e3:a2:dc:a0:ed:e1:60:4a:41:91:36:9a: ce:10:ca:e9:74:dc:05:ad:3f:98:1e:22:e2:ba:0f: f8:da:d0:57:f0:8f:7f:37:79:a2:0f:ec:ad:d9:6a: 2a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2D:4D:64:2B:66:C2:53:0E:B9:96:C6:1D:5B:E4:E3:95:FC:F3:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 198.151.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:66:7a:35:ca:56:8d:29:b6:50:02:4f:cf:6e:cf:7d:99:e1: da:13:88:22:27:85:65:23:66:ef:de:34:2d:00:8e:c5:d2:7b: 2c:a6:28:d0:ca:80:35:97:99:90:f6:ad:06:1e:7f:56:f9:1b: e7:16:81:89:fb:1e:8c:3a:7b:35:e5:50:60:4f:87:7e:57:6b: 5b:b0:0e:b7:2b:e6:82:e7:18:d2:e6:fd:b8:88:5a:f2:e1:e5: 49:4c:1d:15:2e:9d:1a:4c:54:e1:80:da:83:98:61:28:c1:0a: 09:17:f1:f5:88:5b:1b:70:0a:7b:2e:30:c2:d7:f9:83:16:86: 91:c0:ea:8d:c7:31:94:c0:7c:3f:35:12:3e:4e:b8:02:02:b8: b6:3a:37:27:e7:fb:b6:03:54:25:30:41:f9:df:ac:a2:76:f2: 5c:e1:d3:c1:2f:83:9c:e4:a8:60:63:68:1b:cd:3d:c3:73:5a: 89:19:8b:29:7e:e9:e6:3b:98:fe:bc:d0:2a:89:81:f1:db:99: 07:48:d9:a0:74:ff:de:09:3b:02:82:1b:d5:8b:29:ac:06:c3: e4:64:39:69:75:1a:b7:fc:8d:d4:28:cf:8a:8f:8f:d9:92:87: 08:2d:ed:ea:44:1c:6c:bb:5c:7c:f9:85:a4:26:14:ec:cf:d9: a1:36:a7:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JSqH2D9nNl2AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk M2I1NjMzNWItZWE2OS00MmRjLTgyMGEtNTQxNWYxNDY4ZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnoIK6tTUHQS3MfwkgZwbZcWjV49ijK3xrEY /Ms0u4vgDuVZg0x80fRzxWYRNyXAHNdx7abg54uesVHelMmaQMDC0L7WSfmK7q8/ FiJZAK3UruSDJFg204w8ZEFH/F2Wjr5ACT47zTzJEkgwmcjhA/VSYOPPbxeqlQHQ ie4afhZyQJaxRtv9FwfVhGwPNjQJtYuH7cHBSIzbsseHVCChwIEKqtLwasD/50Lz i5McNU9sCN1P1FGHgq9mDfX//0Ph3UqFUVSgqBKfjjr9oBvxTrJbdrnjotyg7eFg SkGRNprOEMrpdNwFrT+YHiLiug/42tBX8I9/N3miD+yt2WoqRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEtTWQrZsJTDrmWxh1b5OOV/PMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvZTRhY2FhNmEtOWIyMi0z NjVlLWE3ZDAtYThhNGRlMmU3NWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxpcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBmejXKVo0ptlACT89uz32Z4doTiCInhWUjZu/eNC0AjsXSeyymKNDK gDWXmZD2rQYef1b5G+cWgYn7How6ezXlUGBPh35Xa1uwDrcr5oLnGNLm/biIWvLh 5UlMHRUunRpMVOGA2oOYYSjBCgkX8fWIWxtwCnsuMMLX+YMWhpHA6o3HMZTAfD81 Ej5OuAICuLY6Nyfn+7YDVCUwQfnfrKJ28lzh08Evg5zkqGBjaBvNPcNzWokZiyl+ 6eY7mP680CqJgfHbmQdI2aB0/94JOwKCG9WLKawGw+RkOWl1Grf8jdQoz4qPj9mS hwgt7epEHGy7XHz5haQmFOzP2aE2p9k= -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:48 2025 by rpki-client