$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8b805ab5-d6c7-36f4-bc3d-0209dd59c81e.roa File: 8b805ab5-d6c7-36f4-bc3d-0209dd59c81e.roa (raw, json) Hash identifier: ZXFoUJSAkciYVCBEMkXq4raGBu51WsEk/js241/ua6o= Subject key identifier: D8:AD:2A:8B:DB:2F:3D:0B:6B:95:E9:6A:29:38:CF:58:47:FA:BF:B3 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0B769E66CA44A2EB4F4984E8 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8b805ab5-d6c7-36f4-bc3d-0209dd59c81e.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 209.237.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9e:66:ca:44:a2:eb:4f:49:84:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=65cfbdb8-c9a1-4390-877c-378dadbd75fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:62:a3:e3:d1:15:61:73:33:2c:f8:54:65:73: bf:2f:7d:0a:c7:6f:4e:7f:29:6a:0e:00:37:c3:b2: cb:72:8b:28:34:d4:28:20:3c:51:d9:4a:f0:54:c6: 0a:60:2b:e0:c9:77:49:bd:bb:da:d7:5e:f9:d7:5d: 0c:31:bf:b8:94:e9:c7:e6:11:cb:84:ff:16:09:84: 82:39:dc:48:88:3f:a5:b0:17:41:38:09:6f:7a:66: c2:09:37:db:0e:cc:7f:76:62:68:a2:23:4a:7a:7e: bb:9e:da:3e:7b:a8:b5:d7:28:76:95:3c:e4:19:9d: 56:86:d0:a0:20:72:50:f3:63:d3:1d:8f:ee:7c:58: af:cd:da:d7:f1:1f:93:d3:81:a6:78:fa:0e:7a:fc: 40:b2:5a:e3:5b:d4:fc:52:a4:8b:6e:24:e6:4b:53: f1:fe:98:29:a0:16:84:91:7e:a8:d5:ab:76:47:14: 73:00:76:21:49:6c:8c:25:41:15:0c:fa:60:d6:e7: d8:e6:5d:8f:df:d5:3e:1c:35:f3:d1:30:84:fd:7a: f1:49:9c:ce:74:2c:7b:58:0d:2f:0f:93:2f:79:27: be:1d:2b:94:75:84:ee:76:65:44:9e:77:b0:ce:5f: 93:ae:12:cb:fd:f2:e2:f0:c7:a2:71:43:e0:c9:0b: 3b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AD:2A:8B:DB:2F:3D:0B:6B:95:E9:6A:29:38:CF:58:47:FA:BF:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8b805ab5-d6c7-36f4-bc3d-0209dd59c81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b0:ac:f0:89:3b:80:82:7e:6a:7a:62:ae:97:f6:37:82:a3: ba:d0:8a:4b:ec:24:e6:7d:f8:6e:48:52:da:43:23:5b:4f:2b: 11:d4:fb:af:ac:1c:dd:c9:7a:bd:88:f6:2c:e3:95:c5:1b:81: dd:4e:d8:66:ce:3b:6c:16:cb:8e:71:98:9a:c4:52:5d:15:19: 0c:dd:7c:a8:5f:8b:00:e6:b2:c7:17:e9:ec:39:d2:c3:3c:8f: 42:55:17:6d:a9:91:ec:3a:a0:85:49:94:c0:2a:83:de:bc:92: fd:6a:f3:0d:28:d7:45:5d:9c:72:69:89:24:5f:94:2d:00:c9: a6:e1:a8:d2:34:76:01:6d:a7:b4:c4:8f:f6:d3:04:b2:f6:22: c1:a9:53:6d:68:07:e2:45:0b:da:7c:88:2d:a6:3c:96:8b:74: 5c:71:de:f9:3e:90:11:f4:87:17:10:fa:69:28:06:d8:9b:e2: 93:dc:77:82:94:27:9d:af:8a:e8:fc:12:8f:12:a4:48:02:aa: 72:1b:cb:9e:a5:f5:f5:55:7d:a9:f1:56:84:b7:39:2a:66:f0: 1d:ce:b5:1d:41:80:6c:fa:95:b4:ae:1c:f7:2e:96:57:93:89: 9b:f9:47:db:88:4c:f3:b2:a1:f4:98:f2:a2:6f:33:f6:f3:75: eb:f1:ae:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdp5mykSi609JhOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NjVjZmJkYjgtYzlhMS00MzkwLTg3N2MtMzc4ZGFkYmQ3NWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WKj49EVYXMzLPhUZXO/L30Kx29OfylqDgA3 w7LLcosoNNQoIDxR2UrwVMYKYCvgyXdJvbva1175110MMb+4lOnH5hHLhP8WCYSC OdxIiD+lsBdBOAlvembCCTfbDsx/dmJooiNKen67nto+e6i11yh2lTzkGZ1WhtCg IHJQ82PTHY/ufFivzdrX8R+T04GmePoOevxAslrjW9T8UqSLbiTmS1Px/pgpoBaE kX6o1at2RxRzAHYhSWyMJUEVDPpg1ufY5l2P39U+HDXz0TCE/XrxSZzOdCx7WA0v D5MveSe+HSuUdYTudmVEnnewzl+TrhLL/fLi8MeicUPgyQs7OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNitKovbLz0La5Xpaik4z1hH+r+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOGI4MDVhYjUtZDZjNy0z NmY0LWJjM2QtMDIwOWRkNTljODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmwrPCJO4CCfmp6Yq6X9jeCo7rQikvsJOZ9+G5IUtpDI1tPKxHU+6+s HN3Jer2I9izjlcUbgd1O2GbOO2wWy45xmJrEUl0VGQzdfKhfiwDmsscX6ew50sM8 j0JVF22pkew6oIVJlMAqg968kv1q8w0o10VdnHJpiSRflC0AyabhqNI0dgFtp7TE j/bTBLL2IsGpU21oB+JFC9p8iC2mPJaLdFxx3vk+kBH0hxcQ+mkoBtib4pPcd4KU J52viuj8Eo8SpEgCqnIby56l9fVVfanxVoS3OSpm8B3OtR1BgGz6lbSuHPculleT iZv5R9uITPOyofSY8qJvM/bzdevxrj8= -----END CERTIFICATE-----Generated at Sun Sep 7 21:29:15 2025 by rpki-client