$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa File: 24cd566e-cce5-31a0-9029-1e2d74307ceb.roa (raw, json) Hash identifier: joyFjkzHDommzNeKcUPyKh1RV4eZwaHJLKvYgR2xfzs= Subject key identifier: 6F:2A:F8:BE:30:A0:35:4B:5A:C7:F4:81:96:53:C1:3F:65:75:00:F9 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0CDC0A96553C796F680BB1A0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 13414 IP address blocks: 209.237.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0a:96:55:3c:79:6f:68:0b:b1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=254a2500-e090-489a-bd31-97fff889a62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c6:7c:f5:bd:7e:10:2e:90:ae:e4:d6:db:c2: 91:76:60:9a:3e:1d:ac:2a:1b:f4:de:17:4d:a3:5b: c0:a3:08:cc:74:38:e1:d3:d3:b8:b9:77:1e:94:01: fc:60:fd:6b:7f:8a:f2:5d:3e:13:a6:5d:f1:f1:89: ca:47:f1:01:ca:0b:03:bc:5b:82:b2:d5:aa:41:25: 53:cd:df:77:f3:dd:d0:28:74:92:2d:4f:e7:eb:b3: e1:ae:a7:03:7f:e2:7f:13:a6:00:57:d8:a3:15:58: f0:a0:cc:a8:45:45:b9:d2:96:f7:5f:58:99:e5:64: f5:a1:52:02:d1:a8:34:c8:35:9c:2f:37:c7:84:db: df:73:b2:ab:a7:e3:0a:94:ec:4d:b5:8d:f2:37:14: 00:ce:79:f6:f3:b9:a2:37:ec:32:d3:cf:39:39:c9: 90:36:cb:e6:75:4e:02:4a:79:d5:ed:49:ec:58:65: ac:b3:bb:4a:d7:8b:b4:17:63:0e:32:09:fb:7e:f9: d8:21:2c:fd:a7:af:76:63:76:42:2a:69:15:7b:aa: 3f:ce:5f:f4:05:33:0c:d7:49:43:f5:75:11:fa:dd: 7b:96:db:34:84:b9:82:08:67:38:2b:50:8f:ae:f4: 95:1b:4b:1f:d3:ae:20:ee:0b:9c:c7:de:6d:2f:04: d2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2A:F8:BE:30:A0:35:4B:5A:C7:F4:81:96:53:C1:3F:65:75:00:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e8:6d:d1:72:5b:9b:69:c2:c2:e9:86:c0:39:20:36:59:04: 84:b8:79:1b:aa:ba:99:69:3f:c5:d7:6d:dd:31:15:fa:1d:bf: 3d:1b:9a:73:c5:21:0b:54:a5:59:55:f8:42:f2:67:c9:1c:d1: a5:b1:4d:c5:e4:73:6d:01:d4:16:ab:24:ca:0d:bf:07:27:65: 53:79:b0:ef:eb:75:67:95:d8:fa:e9:b0:5d:0d:f5:7d:f5:30: 3e:7c:e4:87:d4:a8:86:74:82:8c:94:31:9f:b0:3a:3b:03:9b: 93:84:fd:46:c7:87:49:98:b6:df:96:f3:5b:89:83:78:fe:0d: 48:58:71:69:11:16:0a:e6:91:26:77:0e:3d:e6:fa:0a:2c:65: 44:ef:ea:dc:12:c9:25:54:56:42:d9:5f:80:89:e0:b4:6f:69: ad:fd:ec:1e:29:50:ad:93:10:ea:3e:3a:62:2a:6c:7c:86:ae: be:ac:26:11:94:86:ed:ee:cc:67:6e:09:11:69:7a:8c:e6:65: ed:a3:4a:49:c2:35:5a:2e:42:bb:10:1e:1b:fd:0f:2c:a9:43: 09:ae:b9:2e:d5:ba:c5:86:c0:aa:34:05:6e:f5:8c:16:a4:6f: 67:6a:2a:66:74:55:1c:7b:a2:f8:bb:fc:90:78:d1:06:c5:cc: 4b:2d:60:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AqWVTx5b2gLsaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MjU0YTI1MDAtZTA5MC00ODlhLWJkMzEtOTdmZmY4ODlhNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcZ89b1+EC6QruTW28KRdmCaPh2sKhv03hdN o1vAowjMdDjh09O4uXcelAH8YP1rf4ryXT4Tpl3x8YnKR/EBygsDvFuCstWqQSVT zd93893QKHSSLU/n67PhrqcDf+J/E6YAV9ijFVjwoMyoRUW50pb3X1iZ5WT1oVIC 0ag0yDWcLzfHhNvfc7Krp+MKlOxNtY3yNxQAznn287miN+wy0885OcmQNsvmdU4C SnnV7UnsWGWss7tK14u0F2MOMgn7fvnYISz9p692Y3ZCKmkVe6o/zl/0BTMM10lD 9XUR+t17lts0hLmCCGc4K1CPrvSVG0sf064g7gucx95tLwTSPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8q+L4woDVLWsf0gZZTwT9ldQD5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMjRjZDU2NmUtY2NlNS0z MWEwLTkwMjktMWUyZDc0MzA3Y2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLobdFyW5tpwsLphsA5IDZZBIS4eRuquplpP8XXbd0xFfodvz0bmnPF IQtUpVlV+ELyZ8kc0aWxTcXkc20B1BarJMoNvwcnZVN5sO/rdWeV2PrpsF0N9X31 MD585IfUqIZ0goyUMZ+wOjsDm5OE/UbHh0mYtt+W81uJg3j+DUhYcWkRFgrmkSZ3 Dj3m+gosZUTv6twSySVUVkLZX4CJ4LRvaa397B4pUK2TEOo+OmIqbHyGrr6sJhGU hu3uzGduCRFpeozmZe2jSknCNVouQrsQHhv9DyypQwmuuS7VusWGwKo0BW71jBak b2dqKmZ0VRx7ovi7/JB40QbFzEstYJ0= -----END CERTIFICATE-----Generated at Sun Nov 2 13:43:48 2025 by rpki-client