$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa File: 89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa (raw, json) Hash identifier: HWhwWiScp6hUb+4lIdEnj8AnswbwpfIVXTPxfUd29jE= Subject key identifier: 13:2F:C4:38:62:76:AB:38:88:FC:55:41:1D:19:75:21:24:29:2F:36 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0CDC0AAC09AAC2916A27E780 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 13414 IP address blocks: 209.237.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0a:ac:09:aa:c2:91:6a:27:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=a49ccf64-a697-459b-9638-35cd7d4bd5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:83:cc:b0:87:01:04:8e:6c:e2:50:bf:e6:91: fd:36:5d:ec:bb:05:b1:96:4d:da:b4:ab:0e:50:31: d9:0e:95:9d:e2:bc:61:27:90:20:87:b5:bc:db:f5: 1c:c2:d7:77:cc:69:54:0f:d7:37:1b:a9:5e:97:ba: 81:17:b8:27:a4:69:ed:d7:c0:c0:7b:d2:55:3e:69: 8a:14:d6:4e:f8:12:ac:cd:d5:d3:23:4f:ab:33:bc: 30:bb:15:17:a6:77:b2:d6:bb:1d:e3:96:16:48:49: 3d:9f:c6:a9:e2:89:a1:dc:59:f2:9e:1b:b3:64:51: ed:5e:20:8e:a6:5f:08:ea:eb:3f:b7:d5:32:af:3d: 96:e3:78:b5:9d:22:f8:b6:e3:0c:07:71:ad:7e:72: 2b:e8:18:43:e9:2e:86:6c:dd:d0:be:ad:b0:7b:f2: 4d:56:24:2a:8b:a4:21:cb:f2:2b:07:5b:05:5b:25: e8:ba:db:cb:6a:82:83:e6:70:17:b4:b9:05:6f:41: 56:4c:6c:a0:4e:ba:17:5a:e5:d6:fb:37:54:2b:dd: 55:63:6a:b7:b9:46:07:47:c4:e8:1c:47:ce:f7:e1: 95:3c:3e:8c:cd:12:07:08:f3:21:5b:18:fa:1f:fd: b4:ca:56:e9:47:6e:a6:17:59:8e:76:66:00:62:a9: 88:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2F:C4:38:62:76:AB:38:88:FC:55:41:1D:19:75:21:24:29:2F:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:16:9f:44:39:07:79:71:b3:46:54:29:b2:9f:93:88:a6:fb: 82:93:e5:8c:98:ae:11:af:3c:c8:ff:6f:ff:67:ca:13:93:3e: 8d:0a:dc:92:b7:fa:01:20:56:dc:21:ad:bf:1a:f4:6d:aa:82: 8c:d5:d1:a7:55:8d:a6:d7:61:15:4f:a8:cf:9d:21:52:ce:e3: f5:07:c8:23:85:24:19:05:ad:c4:49:6b:c1:48:3f:19:e3:7f: d7:60:05:10:5c:db:22:f9:43:5d:44:80:59:9d:65:7e:60:44: a0:f2:b7:93:7d:ab:30:9e:6d:f6:b7:39:e4:0b:6b:c4:2d:65: e7:31:03:e0:6a:f5:2c:6b:2d:26:1b:98:60:48:d5:0c:20:c0: a1:68:99:dc:6d:0f:71:6a:5f:3e:44:a3:39:21:95:67:4e:31: f5:b1:24:d1:e6:e9:3b:93:a4:68:f0:06:89:1d:48:3e:2a:ab: 9d:e5:9c:f5:21:06:ee:9d:b6:48:84:77:9b:3b:34:7e:c6:8b: db:26:ab:9c:bf:34:f4:df:86:d6:de:ed:ee:9c:68:08:8d:19: 57:0c:ce:72:7c:4e:74:2d:1d:38:af:a7:94:dc:43:81:e2:eb: b0:e9:14:23:f6:41:eb:d3:93:35:32:d2:e1:d5:59:95:d0:2b: 3a:26:c1:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AqsCarCkWon54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk YTQ5Y2NmNjQtYTY5Ny00NTliLTk2MzgtMzVjZDdkNGJkNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIPMsIcBBI5s4lC/5pH9Nl3suwWxlk3atKsO UDHZDpWd4rxhJ5Agh7W82/Ucwtd3zGlUD9c3G6lel7qBF7gnpGnt18DAe9JVPmmK FNZO+BKszdXTI0+rM7wwuxUXpney1rsd45YWSEk9n8ap4omh3FnynhuzZFHtXiCO pl8I6us/t9Uyrz2W43i1nSL4tuMMB3GtfnIr6BhD6S6GbN3Qvq2we/JNViQqi6Qh y/IrB1sFWyXoutvLaoKD5nAXtLkFb0FWTGygTroXWuXW+zdUK91VY2q3uUYHR8To HEfO9+GVPD6MzRIHCPMhWxj6H/20ylbpR26mF1mOdmYAYqmIfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMvxDhidqs4iPxVQR0ZdSEkKS82MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvODliMzBkZDItMzIzZC0z YWFiLWE4ZDktYzAxYjg4N2ZiZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUWn0Q5B3lxs0ZUKbKfk4im+4KT5YyYrhGvPMj/b/9nyhOTPo0K3JK3 +gEgVtwhrb8a9G2qgozV0adVjabXYRVPqM+dIVLO4/UHyCOFJBkFrcRJa8FIPxnj f9dgBRBc2yL5Q11EgFmdZX5gRKDyt5N9qzCebfa3OeQLa8QtZecxA+Bq9SxrLSYb mGBI1QwgwKFomdxtD3FqXz5EozkhlWdOMfWxJNHm6TuTpGjwBokdSD4qq53lnPUh Bu6dtkiEd5s7NH7Gi9smq5y/NPTfhtbe7e6caAiNGVcMznJ8TnQtHTivp5TcQ4Hi 67DpFCP2QevTkzUy0uHVWZXQKzomwVA= -----END CERTIFICATE-----Generated at Sun Sep 7 21:31:49 2025 by rpki-client