$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7b55e8f7-8af2-3582-a7bf-08ee673f8872.roa File: 7b55e8f7-8af2-3582-a7bf-08ee673f8872.roa (raw, json) Hash identifier: q7oUB65MYuce9rrJiSuYnVe2kOFr+TmlhogIVorAzyo= Subject key identifier: 84:E5:CD:2B:E8:7C:BB:E5:14:19:79:73:15:AE:20:4C:3E:F0:29:A5 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0E414E8964A785C97BDA6280 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7b55e8f7-8af2-3582-a7bf-08ee673f8872.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 13414 IP address blocks: 209.237.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:4e:89:64:a7:85:c9:7b:da:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=f2f22804-90c1-477b-a497-9b528fae3e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:92:d8:d3:4b:9f:fc:35:3e:08:ba:aa:a3: c5:4f:93:14:f3:3c:2c:7b:d9:2d:9a:8d:dc:d3:c2: df:5f:d0:79:2f:af:0c:8c:67:d5:79:ab:24:05:e8: 8a:72:dc:04:c0:e0:ad:9c:4d:16:d5:dd:0c:7d:60: cf:1d:b9:e0:19:f2:cc:d2:69:7f:16:25:44:9c:d1: 35:fb:e5:13:27:fa:bf:74:29:58:5a:09:97:47:12: 43:21:c0:eb:fd:65:3b:e9:01:02:1c:77:3b:93:96: bd:03:4e:e6:89:c4:99:a7:af:f4:74:72:6e:13:bb: c2:70:6e:a0:59:26:1b:fa:a4:d1:cf:03:6b:a8:b5: fe:e9:b2:63:ae:53:c3:85:58:36:c8:3e:03:be:92: a4:e2:a3:da:e9:a6:38:ad:e6:f6:b4:82:f3:ac:05: ab:a6:fb:4f:b5:22:b4:b4:64:0d:42:87:1f:f4:40: 5d:7f:dd:dc:d5:3a:5d:6a:48:a5:73:ee:55:1d:aa: ce:33:a2:59:06:12:69:7b:30:b3:b4:86:35:90:c5: 6a:6f:ca:03:09:a6:df:9d:99:4f:d7:e5:53:d9:23: 82:c5:57:8c:26:51:da:81:f9:cf:90:78:68:1f:a1: 7a:38:22:db:64:5d:2c:6b:1b:d5:d8:58:e5:63:76: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E5:CD:2B:E8:7C:BB:E5:14:19:79:73:15:AE:20:4C:3E:F0:29:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7b55e8f7-8af2-3582-a7bf-08ee673f8872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:10:9d:1e:a7:62:6d:d7:5c:26:96:9c:38:73:ba:3e:d3:52: be:22:50:d5:68:23:2e:83:0e:bb:4c:e7:c6:47:95:28:14:60: f0:2c:2f:c8:78:11:ed:74:90:d6:e6:f6:b6:16:58:2b:e0:f6: d9:72:4b:fd:87:fe:00:2c:32:14:3e:68:ea:1d:2b:12:66:59: fd:c7:db:f5:5a:76:61:22:27:e5:12:47:21:a0:04:aa:71:f6: a0:5d:24:89:ec:4c:fe:85:f7:30:60:9f:6b:74:48:55:9b:ba: 53:17:27:dc:86:f2:84:7c:51:89:eb:3c:41:f6:d5:16:34:ec: 33:11:6b:0d:53:f2:2d:4c:2e:9b:93:74:72:ac:f9:b8:00:9f: 73:bc:a1:ba:bf:0f:4c:a4:e6:aa:76:b7:13:e9:c9:49:bd:cd: 2f:2e:1a:28:ad:ac:28:b4:d3:ae:b8:17:be:da:ae:7a:6c:54: 69:ef:51:1d:ac:70:dc:28:1b:93:ad:b4:e6:95:1f:61:d2:9b: 1a:e4:e2:a3:81:9d:c4:ed:0b:0e:53:74:1b:6e:ab:7c:85:5f: 72:45:98:7e:13:5c:44:d7:a3:31:0a:ed:f1:2c:ac:06:91:9d: a4:f4:23:24:98:80:1f:ac:55:e7:2d:9a:49:65:89:51:db:3c: c9:92:a5:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQU6JZKeFyXvaYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjJmMjI4MDQtOTBjMS00NzdiLWE0OTctOWI1MjhmYWUzZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe2S2NNLn/w1Pgi6qqPFT5MU8zwse9ktmo3c 08LfX9B5L68MjGfVeaskBeiKctwEwOCtnE0W1d0MfWDPHbngGfLM0ml/FiVEnNE1 ++UTJ/q/dClYWgmXRxJDIcDr/WU76QECHHc7k5a9A07micSZp6/0dHJuE7vCcG6g WSYb+qTRzwNrqLX+6bJjrlPDhVg2yD4DvpKk4qPa6aY4reb2tILzrAWrpvtPtSK0 tGQNQocf9EBdf93c1Tpdakilc+5VHarOM6JZBhJpezCztIY1kMVqb8oDCabfnZlP 1+VT2SOCxVeMJlHagfnPkHhoH6F6OCLbZF0saxvV2FjlY3YsgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITlzSvofLvlFBl5cxWuIEw+8CmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvN2I1NWU4ZjctOGFmMi0z NTgyLWE3YmYtMDhlZTY3M2Y4ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0e3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcQnR6nYm3XXCaWnDhzuj7TUr4iUNVoIy6DDrtM58ZHlSgUYPAsL8h4 Ee10kNbm9rYWWCvg9tlyS/2H/gAsMhQ+aOodKxJmWf3H2/VadmEiJ+USRyGgBKpx 9qBdJInsTP6F9zBgn2t0SFWbulMXJ9yG8oR8UYnrPEH21RY07DMRaw1T8i1MLpuT dHKs+bgAn3O8obq/D0yk5qp2txPpyUm9zS8uGiitrCi00664F77arnpsVGnvUR2s cNwoG5OttOaVH2HSmxrk4qOBncTtCw5TdBtuq3yFX3JFmH4TXETXozEK7fEsrAaR naT0IySYgB+sVectmklliVHbPMmSpQc= -----END CERTIFICATE-----Generated at Sun Sep 7 21:31:50 2025 by rpki-client