$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3f7c2cc1-e2c4-3546-b6d3-cbfb4428e18a.roa File: 3f7c2cc1-e2c4-3546-b6d3-cbfb4428e18a.roa (raw, json) Hash identifier: lvl8H7ZRZFaQ7JjVkTdKfPVzSak9AwTt/1RO31UFGqc= Subject key identifier: 21:6D:07:7D:53:3C:27:84:B1:5C:BE:5B:97:54:FB:28:22:D7:EC:70 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584ADECBB56E03C0408CE207D040 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3f7c2cc1-e2c4-3546-b6d3-cbfb4428e18a.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 199.59.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b5:6e:03:c0:40:8c:e2:07:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=e95b8a5e-673f-4769-993b-aa0e601078a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c1:3a:bd:80:61:61:9e:42:0a:38:93:52:3a: ba:55:3b:2a:de:12:a5:b8:cf:bd:96:70:22:74:87: bb:8e:c0:48:f1:6f:53:ba:e1:97:a8:8e:db:e8:4c: a4:a2:98:44:24:28:59:0b:ff:c1:51:c4:1b:c5:34: e5:4d:f1:04:28:73:3a:3f:8e:ee:93:e8:7f:b6:42: 2f:e4:0f:11:20:f8:73:06:e9:de:74:e5:90:a0:04: 93:bb:40:60:11:73:14:4d:53:bd:4b:96:bb:48:2a: fc:0f:86:92:3c:00:45:c7:73:7b:1b:1c:c6:35:28: c3:c2:b9:4d:2b:50:af:aa:a3:5b:9c:c2:b7:a7:01: e0:f5:5a:a3:47:74:c5:f8:b3:89:b3:f0:21:ed:de: d8:b0:9e:c3:3e:d1:cf:91:4f:29:a2:bf:78:36:b0: 0d:b8:cc:2a:0c:5d:6c:4f:2e:0d:78:44:60:a4:75: 6e:f9:22:16:03:cc:9a:89:91:45:e1:1d:42:ad:1b: 4a:99:67:1d:3b:24:59:e9:a6:42:58:17:4c:0b:6d: 1f:26:67:ab:43:8a:4c:1f:03:c9:a2:1f:5e:d6:2e: bc:3a:86:56:ef:64:25:ec:3c:54:86:7e:f1:32:17: 03:29:cf:31:34:2d:70:bf:7f:ca:2a:cf:88:27:6a: 0f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6D:07:7D:53:3C:27:84:B1:5C:BE:5B:97:54:FB:28:22:D7:EC:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3f7c2cc1-e2c4-3546-b6d3-cbfb4428e18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:bb:ca:e8:fb:bb:72:50:52:07:d1:a4:69:d1:39:1c:27:78: 55:0c:d1:6e:ae:98:10:92:c2:3e:c9:61:07:c4:68:06:d6:c5: bf:64:1d:4e:42:fc:52:70:50:82:69:e8:e6:b7:d4:cc:50:bc: d0:10:25:07:01:13:72:f6:35:7c:fc:cd:6a:50:d5:21:3f:89: 75:d3:ce:2a:19:84:21:be:7f:68:10:08:eb:44:d4:cc:77:82: d4:a8:6d:10:81:b4:0f:0e:30:2f:ff:6e:12:71:f9:ad:17:80: 27:95:ec:52:f9:3f:ad:ce:20:e8:ca:d2:8a:ab:78:77:5b:5a: ec:77:ff:8a:c3:d9:ae:83:63:ae:0b:65:b5:c5:f2:8d:ff:70: 8b:16:80:08:a3:3a:d5:e5:b0:c4:6e:c7:fe:32:b1:44:1c:ef: 39:6f:1d:5b:b9:42:e9:b9:61:1e:7d:b6:b0:f2:fc:04:8f:14: 7e:d2:51:d1:62:64:4c:89:bf:10:1e:76:52:6b:39:1e:78:f9: b7:4a:4e:55:79:e7:48:47:ba:dd:67:5a:e6:75:4c:3c:c0:24: 15:f4:1a:27:f4:ca:12:25:ae:b3:d2:87:78:4d:9d:21:0a:3c: 7c:87:90:7f:0d:9c:6a:00:07:84:f4:2f:7b:08:e2:3a:50:ed: 13:75:3f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7VuA8BAjOIH0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTk1YjhhNWUtNjczZi00NzY5LTk5M2ItYWEwZTYwMTA3OGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsE6vYBhYZ5CCjiTUjq6VTsq3hKluM+9lnAi dIe7jsBI8W9TuuGXqI7b6EykophEJChZC//BUcQbxTTlTfEEKHM6P47uk+h/tkIv 5A8RIPhzBunedOWQoASTu0BgEXMUTVO9S5a7SCr8D4aSPABFx3N7GxzGNSjDwrlN K1CvqqNbnMK3pwHg9VqjR3TF+LOJs/Ah7d7YsJ7DPtHPkU8por94NrANuMwqDF1s Ty4NeERgpHVu+SIWA8yaiZFF4R1CrRtKmWcdOyRZ6aZCWBdMC20fJmerQ4pMHwPJ oh9e1i68OoZW72Ql7DxUhn7xMhcDKc8xNC1wv3/KKs+IJ2oP6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFtB31TPCeEsVy+W5dU+ygi1+xwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvM2Y3YzJjYzEtZTJjNC0z NTQ2LWI2ZDMtY2JmYjQ0MjhlMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ27yuj7u3JQUgfRpGnRORwneFUM0W6umBCSwj7JYQfEaAbWxb9kHU5C /FJwUIJp6Oa31MxQvNAQJQcBE3L2NXz8zWpQ1SE/iXXTzioZhCG+f2gQCOtE1Mx3 gtSobRCBtA8OMC//bhJx+a0XgCeV7FL5P63OIOjK0oqreHdbWux3/4rD2a6DY64L ZbXF8o3/cIsWgAijOtXlsMRux/4ysUQc7zlvHVu5Qum5YR59trDy/ASPFH7SUdFi ZEyJvxAedlJrOR54+bdKTlV550hHut1nWuZ1TDzAJBX0Gif0yhIlrrPSh3hNnSEK PHyHkH8NnGoAB4T0L3sI4jpQ7RN1P+A= -----END CERTIFICATE-----Generated at Sun Nov 2 13:41:56 2025 by rpki-client