$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aa052caa-cb10-3fe7-a0b1-af80d6e5c047.roa File: aa052caa-cb10-3fe7-a0b1-af80d6e5c047.roa (raw, json) Hash identifier: EA2liau9kW37S/8TZ2owU3lhEnhGAKgx9cCqiBbclWg= Subject key identifier: 3A:8C:D0:80:C7:4F:25:DD:8F:32:01:3B:0B:60:2F:B8:29:D3:F3:18 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584B21CC2EB18909855A3673C840 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aa052caa-cb10-3fe7-a0b1-af80d6e5c047.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 12083 IP address blocks: 69.14.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2e:b1:89:09:85:5a:36:73:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=951a43ca-6a06-4389-99ad-48354e5020f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:42:7e:50:e0:41:2e:ed:c4:98:93:fb:9f: f7:b1:26:29:00:6c:95:cc:ff:cf:79:e9:65:e0:cc: 25:7e:53:59:51:d8:3a:fb:9c:e5:27:6d:36:5b:8f: 7d:68:13:d4:45:1f:0f:7d:69:c3:bf:64:ce:55:e8: cc:0a:e3:ab:3c:76:e7:26:2c:fa:45:78:7d:4d:79: 26:4a:fb:18:06:ab:dc:fa:b1:40:d0:2e:ad:a7:67: 57:38:c3:de:c8:aa:40:15:a4:32:df:37:1f:fe:46: 5a:be:82:31:75:29:81:da:2d:82:e3:1f:02:db:4d: 1f:ec:34:0f:c5:73:75:99:b6:fa:cb:89:9d:a3:4d: 70:46:f0:a5:37:a4:06:98:0c:cb:07:96:5a:f1:6d: 23:82:b1:69:4d:60:86:87:e4:02:19:c7:e6:d3:7e: 95:11:99:f7:9f:63:54:5f:8b:d6:b9:6d:35:de:de: 46:76:51:dc:98:1e:36:0f:53:5a:58:40:50:a1:50: b2:e6:69:26:cc:83:59:a3:09:84:4d:25:b6:da:96: 30:9b:de:5c:18:38:f2:47:54:47:0a:26:cd:7b:e1: fe:bd:d1:bd:45:71:07:40:87:f5:1d:f0:40:4c:c0: 3c:e7:63:34:4e:ca:80:b9:03:56:73:32:31:b7:bc: 64:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8C:D0:80:C7:4F:25:DD:8F:32:01:3B:0B:60:2F:B8:29:D3:F3:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aa052caa-cb10-3fe7-a0b1-af80d6e5c047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 69.14.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:7f:f2:98:c9:69:c2:d1:2a:12:66:d9:ce:61:34:ed:f1:f0: f0:8d:c5:53:43:88:59:59:88:8f:13:a9:7f:c3:45:26:89:18: ff:41:36:a6:20:96:1e:0f:69:53:f6:d5:52:fc:a8:f2:e3:7e: 1f:df:20:c0:bb:31:87:de:fa:03:72:20:92:a2:14:77:1b:40: e3:41:dc:9a:6e:21:d1:f2:76:96:ba:ec:13:f7:b8:cf:c0:73: 3a:56:22:ec:90:69:ac:6b:68:62:d2:5a:95:3d:a0:cf:33:5c: bc:a2:02:d7:1d:6f:fd:2d:bb:73:a0:18:a9:39:d6:e6:f3:e7: ca:99:d5:fc:ef:0d:de:f6:bb:4a:63:4a:30:74:aa:06:5c:1d: ef:67:d4:ed:57:c1:1b:85:50:d3:58:6f:41:d6:75:b7:2d:c0: 7d:03:a2:2f:b5:fb:f3:e8:47:4e:c8:79:69:3b:91:d6:6b:b1: e1:95:20:49:13:5f:21:62:17:2c:29:14:5e:1f:26:19:e4:fb: ea:79:95:23:25:bb:4d:2d:c5:54:73:d7:39:88:84:bd:0f:04: 24:8a:96:61:de:5f:95:be:0a:32:46:b1:b1:d9:c4:76:53:9c: 42:9f:04:07:6c:24:d8:95:7f:da:ab:42:f2:b9:58:95:7b:1a: 4f:7b:f5:3f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEshzC6xiQmFWjZzyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk OTUxYTQzY2EtNmEwNi00Mzg5LTk5YWQtNDgzNTRlNTAyMGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztlCflDgQS7txJiT+5/3sSYpAGyVzP/Peell 4MwlflNZUdg6+5zlJ202W499aBPURR8PfWnDv2TOVejMCuOrPHbnJiz6RXh9TXkm SvsYBqvc+rFA0C6tp2dXOMPeyKpAFaQy3zcf/kZavoIxdSmB2i2C4x8C200f7DQP xXN1mbb6y4mdo01wRvClN6QGmAzLB5Za8W0jgrFpTWCGh+QCGcfm036VEZn3n2NU X4vWuW013t5GdlHcmB42D1NaWEBQoVCy5mkmzINZowmETSW22pYwm95cGDjyR1RH CibNe+H+vdG9RXEHQIf1HfBATMA852M0TsqAuQNWczIxt7xkwwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDqM0IDHTyXdjzIBOwtgL7gp0/MYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvYWEwNTJjYWEtY2IxMC0z ZmU3LWEwYjEtYWY4MGQ2ZTVjMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARQ4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACH/ymMlpwtEqEmbZzmE07fHw8I3FU0OIWVmIjxOpf8NFJokY/0E2piCW Hg9pU/bVUvyo8uN+H98gwLsxh976A3IgkqIUdxtA40Hcmm4h0fJ2lrrsE/e4z8Bz OlYi7JBprGtoYtJalT2gzzNcvKIC1x1v/S27c6AYqTnW5vPnypnV/O8N3va7SmNK MHSqBlwd72fU7VfBG4VQ01hvQdZ1ty3AfQOiL7X78+hHTsh5aTuR1mux4ZUgSRNf IWIXLCkUXh8mGeT76nmVIyW7TS3FVHPXOYiEvQ8EJIqWYd5flb4KMkaxsdnEdlOc Qp8EB2wk2JV/2qtC8rlYlXsaT3v1Pw== -----END CERTIFICATE-----Generated at Sat Oct 11 16:00:12 2025 by rpki-client