$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa File: 6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa (raw, json) Hash identifier: e1Yr7v9UhMijgUxR7NDuDTV5PNkifTf076FAwoe4oxs= Subject key identifier: E6:8F:FC:F2:F1:D5:C6:D5:CE:F9:0D:BF:6B:76:E0:2F:4C:25:B5:64 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584ADECBADAB33A3145F294898C0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 199.59.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:ad:ab:33:a3:14:5f:29:48:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=6be96d41-bb3f-420e-a9e7-4f9c13ba1809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:9d:ba:5a:55:b0:77:b4:3d:d5:be:50:40: 03:9e:cc:a7:53:05:cf:04:fc:f8:09:b5:d1:21:41: 74:df:f2:47:78:d9:f0:0a:c6:76:ed:85:c1:c7:75: dd:b1:c5:67:4a:7d:77:5f:df:ae:31:61:5a:30:dc: 41:20:f0:ef:a7:df:34:f9:dc:46:a7:b9:bd:01:e2: 20:c4:0a:2d:25:a2:7f:97:2b:5f:ba:d9:04:24:06: c7:a7:7b:6d:fb:4e:17:20:6f:ea:38:d9:a2:04:08: b7:1a:f0:2a:84:69:bb:e1:19:d9:e8:a8:ce:10:b1: d0:f8:2c:92:dc:95:fd:15:35:95:da:99:d5:96:99: b8:51:5a:de:57:07:7d:fb:f2:90:f0:92:7a:bd:d5: ba:a0:c9:df:4c:0c:67:0e:d7:a2:1e:34:22:54:5a: 72:fc:7a:21:86:96:89:07:34:b6:58:0b:bb:f4:48: df:68:8d:6e:42:7e:5d:16:f7:73:64:b0:05:48:29: 64:b2:a5:fd:e2:83:62:be:e4:7f:5c:ce:9d:08:90: 17:78:af:1a:ec:6a:f3:2a:d6:4e:0d:08:32:ff:8a: ac:23:2a:c3:f5:55:2f:94:7e:c9:78:db:3b:d2:94: 98:ec:ad:cd:3c:b2:54:c0:a7:92:38:00:a2:b0:53: 1d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8F:FC:F2:F1:D5:C6:D5:CE:F9:0D:BF:6B:76:E0:2F:4C:25:B5:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:67:7f:a1:dc:c6:f6:53:15:22:82:db:2e:81:70:37:c7:1f: 17:8f:e7:32:60:0b:05:e7:71:95:53:b6:56:01:93:42:ed:64: 43:26:8c:57:1b:a8:d1:45:50:78:89:06:f8:fd:c4:34:23:c8: 13:59:57:f2:a0:99:87:41:90:30:07:41:ff:aa:8d:88:d7:94: 0d:a0:0e:ba:9c:92:0c:30:63:5c:ff:c5:4a:e8:2b:de:3b:db: 59:a2:7c:f1:99:93:e4:07:c3:88:7f:f4:95:9e:c5:5e:6f:f3: 75:23:9f:0e:30:91:4e:ec:1c:b3:bd:9b:04:69:a6:ee:c9:93: 18:c6:86:02:60:d9:b6:50:37:50:60:2e:92:0a:f9:0b:c0:39: bd:ef:04:6c:fc:f6:d6:73:81:5f:b3:38:44:97:57:4d:a5:f5: 73:f4:bb:60:a0:9d:1b:5b:8e:13:72:44:71:96:e5:2b:7d:f3: f2:9d:73:fd:39:4c:8a:bb:0b:df:b6:91:81:8e:60:c8:50:05: 6c:17:f6:07:0b:40:40:4e:fb:3a:18:55:a5:a5:2f:0f:e2:fc: cd:94:de:f2:0b:7b:63:40:63:cc:c1:2a:ef:ba:0d:0c:eb:4e: c4:3e:5f:06:ce:46:7b:24:8a:de:3c:44:c4:db:3e:c2:b8:0b: ed:13:f0:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey62rM6MUXylImMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NmJlOTZkNDEtYmIzZi00MjBlLWE5ZTctNGY5YzEzYmExODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos2dulpVsHe0PdW+UEADnsynUwXPBPz4CbXR IUF03/JHeNnwCsZ27YXBx3XdscVnSn13X9+uMWFaMNxBIPDvp980+dxGp7m9AeIg xAotJaJ/lytfutkEJAbHp3tt+04XIG/qONmiBAi3GvAqhGm74RnZ6KjOELHQ+CyS 3JX9FTWV2pnVlpm4UVreVwd9+/KQ8JJ6vdW6oMnfTAxnDteiHjQiVFpy/HohhpaJ BzS2WAu79EjfaI1uQn5dFvdzZLAFSClksqX94oNivuR/XM6dCJAXeK8a7GrzKtZO DQgy/4qsIyrD9VUvlH7JeNs70pSY7K3NPLJUwKeSOACisFMdxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaP/PLx1cbVzvkNv2t24C9MJbVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNmVmZDNhMDgtYWNkZS0z YmRkLTg1YjUtNGViYTUzM2U1MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRnf6HcxvZTFSKC2y6BcDfHHxeP5zJgCwXncZVTtlYBk0LtZEMmjFcb qNFFUHiJBvj9xDQjyBNZV/KgmYdBkDAHQf+qjYjXlA2gDrqckgwwY1z/xUroK947 21mifPGZk+QHw4h/9JWexV5v83Ujnw4wkU7sHLO9mwRppu7JkxjGhgJg2bZQN1Bg LpIK+QvAOb3vBGz89tZzgV+zOESXV02l9XP0u2CgnRtbjhNyRHGW5St98/Kdc/05 TIq7C9+2kYGOYMhQBWwX9gcLQEBO+zoYVaWlLw/i/M2U3vILe2NAY8zBKu+6DQzr TsQ+XwbORnskit48RMTbPsK4C+0T8N0= -----END CERTIFICATE-----Generated at Sun Nov 2 13:41:54 2025 by rpki-client