$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/860afd41-d4a8-3fc2-b4b8-4adf1829ea92.roa File: 860afd41-d4a8-3fc2-b4b8-4adf1829ea92.roa (raw, json) Hash identifier: yhTd4BnzdPZmsrKOHkEH67CPUD5zTi1Ls4FYPsD2sQ8= Subject key identifier: 9A:F7:8F:B9:78:43:D7:4B:5B:21:A0:3F:7A:73:E7:F2:CA:8F:09:58 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0A115C8333E87A524D8106C0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/860afd41-d4a8-3fc2-b4b8-4adf1829ea92.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 13414 IP address blocks: 64.63.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:5c:83:33:e8:7a:52:4d:81:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=fe23e479-ee2a-44bc-acc7-d4acb1a445dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:20:64:da:4c:43:48:2b:33:c2:d1:e4:57:de: 74:a8:34:56:e1:df:64:8b:5f:48:c6:27:c9:9e:98: 17:8e:11:81:c9:ab:6a:46:37:a3:4f:79:3a:c7:36: 53:43:cc:33:29:47:81:14:ce:f1:bc:80:eb:d7:19: 44:15:3d:2d:e9:30:a4:31:59:5c:27:8c:cc:ec:b2: b1:3b:9c:f7:a0:9c:aa:e3:05:b2:75:14:3b:b9:a9: 61:4e:52:ff:0a:40:58:12:24:aa:64:51:56:22:34: 81:17:2a:42:0a:65:54:c2:18:45:dd:c9:3d:d2:d7: c9:10:52:e8:65:eb:0d:03:81:61:d7:2e:74:17:56: 2b:ec:da:e7:bc:be:39:9a:c5:ef:20:95:f8:ee:92: 7b:1f:fc:80:73:94:23:06:b8:5d:ad:a7:95:84:3c: 23:d0:45:e4:85:a7:2a:7a:cd:14:c4:43:a7:63:e5: 2a:97:9d:8e:2f:9e:74:3e:61:df:d5:68:38:b6:8e: 2a:9d:a0:fc:59:fb:de:89:e0:2f:ce:60:69:4d:53: 3c:23:cf:18:21:c4:ea:6c:eb:74:2a:13:90:28:c5: 36:7e:b2:5c:c5:35:d5:86:0d:ec:6c:6e:00:3a:e1: 07:73:c5:bd:86:69:8c:b2:b5:fd:51:e5:00:39:b3: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F7:8F:B9:78:43:D7:4B:5B:21:A0:3F:7A:73:E7:F2:CA:8F:09:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/860afd41-d4a8-3fc2-b4b8-4adf1829ea92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:88:82:6b:43:d1:b9:39:86:2b:66:86:5d:5d:d2:fe:6b:e4: 85:cd:b6:75:c8:eb:d9:83:6f:3d:07:18:f7:74:3e:e0:d1:4e: a6:0f:50:a8:f7:d4:b9:8c:85:6c:6c:8f:41:76:c6:64:6a:cd: 3e:26:77:79:d0:2b:45:15:2a:a7:89:e7:9b:a0:da:be:54:cf: 89:6b:b8:a5:4b:56:76:0d:5a:61:13:fa:53:32:ab:b5:78:36: 9e:48:a7:2c:82:55:91:25:62:51:ee:e2:93:54:ab:9d:eb:aa: 79:d2:79:6e:06:19:4b:2b:3c:4d:d9:e3:03:e2:e0:4a:9e:2f: 11:48:a3:ae:ec:df:27:0f:96:b1:c9:be:5b:e1:c4:23:1a:fc: 8f:78:66:90:2d:15:ce:a7:ef:f7:69:2b:ac:2e:1b:b9:a7:e8: 74:e3:f9:d1:bc:2d:1c:a3:71:66:b4:72:41:5c:51:d5:9d:6c: f5:92:43:6a:0e:bc:45:ae:57:96:37:85:a8:e9:f1:bc:94:90: f4:94:e5:af:43:75:95:77:c3:e4:98:fb:fc:7b:1b:9c:ee:e1: 90:c3:34:6b:89:60:22:30:f5:30:c9:6c:07:f1:74:cc:aa:a6: 6f:29:b1:e2:31:33:06:53:03:93:f4:65:a9:09:00:e4:45:5f: 71:23:23:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEVyDM+h6Uk2BBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ZmUyM2U0NzktZWUyYS00NGJjLWFjYzctZDRhY2IxYTQ0NWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSBk2kxDSCszwtHkV950qDRW4d9ki19IxifJ npgXjhGByatqRjejT3k6xzZTQ8wzKUeBFM7xvIDr1xlEFT0t6TCkMVlcJ4zM7LKx O5z3oJyq4wWydRQ7ualhTlL/CkBYEiSqZFFWIjSBFypCCmVUwhhF3ck90tfJEFLo ZesNA4Fh1y50F1Yr7NrnvL45msXvIJX47pJ7H/yAc5QjBrhdraeVhDwj0EXkhacq es0UxEOnY+Uql52OL550PmHf1Wg4to4qnaD8WfveieAvzmBpTVM8I88YIcTqbOt0 KhOQKMU2frJcxTXVhg3sbG4AOuEHc8W9hmmMsrX9UeUAObPJXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr3j7l4Q9dLWyGgP3pz5/LKjwlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvODYwYWZkNDEtZDRhOC0z ZmMyLWI0YjgtNGFkZjE4MjllYTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD89MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCIgmtD0bk5hitmhl1d0v5r5IXNtnXI69mDbz0HGPd0PuDRTqYPUKj3 1LmMhWxsj0F2xmRqzT4md3nQK0UVKqeJ55ug2r5Uz4lruKVLVnYNWmET+lMyq7V4 Np5IpyyCVZElYlHu4pNUq53rqnnSeW4GGUsrPE3Z4wPi4EqeLxFIo67s3ycPlrHJ vlvhxCMa/I94ZpAtFc6n7/dpK6wuG7mn6HTj+dG8LRyjcWa0ckFcUdWdbPWSQ2oO vEWuV5Y3hajp8byUkPSU5a9DdZV3w+SY+/x7G5zu4ZDDNGuJYCIw9TDJbAfxdMyq pm8pseIxMwZTA5P0ZakJAORFX3EjI24= -----END CERTIFICATE-----Generated at Sun Sep 7 21:30:32 2025 by rpki-client