$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/5627b2c4-baa2-392a-b352-a305aef8d340.roa File: 5627b2c4-baa2-392a-b352-a305aef8d340.roa (raw, json) Hash identifier: f8nrxKcTZZduk7IGHbA0B5ah1zW4YJu6d4/0vkppwCQ= Subject key identifier: 54:91:C5:F4:C6:10:33:8F:1A:0E:DC:80:E2:8B:D4:01:88:05:29:C4 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584B4081AE8DB7A353714F12D500 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/5627b2c4-baa2-392a-b352-a305aef8d340.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 3320 IP address blocks: 81.199.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:ae:8d:b7:a3:53:71:4f:12:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=ebcdcda2-eb2a-411f-80d0-1cfff10691a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:38:a6:29:33:26:85:6f:c5:26:34:f6:13: 38:ed:2e:5a:65:b6:22:85:84:e0:99:8e:7f:55:2c: 22:19:5f:9f:5d:55:1b:19:14:77:4e:b8:a3:0f:d6: c0:ef:2c:a5:80:b0:d7:cc:04:c2:c4:16:78:fe:e5: c9:fe:77:0d:39:c2:ef:98:f3:22:c6:bb:28:b5:8c: 59:cb:0a:eb:ed:c9:04:21:a5:6c:6c:c7:14:98:e8: 1c:da:48:26:2e:ec:16:a5:c4:60:16:3e:bf:ff:46: 86:33:ba:d7:5a:00:29:29:ec:f6:f1:4a:6e:b2:25: 0d:d6:75:bf:70:5b:4e:60:7c:94:58:6d:db:6a:51: e9:e0:6c:31:42:03:1a:07:cb:b6:77:b9:fd:7f:9f: 58:63:47:29:18:3b:81:aa:01:4d:7c:36:09:76:e9: 70:83:4d:0e:00:86:8a:ec:1a:0c:dd:a9:8f:36:54: 01:50:6d:60:7c:13:82:fa:d4:62:8f:eb:86:15:fe: 69:c9:61:2e:cd:ad:93:c6:00:11:f1:a3:c4:58:ab: 1c:40:c9:8d:95:63:94:e6:91:94:7b:64:90:b0:aa: 81:d8:43:c6:ad:ec:31:da:85:e3:55:09:b3:e7:a9: bb:d2:3c:bb:5b:17:00:92:96:7f:79:d4:6a:d9:8d: 15:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:91:C5:F4:C6:10:33:8F:1A:0E:DC:80:E2:8B:D4:01:88:05:29:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/5627b2c4-baa2-392a-b352-a305aef8d340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fa:01:dc:ae:86:32:3f:91:b1:f1:f9:b7:f1:7e:3f:41:8f: 2d:62:08:65:2e:3d:21:a9:e2:24:26:e9:7a:1e:f6:ab:87:c8: a2:3e:59:5d:15:da:67:a5:26:82:a8:f5:21:e9:37:d2:5a:bc: de:14:8c:0d:7a:c7:00:d5:ec:3d:13:30:d4:02:fc:f8:ba:e2: ab:d9:f2:c0:b4:67:4b:1c:c2:d0:99:81:dc:9a:ad:c5:0e:9c: c0:f1:7a:8d:8e:48:4a:25:8c:cb:a5:d9:ed:79:8b:f2:f9:82: 3e:9f:c0:4f:6d:c2:8c:f3:60:65:23:47:fa:39:76:e0:e5:d1: 2c:a3:36:24:15:b7:db:c9:29:a9:1a:cd:42:a8:a0:ed:93:d8: 0d:13:e5:80:55:69:55:b2:46:8c:51:4c:25:6b:83:43:5a:18: 29:67:ff:97:57:c1:2f:f8:8b:60:11:e4:46:05:f9:74:c9:16: 43:f0:2c:fa:37:60:54:dc:a1:05:27:f3:1d:ed:e3:ec:e9:97: 1d:f5:08:35:0c:51:49:3c:55:46:23:e9:37:c4:4e:8d:1d:8c: bd:44:50:18:22:34:e7:ae:43:91:df:07:73:b7:82:c8:e5:cc: c4:d2:91:78:f2:e1:9e:43:84:a0:67:8e:00:ca:d7:69:36:85: 83:0a:64:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAga6Nt6NTcU8S1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZWJjZGNkYTItZWIyYS00MTFmLTgwZDAtMWNmZmYxMDY5MWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApok4pikzJoVvxSY09hM47S5aZbYihYTgmY5/ VSwiGV+fXVUbGRR3TrijD9bA7yylgLDXzATCxBZ4/uXJ/ncNOcLvmPMixrsotYxZ ywrr7ckEIaVsbMcUmOgc2kgmLuwWpcRgFj6//0aGM7rXWgApKez28UpusiUN1nW/ cFtOYHyUWG3balHp4GwxQgMaB8u2d7n9f59YY0cpGDuBqgFNfDYJdulwg00OAIaK 7BoM3amPNlQBUG1gfBOC+tRij+uGFf5pyWEuza2TxgAR8aPEWKscQMmNlWOU5pGU e2SQsKqB2EPGrewx2oXjVQmz56m70jy7WxcAkpZ/edRq2Y0VpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSRxfTGEDOPGg7cgOKL1AGIBSnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvNTYyN2IyYzQtYmFhMi0z OTJhLWIzNTItYTMwNWFlZjhkMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUcdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf6AdyuhjI/kbHx+bfxfj9Bjy1iCGUuPSGp4iQm6Xoe9quHyKI+WV0V 2melJoKo9SHpN9JavN4UjA16xwDV7D0TMNQC/Pi64qvZ8sC0Z0scwtCZgdyarcUO nMDxeo2OSEoljMul2e15i/L5gj6fwE9twozzYGUjR/o5duDl0SyjNiQVt9vJKaka zUKooO2T2A0T5YBVaVWyRoxRTCVrg0NaGCln/5dXwS/4i2AR5EYF+XTJFkPwLPo3 YFTcoQUn8x3t4+zplx31CDUMUUk8VUYj6TfETo0djL1EUBgiNOeuQ5HfB3O3gsjl zMTSkXjy4Z5DhKBnjgDK12k2hYMKZMs= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:22 2025 by rpki-client