$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa File: 43a5601d-1585-3131-be68-bff003a98cc5.roa (raw, json) Hash identifier: v2cXcS1n9C/LKcQL2Cx3qdDSAQ09Mb6C6ICFa8Kv7+w= Subject key identifier: 75:9A:15:04:E2:70:30:35:86:00:5A:A8:43:18:BE:8B:72:B5:E2:0B Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0B76A3DBCBD8D9EAF008B5C0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 209.237.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a3:db:cb:d8:d9:ea:f0:08:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=33812e56-d916-499b-b215-858eca4f3493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:eb:dc:9f:ec:e4:cf:7f:49:4b:7b:f8:56: c2:7c:33:7e:67:bc:9c:a4:93:39:08:c7:41:62:aa: 20:d5:2c:09:e0:8b:11:a1:8f:3a:96:9b:c3:5e:7b: 67:0c:5e:59:4e:30:18:3e:7f:41:27:8f:5d:f7:fe: ca:e4:2e:39:5a:90:52:2d:1f:6c:92:8c:e9:13:61: b8:29:5e:76:ce:9b:06:c3:6c:23:bb:85:46:37:29: 84:f6:de:0f:0c:cb:d9:f0:3e:99:c7:37:68:16:8e: e2:36:98:5a:13:1d:ba:c8:cb:8d:c1:72:9b:cc:7d: 45:40:32:dd:db:bb:1d:65:83:65:c3:0f:84:08:c1: b2:31:48:a9:95:51:f7:68:47:8b:5b:8e:bf:96:0b: a2:57:bb:69:e2:4d:d8:9d:b6:cb:3e:fa:55:a6:ad: 30:a0:c4:92:37:0f:f5:9e:4e:58:93:dd:8a:57:77: 32:a6:7a:80:d5:be:34:09:bb:32:af:e3:5b:2a:2c: 1d:d1:08:4e:ba:03:2d:66:4f:21:5d:9a:ac:5f:22: e5:c3:01:40:8e:a0:54:ce:19:e7:b5:88:46:6d:c8: 93:19:09:69:20:62:96:d3:4e:67:8b:05:fb:41:e1: 1f:5c:d8:8d:0b:0a:6b:6b:cb:42:68:35:81:1f:66: 7b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9A:15:04:E2:70:30:35:86:00:5A:A8:43:18:BE:8B:72:B5:E2:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:01:78:95:76:da:c0:69:21:9f:36:87:b8:3f:53:ce:9b:6f: 6d:14:d2:ff:83:f8:b4:fe:f2:0b:ba:88:17:ec:9d:90:a8:33: e0:5e:9f:17:04:27:66:ff:e8:2e:f3:08:64:ab:7a:b4:55:c0: 5d:f1:d1:f8:c5:9c:f7:d2:51:02:c9:bf:7c:42:7c:58:5c:9a: 5f:dc:8c:bd:5b:91:4b:eb:9f:c4:bb:cc:ae:97:2e:d7:2e:8a: 88:4c:b7:0e:bb:fe:25:54:04:97:39:72:fe:36:c9:42:d4:cb: f3:d4:22:cc:dd:0d:da:38:4d:a3:82:74:ea:80:9b:2a:79:cf: 30:54:9d:ab:0b:4a:75:d7:0e:fb:7a:1c:08:e2:4f:88:36:7c: 0f:ca:2b:e2:8d:ec:ea:09:c7:25:79:ad:f9:fe:40:0e:da:f7: 19:d0:60:b2:ba:ac:7c:3e:3f:4d:58:b9:7e:74:66:c8:cb:5c: 94:af:22:7b:a8:cb:d5:01:e9:8f:47:44:94:b9:a6:fa:1d:0b: c2:9f:c6:74:50:3f:0b:cc:2e:23:c5:53:ca:4a:2b:69:5b:2b: 5b:67:90:4a:e7:84:15:ff:b6:1b:0a:e8:e4:9e:ad:df:7a:0e: 0e:07:43:fc:fa:78:f4:4c:fa:ca:f5:0a:75:09:8e:10:1e:30: e4:f5:d0:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqPby9jZ6vAItcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MzM4MTJlNTYtZDkxNi00OTliLWIyMTUtODU4ZWNhNGYzNDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzafr3J/s5M9/SUt7+FbCfDN+Z7ycpJM5CMdB Yqog1SwJ4IsRoY86lpvDXntnDF5ZTjAYPn9BJ49d9/7K5C45WpBSLR9skozpE2G4 KV52zpsGw2wju4VGNymE9t4PDMvZ8D6ZxzdoFo7iNphaEx26yMuNwXKbzH1FQDLd 27sdZYNlww+ECMGyMUiplVH3aEeLW46/lguiV7tp4k3YnbbLPvpVpq0woMSSNw/1 nk5Yk92KV3cypnqA1b40Cbsyr+NbKiwd0QhOugMtZk8hXZqsXyLlwwFAjqBUzhnn tYhGbciTGQlpIGKW005niwX7QeEfXNiNCwpra8tCaDWBH2Z7EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWaFQTicDA1hgBaqEMYvotyteILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNDNhNTYwMWQtMTU4NS0z MTMxLWJlNjgtYmZmMDAzYTk4Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8BeJV22sBpIZ82h7g/U86bb20U0v+D+LT+8gu6iBfsnZCoM+BenxcE J2b/6C7zCGSrerRVwF3x0fjFnPfSUQLJv3xCfFhcml/cjL1bkUvrn8S7zK6XLtcu iohMtw67/iVUBJc5cv42yULUy/PUIszdDdo4TaOCdOqAmyp5zzBUnasLSnXXDvt6 HAjiT4g2fA/KK+KN7OoJxyV5rfn+QA7a9xnQYLK6rHw+P01YuX50ZsjLXJSvInuo y9UB6Y9HRJS5pvodC8KfxnRQPwvMLiPFU8pKK2lbK1tnkErnhBX/thsK6OSerd96 Dg4HQ/z6ePRM+sr1CnUJjhAeMOT10EQ= -----END CERTIFICATE-----Generated at Sun Sep 7 21:35:08 2025 by rpki-client