$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/51a0ab86-f90e-3a33-a71c-b527a801061e.roa File: 51a0ab86-f90e-3a33-a71c-b527a801061e.roa (raw, json) Hash identifier: EbBLmHaUqpN50QpZHDJbzJU3rXUXkCNxmERSqzoVQWo= Subject key identifier: 84:75:CF:7F:51:AC:C3:31:AB:45:DA:76:BD:9F:BE:E7:07:E6:1D:FF Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0CDC0ABF07231F41F4271080 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/51a0ab86-f90e-3a33-a71c-b527a801061e.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 13414 IP address blocks: 209.237.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0a:bf:07:23:1f:41:f4:27:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=8f1e07ef-bc27-4ef0-8ed1-8e386bfbac71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:57:f1:05:82:3e:51:21:bb:b7:11:75:55:fe: bc:ec:3f:8e:55:45:52:20:4a:fd:e6:06:b0:dd:fd: 2e:2a:c1:11:e8:be:1c:d1:f4:b5:fc:0b:f3:3b:93: 98:e9:76:79:e9:48:32:2c:35:96:ae:e5:77:86:b4: 31:bb:a2:ae:f7:8b:87:f3:cb:94:88:18:6b:b1:ed: 66:e6:77:ae:3b:c0:df:ff:de:bf:7f:de:d5:d8:e4: 23:77:31:9a:30:09:b0:da:7d:e2:91:cf:77:d7:6c: cd:78:12:03:c6:53:ae:fc:b8:84:16:1b:13:51:e8: fe:a3:05:cd:97:c8:1c:2d:08:96:24:f7:63:b7:dc: be:98:2d:59:45:78:11:8a:84:f7:77:89:52:a8:7a: 33:60:e4:61:d7:c0:ca:04:67:5f:8c:40:53:50:23: 87:01:95:e6:59:58:e6:de:6b:8a:3e:51:5d:fb:3b: d9:22:72:e8:08:bd:4a:d8:af:71:7b:8d:54:00:8f: df:72:01:01:15:02:7d:38:66:8b:b8:58:cd:8d:f7: 9f:b1:2f:fc:2a:6d:61:57:c4:89:5d:bb:b2:04:3a: a6:7b:1a:29:52:93:fb:7c:6a:fd:60:4b:b7:a7:90: b9:21:47:9a:03:b6:c9:46:2b:11:a9:f6:b2:cf:76: c0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:75:CF:7F:51:AC:C3:31:AB:45:DA:76:BD:9F:BE:E7:07:E6:1D:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/51a0ab86-f90e-3a33-a71c-b527a801061e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a4:60:a1:e9:23:42:32:49:b2:0f:19:a0:2c:62:96:2d:d5: b1:ae:c7:87:2a:5b:f1:c2:c8:b9:29:cf:05:4d:03:57:48:73: 13:1c:6e:14:2e:95:a0:47:0f:cc:14:93:5c:98:1f:32:c3:e8: c2:27:94:e5:58:45:1c:c7:4f:09:ce:f6:91:4b:61:d3:0e:b7: 6c:d0:ab:b2:1c:f6:51:76:53:11:25:3d:17:65:26:df:fb:ea: 76:05:72:b0:23:80:8b:fc:f7:70:a3:01:32:0e:f1:45:85:f1: e8:cf:23:ef:ee:40:aa:84:ed:f5:c3:3c:b4:6d:b3:0b:5d:f2: db:f0:52:ee:92:18:f0:76:aa:ce:cc:cc:56:65:24:e8:48:7b: 32:8a:8a:95:81:e2:e0:6b:98:36:0b:b5:fd:05:d5:11:5b:d0: ab:68:d7:de:84:9c:dc:26:2f:72:8a:b5:4c:7f:1c:bb:b5:be: 92:3e:30:8a:60:c5:c6:fc:84:ac:10:e7:50:09:c7:69:6f:fd: 53:9c:7a:93:13:22:c1:5c:8a:6f:8b:11:b5:cf:40:c1:0a:58: 74:01:87:2e:86:7e:fb:6b:83:1e:1c:d5:63:9c:6b:9a:95:b5: 0d:ae:75:58:26:04:93:43:98:fa:9c:fb:75:9c:cd:e6:4a:98: 73:0b:1d:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3Aq/ByMfQfQnEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk OGYxZTA3ZWYtYmMyNy00ZWYwLThlZDEtOGUzODZiZmJhYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilfxBYI+USG7txF1Vf687D+OVUVSIEr95gaw 3f0uKsER6L4c0fS1/AvzO5OY6XZ56UgyLDWWruV3hrQxu6Ku94uH88uUiBhrse1m 5neuO8Df/96/f97V2OQjdzGaMAmw2n3ikc9312zNeBIDxlOu/LiEFhsTUej+owXN l8gcLQiWJPdjt9y+mC1ZRXgRioT3d4lSqHozYORh18DKBGdfjEBTUCOHAZXmWVjm 3muKPlFd+zvZInLoCL1K2K9xe41UAI/fcgEBFQJ9OGaLuFjNjfefsS/8Km1hV8SJ XbuyBDqmexopUpP7fGr9YEu3p5C5IUeaA7bJRisRqfayz3bAsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIR1z39RrMMxq0Xadr2fvucH5h3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNTFhMGFiODYtZjkwZS0z YTMzLWE3MWMtYjUyN2E4MDEwNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOkYKHpI0IySbIPGaAsYpYt1bGux4cqW/HCyLkpzwVNA1dIcxMcbhQu laBHD8wUk1yYHzLD6MInlOVYRRzHTwnO9pFLYdMOt2zQq7Ic9lF2UxElPRdlJt/7 6nYFcrAjgIv893CjATIO8UWF8ejPI+/uQKqE7fXDPLRtswtd8tvwUu6SGPB2qs7M zFZlJOhIezKKipWB4uBrmDYLtf0F1RFb0Kto196EnNwmL3KKtUx/HLu1vpI+MIpg xcb8hKwQ51AJx2lv/VOcepMTIsFcim+LEbXPQMEKWHQBhy6Gfvtrgx4c1WOca5qV tQ2udVgmBJNDmPqc+3WczeZKmHMLHWc= -----END CERTIFICATE-----Generated at Sun Nov 2 13:42:07 2025 by rpki-client