$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926/fd2788b6-982a-3487-aeac-c152692fac6a.roa File: fd2788b6-982a-3487-aeac-c152692fac6a.roa (raw, json) Hash identifier: AdqJh3b5iN2VzOk5sbZaD1CfBOn0mvmT2BsNS9x25Q8= Subject key identifier: 3F:75:FF:AB:65:2F:93:C2:09:A1:A9:79:63:EE:1C:A1:E8:A4:B8:47 Certificate issuer: /CN=12594156-95f0-4221-848a-fb9102de4926 Certificate serial: 010D0C9F4328584AD3A0F04A28C4691207C98780 Authority key identifier: 31:48:E7:4D:6A:BB:0E:32:3C:21:98:DF:21:F2:63:D2:3B:E2:8F:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926/fd2788b6-982a-3487-aeac-c152692fac6a.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 54144 IP address blocks: 199.21.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926/12594156-95f0-4221-848a-fb9102de4926.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926/12594156-95f0-4221-848a-fb9102de4926.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f0:4a:28:c4:69:12:07:c9:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12594156-95f0-4221-848a-fb9102de4926 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=1afa8a9f-63b4-45a5-8ab5-7f71f80d7119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7b:9f:94:10:e5:99:cc:57:9a:2c:5d:e6:51: af:3c:e7:d1:99:91:3d:8b:76:0d:66:c2:a8:b6:67: f8:ef:38:3d:71:10:ad:e3:95:f5:c8:f4:f4:ce:89: 2f:54:a9:04:3e:82:24:28:94:70:59:06:67:24:8a: f3:16:8e:95:5e:25:0c:e3:61:f0:ba:78:33:0a:3d: c3:1c:71:5f:ea:74:93:01:20:4e:ac:28:5f:8f:e1: 84:1c:52:84:2f:fe:8f:c9:8a:40:40:5a:17:2e:47: a1:73:84:33:7e:39:e2:c7:3d:f0:b5:bc:3b:62:86: 34:fc:fd:50:f4:ce:08:d7:6f:e3:90:21:ed:0a:96: 56:18:f7:3d:18:b4:ee:f8:23:c0:40:29:58:ce:67: 79:4d:45:9f:ea:57:cf:59:58:b4:61:5a:40:7a:51: c9:50:c3:a6:e7:4a:10:f2:0d:de:f6:69:9b:78:8a: 30:02:4f:88:82:f9:28:bf:f9:c0:08:8e:68:1d:93: 25:cf:3c:13:e4:d8:d5:d6:9e:8d:56:84:0b:68:de: 89:f7:b1:c4:21:20:31:7c:1e:b2:21:06:b6:c8:40: 22:8a:ab:56:cd:ac:85:f4:0e:04:c7:a6:7a:94:7c: 08:aa:9f:88:a2:1d:a7:59:f8:a9:69:b5:20:3a:d0: 9d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:75:FF:AB:65:2F:93:C2:09:A1:A9:79:63:EE:1C:A1:E8:A4:B8:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926/fd2788b6-982a-3487-aeac-c152692fac6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926/12594156-95f0-4221-848a-fb9102de4926.crl X509v3 Authority Key Identifier: keyid:31:48:E7:4D:6A:BB:0E:32:3C:21:98:DF:21:F2:63:D2:3B:E2:8F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12594156-95f0-4221-848a-fb9102de4926.cer sbgp-ipAddrBlock: critical IPv4: 199.21.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8a:ad:6e:26:57:00:a9:19:7c:06:b6:bd:35:fe:f3:8f:19: d0:1e:d6:8d:35:9b:de:72:01:14:09:97:69:41:dd:ab:17:7c: 10:cd:8a:58:fa:39:bd:5f:15:4b:f2:36:98:bf:14:8b:5e:90: 28:4b:bc:06:88:d9:c4:0c:79:fa:dd:35:a0:af:1e:b3:74:53: 97:db:4d:6e:23:d8:e7:75:5b:00:10:f0:82:b8:1e:e5:80:61: 60:b8:50:5a:c8:21:29:a1:3f:9e:19:82:7b:22:d9:13:13:97: 2d:32:11:f1:f6:bf:58:7a:57:07:69:60:07:33:ef:bf:61:2e: 36:15:7c:1c:91:2d:54:bc:24:ef:6a:de:9f:84:ca:ad:18:3c: a2:5c:d7:76:12:f1:74:29:96:5c:0f:c4:85:a6:bd:f0:95:48: 09:b5:70:90:f6:d4:f9:b5:43:58:b6:ec:4a:6d:b5:e1:fd:77: 39:dc:65:18:35:2e:24:4b:2a:f2:39:f7:6f:cd:f9:9b:a8:32: e3:0b:6a:68:5e:0a:59:09:0b:c2:7b:fa:25:92:f0:fd:e9:5e: 7a:08:16:6a:da:1d:0f:4b:ee:1f:21:1f:c4:a0:99:6c:06:6c: 12:09:14:7f:18:77:c2:46:e6:56:8f:a4:62:6b:2e:5c:dd:bc: b4:15:b5:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPBKKMRpEgfJh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI1OTQxNTYtOTVmMC00MjIxLTg0OGEtZmI5MTAyZGU0 OTI2MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MWFmYThhOWYtNjNiNC00NWE1LThhYjUtN2Y3MWY4MGQ3MTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnuflBDlmcxXmixd5lGvPOfRmZE9i3YNZsKo tmf47zg9cRCt45X1yPT0zokvVKkEPoIkKJRwWQZnJIrzFo6VXiUM42HwungzCj3D HHFf6nSTASBOrChfj+GEHFKEL/6PyYpAQFoXLkehc4Qzfjnixz3wtbw7YoY0/P1Q 9M4I12/jkCHtCpZWGPc9GLTu+CPAQClYzmd5TUWf6lfPWVi0YVpAelHJUMOm50oQ 8g3e9mmbeIowAk+Igvkov/nACI5oHZMlzzwT5NjV1p6NVoQLaN6J97HEISAxfB6y IQa2yEAiiqtWzayF9A4Ex6Z6lHwIqp+Ioh2nWfipabUgOtCdMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD91/6tlL5PCCaGpeWPuHKHopLhHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjU5 NDE1Ni05NWYwLTQyMjEtODQ4YS1mYjkxMDJkZTQ5MjYvZmQyNzg4YjYtOTgyYS0z NDg3LWFlYWMtYzE1MjY5MmZhYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI1OTQxNTYtOTVmMC00MjIxLTg0 OGEtZmI5MTAyZGU0OTI2LzEyNTk0MTU2LTk1ZjAtNDIyMS04NDhhLWZiOTEwMmRl NDkyNi5jcmwwHwYDVR0jBBgwFoAUMUjnTWq7DjI8IZjfIfJj0jvij0EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjU5NDE1Ni05NWYwLTQyMjEtODQ4YS1mYjkx MDJkZTQ5MjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxV0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmKrW4mVwCpGXwGtr01/vOPGdAe1o01m95yARQJl2lB3asXfBDNilj6 Ob1fFUvyNpi/FItekChLvAaI2cQMefrdNaCvHrN0U5fbTW4j2Od1WwAQ8IK4HuWA YWC4UFrIISmhP54Zgnsi2RMTly0yEfH2v1h6VwdpYAcz779hLjYVfByRLVS8JO9q 3p+Eyq0YPKJc13YS8XQpllwPxIWmvfCVSAm1cJD21Pm1Q1i27EptteH9dzncZRg1 LiRLKvI592/N+ZuoMuMLamheClkJC8J7+iWS8P3pXnoIFmraHQ9L7h8hH8SgmWwG bBIJFH8Yd8JG5laPpGJrLlzdvLQVtdI= -----END CERTIFICATE-----Generated at Thu Aug 21 01:36:36 2025 by rpki-client