$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa File: 8658f928-bb2e-351c-baa0-b043397f7b78.roa (raw, json) Hash identifier: q7+eta6qKcsS8Ps1xMkF7a2qhluFhN3MXcLCPTNoZ0A= Subject key identifier: FE:06:12:30:9C:D4:01:EA:7A:5D:C2:EB:A6:F4:C6:04:7A:E1:92:D0 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0CDC0B1BB974767E88793A00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 13414 IP address blocks: 209.237.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0b:1b:b9:74:76:7e:88:79:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=cfc81c66-2517-46cf-b3b0-b7c19f4b7d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:05:a6:27:02:b7:18:5c:54:b1:a7:b0:d2: fe:dd:14:a3:5b:db:70:09:18:3f:0e:37:bc:8b:e8: 4a:ae:7a:1e:3c:84:91:75:05:64:ac:07:e3:4e:a6: c1:af:6c:38:8c:da:4a:18:ae:79:53:35:4a:85:05: 20:30:6a:83:78:67:83:7d:9e:de:92:d3:2f:be:ab: 92:2e:75:65:78:d5:05:36:11:a2:84:7a:be:27:e8: e9:23:1c:d8:01:b8:54:de:b2:59:f3:88:44:d1:e4: af:be:59:ef:73:b8:d0:90:72:3d:39:af:c3:f8:7f: b5:f6:ef:6b:2f:bc:43:c1:d6:d7:91:c6:e2:18:97: fa:a0:e2:86:ce:33:5e:a7:4f:6c:b4:a3:c5:ee:f6: 0b:e9:6f:c1:4a:86:bb:93:22:93:00:32:af:ca:8e: 91:83:16:67:64:54:cb:4d:2c:b1:af:ac:ef:fa:c7: 83:47:e9:af:e8:0f:15:f2:c8:a0:66:b3:b7:92:31: d8:2d:85:18:f9:26:80:2f:e8:0b:8d:f7:23:e4:b8: 22:4a:3a:d3:e9:a7:f9:e4:ee:85:08:17:bb:d7:38: 15:0b:10:65:ae:e6:d9:f9:36:90:87:50:a8:4e:83: c4:73:34:80:00:7d:8f:27:1e:98:2b:da:81:c1:35: a4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:06:12:30:9C:D4:01:EA:7A:5D:C2:EB:A6:F4:C6:04:7A:E1:92:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5c:ed:0e:22:aa:81:eb:9f:c0:95:77:73:7d:f2:02:68:f4: af:7b:53:e7:dd:54:d1:f4:80:63:1a:95:d6:cc:3b:44:f5:5d: 33:8c:e8:4f:b8:f3:f9:f3:d6:00:bd:30:e0:a4:6f:eb:3e:f5: 8d:bc:12:a7:97:7e:90:3a:e4:ba:52:c5:9b:58:8b:10:64:28: 2a:f6:97:80:9c:7a:2b:65:0f:c2:a5:0f:32:56:95:90:59:77: 49:0a:98:12:1c:d6:fa:a3:87:a7:48:20:42:3f:d1:e8:61:b9: 08:13:00:62:a8:0b:5d:5c:92:d4:c3:4c:81:f2:7d:83:e6:ef: c0:12:39:70:f9:52:4d:f8:55:17:43:5b:0a:d9:cd:85:2f:a3: 27:3b:01:a3:26:4e:c3:9e:a7:82:eb:d7:f3:64:23:da:7a:04: d0:96:8d:ac:1e:88:9a:df:b5:dc:90:36:ac:c3:24:4d:bf:2d: 58:04:e2:53:e5:63:17:fd:e0:ed:e3:62:69:dc:1c:3d:21:ab: 4b:1e:4b:8c:5c:b2:7c:41:78:a4:51:36:55:f1:e4:a0:30:df: 9a:98:85:55:84:dc:57:f8:f1:6d:fe:56:24:55:4a:27:94:d1: b5:fb:15:f0:79:f0:69:5c:77:ec:70:1a:1d:68:1e:5a:12:4b: d0:07:16:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AsbuXR2foh5OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk Y2ZjODFjNjYtMjUxNy00NmNmLWIzYjAtYjdjMTlmNGI3ZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/oFpicCtxhcVLGnsNL+3RSjW9twCRg/Dje8 i+hKrnoePISRdQVkrAfjTqbBr2w4jNpKGK55UzVKhQUgMGqDeGeDfZ7ektMvvquS LnVleNUFNhGihHq+J+jpIxzYAbhU3rJZ84hE0eSvvlnvc7jQkHI9Oa/D+H+19u9r L7xDwdbXkcbiGJf6oOKGzjNep09stKPF7vYL6W/BSoa7kyKTADKvyo6RgxZnZFTL TSyxr6zv+seDR+mv6A8V8sigZrO3kjHYLYUY+SaAL+gLjfcj5LgiSjrT6af55O6F CBe71zgVCxBlrubZ+TaQh1CoToPEczSAAH2PJx6YK9qBwTWkSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4GEjCc1AHqel3C66b0xgR64ZLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvODY1OGY5MjgtYmIyZS0z NTFjLWJhYTAtYjA0MzM5N2Y3Yjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVc7Q4iqoHrn8CVd3N98gJo9K97U+fdVNH0gGMaldbMO0T1XTOM6E+4 8/nz1gC9MOCkb+s+9Y28EqeXfpA65LpSxZtYixBkKCr2l4CceitlD8KlDzJWlZBZ d0kKmBIc1vqjh6dIIEI/0ehhuQgTAGKoC11cktTDTIHyfYPm78ASOXD5Uk34VRdD WwrZzYUvoyc7AaMmTsOep4Lr1/NkI9p6BNCWjaweiJrftdyQNqzDJE2/LVgE4lPl Yxf94O3jYmncHD0hq0seS4xcsnxBeKRRNlXx5KAw35qYhVWE3Ff48W3+ViRVSieU 0bX7FfB58Glcd+xwGh1oHloSS9AHFtU= -----END CERTIFICATE-----Generated at Sun Sep 7 21:32:59 2025 by rpki-client