$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bd66d5a9-c9ec-3258-a868-cb9f47a6bbda.roa File: bd66d5a9-c9ec-3258-a868-cb9f47a6bbda.roa (raw, json) Hash identifier: vnnfvBko7vZY07uY4An5ab1IT9UQcT7nTdl+3a3lPks= Subject key identifier: DE:FF:DB:E4:D4:C4:4A:40:5D:32:28:62:5E:C4:DC:E0:F1:61:62:59 Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F4328584B5B074106559559419BF670C0 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bd66d5a9-c9ec-3258-a868-cb9f47a6bbda.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 188 IP address blocks: 198.22.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:41:06:55:95:59:41:9b:f6:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=ced2d08c-d60f-42fe-bd37-c05ab3b274cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:4d:dd:d8:2c:1b:a5:79:2b:dc:c4:4e:dc: 67:7f:00:0a:bb:94:f1:66:ee:00:56:28:b3:37:7c: 91:66:8c:53:d6:1d:d7:3b:3e:27:fd:94:b6:2a:ec: 47:d9:51:ae:48:21:89:78:ba:04:ba:1e:2d:7a:7f: 26:d4:7b:ba:95:72:6b:3e:7b:9b:d7:7f:b7:ec:f6: 33:bb:f4:f8:9c:13:92:dd:1a:dc:95:8d:82:74:23: 72:c7:e1:d0:8d:49:c6:2d:b1:ad:55:86:37:20:16: ab:92:48:9e:28:11:8c:bc:31:42:9e:d5:6e:b4:e8: 62:ee:d8:d9:f1:c0:cf:e0:f1:2e:50:7d:b6:73:02: 0d:4d:e5:56:5a:ae:34:1b:60:59:d7:bf:60:a1:6e: ea:d5:f1:d8:2e:e1:63:32:73:b8:03:25:97:a7:ad: 2a:3a:7a:c0:14:ce:cf:16:87:c3:e6:72:57:9e:65: 8d:ae:95:a1:18:c7:3f:35:cd:ea:68:c7:7c:df:1b: 79:6e:b1:54:7c:ab:62:2c:b6:c6:f4:3c:7d:82:db: ad:07:d5:71:c6:bc:f0:a3:6f:4c:9f:a2:5f:6c:1a: 6a:77:83:f1:fc:1d:15:41:db:5b:24:6e:53:2d:11: 2d:d0:6b:9f:fa:b3:20:8f:23:0b:28:38:e0:fc:f3: 78:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FF:DB:E4:D4:C4:4A:40:5D:32:28:62:5E:C4:DC:E0:F1:61:62:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bd66d5a9-c9ec-3258-a868-cb9f47a6bbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 198.22.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:15:a1:6d:d9:f1:ea:5a:ff:b5:7c:1f:e5:1d:15:bc:38:2a: 74:ca:e2:6f:a0:14:e6:d2:44:ac:7c:85:6a:82:31:cc:14:87: 66:58:78:62:04:94:24:de:c9:12:6d:9c:73:f0:9f:1d:77:a0: 88:e1:f0:10:8e:50:b1:ca:11:3f:8a:9c:24:33:a2:8e:70:57: 26:e4:d9:26:62:75:f6:f8:26:cd:8b:c5:29:fd:8d:6d:91:18: 07:30:b0:70:c7:ae:ec:ed:8a:a0:1d:02:c7:9f:f3:2d:87:8f: 6e:bb:f2:f0:9b:4b:fe:ef:62:02:41:6a:17:5c:5c:cd:25:35: 75:d6:e4:81:4a:43:f2:ef:92:de:e3:f9:1a:82:5d:64:d2:f2: ac:a7:2a:1a:22:a5:ea:b1:1a:77:8c:c6:1c:e7:c5:b6:63:b1: 1c:a9:b9:b9:0c:a2:0e:91:aa:f1:88:87:51:b5:78:58:c0:92: 37:f3:2b:47:80:cd:6d:35:d0:ca:2b:12:9e:18:79:87:4c:fb: 54:fa:68:9e:f0:99:d2:0c:df:c3:a9:bd:11:13:ea:8b:53:ff: 0b:6b:62:bf:25:fe:16:c3:eb:aa:e1:2f:72:cd:ea:e6:61:f7: a4:32:bd:fe:19:c9:2b:1f:40:e2:a3:6e:93:dd:1b:63:78:ef: c1:22:42:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0EGVZVZQZv2cMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk Y2VkMmQwOGMtZDYwZi00MmZlLWJkMzctYzA1YWIzYjI3NGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgNN3dgsG6V5K9zETtxnfwAKu5TxZu4AViiz N3yRZoxT1h3XOz4n/ZS2KuxH2VGuSCGJeLoEuh4ten8m1Hu6lXJrPnub13+37PYz u/T4nBOS3RrclY2CdCNyx+HQjUnGLbGtVYY3IBarkkieKBGMvDFCntVutOhi7tjZ 8cDP4PEuUH22cwINTeVWWq40G2BZ179goW7q1fHYLuFjMnO4AyWXp60qOnrAFM7P FofD5nJXnmWNrpWhGMc/Nc3qaMd83xt5brFUfKtiLLbG9Dx9gtutB9Vxxrzwo29M n6JfbBpqd4Px/B0VQdtbJG5TLREt0Guf+rMgjyMLKDjg/PN4ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7/2+TUxEpAXTIoYl7E3ODxYWJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvYmQ2NmQ1YTktYzllYy0z MjU4LWE4NjgtY2I5ZjQ3YTZiYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcVoW3Z8epa/7V8H+UdFbw4KnTK4m+gFObSRKx8hWqCMcwUh2ZYeGIE lCTeyRJtnHPwnx13oIjh8BCOULHKET+KnCQzoo5wVybk2SZidfb4Js2LxSn9jW2R GAcwsHDHruztiqAdAsef8y2Hj2678vCbS/7vYgJBahdcXM0lNXXW5IFKQ/Lvkt7j +RqCXWTS8qynKhoipeqxGneMxhznxbZjsRypubkMog6RqvGIh1G1eFjAkjfzK0eA zW010MorEp4YeYdM+1T6aJ7wmdIM38OpvRET6otT/wtrYr8l/hbD66rhL3LN6uZh 96Qyvf4ZySsfQOKjbpPdG2N478EiQsE= -----END CERTIFICATE-----Generated at Wed Oct 29 00:55:01 2025 by rpki-client