$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/32e1a9b0-4459-3f78-8c98-b18de11a0848.roa File: 32e1a9b0-4459-3f78-8c98-b18de11a0848.roa (raw, json) Hash identifier: tKTQP/OY5NmKJ3u9CQmt4w1m8pjvk7ual+bjy35/dGU= Subject key identifier: 91:4F:52:51:AB:64:86:79:9E:ED:6A:7A:0F:76:E9:AB:80:C8:3F:25 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0A115C0FBEE7F84460B9F000 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/32e1a9b0-4459-3f78-8c98-b18de11a0848.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 13414 IP address blocks: 64.63.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:5c:0f:be:e7:f8:44:60:b9:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=7f2a473b-bf0c-49ce-aa35-2f7fc13e40fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:1c:81:81:d7:e1:1a:6e:a3:e5:1e:ab:4b: b7:71:83:b4:be:4e:c7:be:45:2d:7d:2c:a5:a5:6d: 7d:01:10:2f:6b:9a:2f:3b:d4:42:a3:ff:b8:a9:00: e5:06:d2:ba:c8:11:f4:77:3b:75:4b:34:f4:a8:b6: ea:44:c1:ca:47:07:ae:e1:9d:7b:0e:42:a4:38:5c: 36:00:15:6a:5c:55:09:8b:70:27:c2:43:46:2a:5b: 76:36:c2:b3:d7:e8:6d:6e:fb:21:a3:88:0c:e4:fb: 8d:3a:86:a3:70:ff:a6:a0:2a:36:f2:c7:5f:83:16: 9b:ff:f9:e1:08:ab:b9:e9:a8:7e:7d:fe:95:c9:eb: 11:ce:57:33:4d:de:80:1b:63:6b:d9:26:91:e5:74: 5b:0d:c5:10:9b:aa:c7:ea:e1:91:41:43:70:52:9d: 71:99:34:b6:aa:c2:70:40:e5:57:af:67:22:0b:6d: ac:59:b8:c6:35:eb:f4:d8:3a:33:e6:67:e7:52:8c: b5:14:bb:e4:70:a1:e3:0f:0a:c5:84:a9:b5:37:2b: 51:5f:30:16:8c:79:1b:90:39:de:c3:9d:f9:29:ee: 02:65:84:ca:34:fb:00:0d:4e:0a:f9:9b:b2:73:db: 29:45:bf:0a:43:51:f9:37:ad:c7:93:ff:02:59:bd: 32:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4F:52:51:AB:64:86:79:9E:ED:6A:7A:0F:76:E9:AB:80:C8:3F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/32e1a9b0-4459-3f78-8c98-b18de11a0848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c5:ca:1b:60:b7:cd:08:3b:0e:b3:d8:f3:c2:0e:a5:31:a6: 63:b2:12:86:0b:a9:16:31:0e:28:7d:16:01:25:09:28:0e:02: a4:b6:49:8b:85:f5:40:28:4d:fe:35:b3:58:76:aa:f2:3d:84: 6a:e0:2f:fa:68:6b:79:59:e2:7e:33:bd:f9:c7:05:71:29:6b: f1:ee:95:8a:ed:90:75:eb:6d:90:7a:30:39:1e:c3:de:a8:4b: c5:80:38:4b:71:1d:2d:c3:0c:85:76:44:c7:a3:c9:5a:34:93: 21:ff:19:2e:8b:25:c8:bd:46:85:8f:c4:22:b5:28:9b:f2:29: d9:f9:f6:49:35:38:e2:92:ef:80:66:ba:ed:33:2d:20:3e:12: 10:26:75:22:d2:2f:44:a5:66:05:54:ee:b0:02:19:7d:bc:05: 27:1b:4f:aa:94:63:24:b0:14:ba:b1:7c:4c:8b:fd:4b:55:43: 6e:e4:39:02:5f:e0:e3:92:43:62:50:44:11:a4:dd:68:4f:79: 63:d7:39:52:6b:01:d5:f5:b4:e4:e0:f6:c7:96:bd:86:b9:c2: 34:3e:5c:0c:7b:f7:49:31:7e:5c:d8:44:3b:77:fb:f6:7d:2a: 05:5b:b6:e6:28:f6:ea:e3:42:70:16:f1:2e:b2:ef:bb:72:a7: 7b:a1:e1:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEVwPvuf4RGC58AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk N2YyYTQ3M2ItYmYwYy00OWNlLWFhMzUtMmY3ZmMxM2U0MGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtscgYHX4Rpuo+Ueq0u3cYO0vk7HvkUtfSyl pW19ARAva5ovO9RCo/+4qQDlBtK6yBH0dzt1SzT0qLbqRMHKRweu4Z17DkKkOFw2 ABVqXFUJi3AnwkNGKlt2NsKz1+htbvsho4gM5PuNOoajcP+moCo28sdfgxab//nh CKu56ah+ff6VyesRzlczTd6AG2Nr2SaR5XRbDcUQm6rH6uGRQUNwUp1xmTS2qsJw QOVXr2ciC22sWbjGNev02Doz5mfnUoy1FLvkcKHjDwrFhKm1NytRXzAWjHkbkDne w535Ke4CZYTKNPsADU4K+Zuyc9spRb8KQ1H5N63Hk/8CWb0yiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFPUlGrZIZ5nu1qeg926auAyD8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMzJlMWE5YjAtNDQ1OS0z Zjc4LThjOTgtYjE4ZGUxMWEwODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrFyhtgt80IOw6z2PPCDqUxpmOyEoYLqRYxDih9FgElCSgOAqS2SYuF 9UAoTf41s1h2qvI9hGrgL/poa3lZ4n4zvfnHBXEpa/HulYrtkHXrbZB6MDkew96o S8WAOEtxHS3DDIV2RMejyVo0kyH/GS6LJci9RoWPxCK1KJvyKdn59kk1OOKS74Bm uu0zLSA+EhAmdSLSL0SlZgVU7rACGX28BScbT6qUYySwFLqxfEyL/UtVQ27kOQJf 4OOSQ2JQRBGk3WhPeWPXOVJrAdX1tOTg9seWvYa5wjQ+XAx790kxflzYRDt3+/Z9 KgVbtuYo9urjQnAW8S6y77typ3uh4a0= -----END CERTIFICATE-----Generated at Sun Sep 7 21:30:34 2025 by rpki-client