$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0b497710-af94-34f1-ae44-5fa040805aba.roa File: 0b497710-af94-34f1-ae44-5fa040805aba.roa (raw, json) Hash identifier: MdL99xwK0MBdDTMIaTqo6oEVKcbObx+IRAKYIBD3MlA= Subject key identifier: AE:DC:A7:AE:26:69:42:AD:77:E2:EE:ED:2C:D3:95:16:EF:C8:D6:BE Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B047BFBCB17EADE446BCB9A00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0b497710-af94-34f1-ae44-5fa040805aba.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 13414 IP address blocks: 199.96.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:fb:cb:17:ea:de:44:6b:cb:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=43d94bfb-78f7-45b2-9c49-67dc03e6e983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:21:a8:95:64:42:b6:d4:9d:9b:d9:db:af: 2c:cf:65:96:13:eb:22:75:c8:4c:70:37:ad:7e:7a: 5c:5e:91:35:69:9a:3c:b0:8e:d9:30:8e:4a:63:31: aa:21:34:b8:eb:91:95:34:90:8a:aa:b0:44:71:b2: ea:7e:b4:66:0b:e9:b8:4e:7f:fe:4d:eb:dd:f9:31: 90:45:af:d4:d8:78:06:25:00:b7:64:aa:0f:2e:a8: 94:1a:16:04:c8:0e:cd:30:ee:5c:63:61:94:40:44: 0f:ba:27:a1:32:98:8f:2b:ee:da:01:75:93:f4:5a: fa:96:fa:92:8b:fd:d2:c5:6d:2e:6b:09:27:37:0c: 1d:e0:83:da:7b:46:5b:18:c0:62:14:65:84:89:10: 86:48:da:15:d1:c1:be:30:88:86:ea:97:f8:45:c1: 17:c4:c7:03:2d:ec:6e:55:51:fe:f7:59:6f:bc:76: 01:b4:1f:21:63:6c:ae:ac:4b:97:4b:d7:1e:6a:81: 9d:76:3f:0c:2a:5a:e1:ec:6d:47:ec:bd:77:7b:f3: a8:56:dd:1e:ca:84:41:69:9a:33:f2:49:4f:29:16: c2:c6:f1:c9:64:30:8a:72:d0:8a:08:8b:14:c1:ef: a6:94:c2:f6:fa:ea:a1:ce:7f:6e:db:d6:3e:c1:5d: 0a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DC:A7:AE:26:69:42:AD:77:E2:EE:ED:2C:D3:95:16:EF:C8:D6:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0b497710-af94-34f1-ae44-5fa040805aba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.96.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:98:79:83:c9:d9:a7:78:86:90:3b:ac:96:c9:4d:15:f2:64: f7:e4:e7:65:7f:63:21:ac:69:79:93:9c:1f:bc:05:17:72:73: 06:d5:f1:9d:de:4f:4e:8d:d7:31:d5:a3:43:68:f9:53:7e:17: 44:54:7d:dd:7c:b5:cc:7d:37:0e:e9:db:da:f5:93:86:94:3d: 5e:67:03:37:a6:b6:81:a5:13:0a:81:68:5e:66:1d:df:c9:2a: 31:51:f8:8c:0a:c1:a0:e7:52:a9:4f:a0:92:66:38:98:1b:11: fc:51:d0:12:44:6d:a5:d3:5e:74:d2:29:68:ea:29:63:3e:77: 3e:d1:95:e8:8e:f2:a3:9d:b2:82:28:04:51:7c:00:3e:cd:fd: b7:e9:c4:85:d4:0f:8f:4b:ca:6d:fa:aa:9c:59:d0:db:b1:f9: 49:79:0b:5a:52:3a:ba:a3:dc:d4:06:6a:b7:22:14:0f:54:65: 41:1e:1e:88:cc:1c:4f:ae:68:f7:59:09:8a:14:88:4f:31:a6: 12:0a:74:1f:e5:c4:61:24:8d:ce:11:23:09:7e:d2:b0:f4:bf: 64:bf:29:73:17:ca:2c:0a:3f:e4:29:3f:71:60:b7:32:42:2c: 32:57:36:14:f8:b2:2c:4f:c7:33:e3:e8:33:20:b5:1b:23:5e: 2e:68:5e:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEe/vLF+reRGvLmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NDNkOTRiZmItNzhmNy00NWIyLTljNDktNjdkYzAzZTZlOTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVYhqJVkQrbUnZvZ268sz2WWE+sidchMcDet fnpcXpE1aZo8sI7ZMI5KYzGqITS465GVNJCKqrBEcbLqfrRmC+m4Tn/+Tevd+TGQ Ra/U2HgGJQC3ZKoPLqiUGhYEyA7NMO5cY2GUQEQPuiehMpiPK+7aAXWT9Fr6lvqS i/3SxW0uawknNwwd4IPae0ZbGMBiFGWEiRCGSNoV0cG+MIiG6pf4RcEXxMcDLexu VVH+91lvvHYBtB8hY2yurEuXS9ceaoGddj8MKlrh7G1H7L13e/OoVt0eyoRBaZoz 8klPKRbCxvHJZDCKctCKCIsUwe+mlML2+uqhzn9u29Y+wV0KmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7cp64maUKtd+Lu7SzTlRbvyNa+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMGI0OTc3MTAtYWY5NC0z NGYxLWFlNDQtNWZhMDQwODA1YWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2A4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGYeYPJ2ad4hpA7rJbJTRXyZPfk52V/YyGsaXmTnB+8BRdycwbV8Z3e T06N1zHVo0No+VN+F0RUfd18tcx9Nw7p29r1k4aUPV5nAzemtoGlEwqBaF5mHd/J KjFR+IwKwaDnUqlPoJJmOJgbEfxR0BJEbaXTXnTSKWjqKWM+dz7RleiO8qOdsoIo BFF8AD7N/bfpxIXUD49Lym36qpxZ0Nux+Ul5C1pSOrqj3NQGarciFA9UZUEeHojM HE+uaPdZCYoUiE8xphIKdB/lxGEkjc4RIwl+0rD0v2S/KXMXyiwKP+QpP3FgtzJC LDJXNhT4sixPxzPj6DMgtRsjXi5oXn0= -----END CERTIFICATE-----Generated at Sun Nov 2 13:45:56 2025 by rpki-client