$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa File: 4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa (raw, json) Hash identifier: erv6D7R73/O/G/aSgY5TEtE0v69XnEIwkWTtxRxtT90= Subject key identifier: E0:C9:79:33:90:2A:81:D6:61:96:19:A9:C5:A9:44:B5:5B:3F:0A:B2 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0B76A3C2DC88994691F9A780 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 209.237.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a3:c2:dc:88:99:46:91:f9:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=4b61aaa0-a0b6-4167-b82f-713eaa50077b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f5:ae:cd:81:21:1f:b9:6c:82:8e:cc:05:4c: da:32:ae:e4:56:0c:0d:58:ce:60:0f:01:2c:17:07: cf:5e:5f:35:a1:6b:67:38:b1:b9:1b:f3:cb:42:56: ba:2b:ff:c2:a0:dd:a9:4b:d1:b1:23:ab:a1:1c:c6: 32:3a:02:be:7c:f9:d5:94:c3:c6:fb:d0:52:1a:22: 63:c4:12:03:91:bd:ad:3e:3f:b9:ef:75:63:4d:cc: 34:63:b8:3e:c1:28:c6:5b:42:2b:bc:05:ea:0a:be: 23:7a:cb:3b:ae:22:b0:cd:db:7a:6c:d7:81:ae:aa: be:9e:c5:ca:81:6f:f7:41:9d:d8:4e:ef:ae:a7:87: 09:79:2e:cc:eb:88:c8:26:ef:d7:74:52:45:08:d2: 2a:92:a8:34:06:b6:f0:ea:4f:ab:b7:5b:54:a3:3f: b1:64:ba:dc:c4:6c:89:a7:c1:40:5a:20:ec:d0:7b: c9:98:b2:b7:66:48:47:8b:35:c9:57:c1:b0:c0:35: 52:ce:c9:81:06:13:41:66:15:97:5a:3f:c2:3d:fd: 70:e8:38:a6:a9:90:d4:d0:6f:7b:9c:c0:ab:3f:cb: 3f:d7:d6:0f:17:36:4b:33:cf:6c:38:7e:a6:24:11: a7:9c:ad:54:75:9a:76:89:44:7d:48:46:9d:2b:83: 81:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C9:79:33:90:2A:81:D6:61:96:19:A9:C5:A9:44:B5:5B:3F:0A:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:eb:06:d6:ee:ca:3f:8f:3c:95:5d:36:09:5a:3f:14:1c:17: 92:82:8b:97:02:46:55:6d:61:3e:f0:de:4e:a4:b8:86:e6:ed: ba:3b:72:a4:ef:fb:63:0b:b8:7b:23:57:d4:66:38:1a:c8:b1: cb:a1:f3:e4:47:f2:0d:ec:d3:4e:ad:8a:57:f8:9a:b9:30:d2: 76:23:8e:76:83:d7:78:ae:3d:2a:ab:e0:82:43:b0:31:d2:ed: 61:e8:47:1c:7b:34:04:69:f8:84:ac:27:eb:a1:dd:4e:0b:84: 56:88:d9:f8:ab:b3:0b:0a:63:88:2a:b1:23:c5:cd:38:6f:29: e3:f5:4f:9a:34:23:fa:bb:ac:1a:d6:d8:6b:65:cc:fd:03:52: d2:68:ab:2d:0e:d5:f9:8f:ad:2b:20:15:f9:bc:e6:22:7a:21: 36:1c:50:d0:22:2f:d8:51:0e:e8:e8:8f:c7:48:0e:b6:5b:42: 22:a3:24:d8:d6:64:e3:a4:33:53:af:24:c1:e3:df:28:1c:c1: a9:a7:fe:00:4b:dd:6c:2d:4f:5a:d3:77:14:59:2f:6f:40:3b: 5d:a6:f1:90:46:d7:1b:48:ba:89:53:0c:0b:0b:84:36:e0:1f: de:c3:41:c7:5d:4e:fb:0b:58:4a:e5:39:43:90:3c:97:9b:e6: 90:7d:15:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqPC3IiZRpH5p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NGI2MWFhYTAtYTBiNi00MTY3LWI4MmYtNzEzZWFhNTAwNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/WuzYEhH7lsgo7MBUzaMq7kVgwNWM5gDwEs FwfPXl81oWtnOLG5G/PLQla6K//CoN2pS9GxI6uhHMYyOgK+fPnVlMPG+9BSGiJj xBIDkb2tPj+573VjTcw0Y7g+wSjGW0IrvAXqCr4jess7riKwzdt6bNeBrqq+nsXK gW/3QZ3YTu+up4cJeS7M64jIJu/XdFJFCNIqkqg0Brbw6k+rt1tUoz+xZLrcxGyJ p8FAWiDs0HvJmLK3ZkhHizXJV8GwwDVSzsmBBhNBZhWXWj/CPf1w6DimqZDU0G97 nMCrP8s/19YPFzZLM89sOH6mJBGnnK1UdZp2iUR9SEadK4OBXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODJeTOQKoHWYZYZqcWpRLVbPwqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNGE3YzFkNGUtYTQ5NC0z ZGFkLWFkZDgtMDRkNWEzNjFiYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHrBtbuyj+PPJVdNglaPxQcF5KCi5cCRlVtYT7w3k6kuIbm7bo7cqTv +2MLuHsjV9RmOBrIscuh8+RH8g3s006tilf4mrkw0nYjjnaD13iuPSqr4IJDsDHS 7WHoRxx7NARp+ISsJ+uh3U4LhFaI2firswsKY4gqsSPFzThvKeP1T5o0I/q7rBrW 2GtlzP0DUtJoqy0O1fmPrSsgFfm85iJ6ITYcUNAiL9hRDujoj8dIDrZbQiKjJNjW ZOOkM1OvJMHj3ygcwamn/gBL3WwtT1rTdxRZL29AO12m8ZBG1xtIuolTDAsLhDbg H97DQcddTvsLWErlOUOQPJeb5pB9FQM= -----END CERTIFICATE-----Generated at Sun Sep 7 21:39:12 2025 by rpki-client