$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa File: 8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa (raw, json) Hash identifier: 12xdQo6uQezdg+uSMStulacG62890mUNw+jWJFXR708= Subject key identifier: 36:68:F6:44:B5:8A:BA:6A:1C:30:0E:AD:5F:4E:50:7D:67:DB:31:B6 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0A1161750B47FD2F6B799F00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 13414 IP address blocks: 64.63.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:61:75:0b:47:fd:2f:6b:79:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=16a7a00a-cccd-4e33-a29e-a6620d50199e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:21:d5:c3:99:35:69:51:32:55:94:33:76: a9:a8:c5:5e:26:c3:db:c6:45:fc:fe:9f:c1:a2:1d: c0:c2:a9:b4:ab:c5:d4:74:fd:b6:a3:1a:e5:48:fb: 6f:f6:01:e3:7c:40:11:9e:ea:9c:f3:19:98:31:fa: 31:a2:45:1f:f7:33:42:eb:e8:3e:10:a1:75:bb:89: 3c:5c:f9:6a:eb:7d:10:49:0b:84:09:d0:82:c7:15: 15:31:f2:d3:8a:78:e9:5f:ce:ce:6f:2d:5c:0a:29: 90:e9:40:c0:4f:fc:a6:c8:b7:48:47:99:4c:d1:24: 2b:a8:f8:8c:18:03:e7:ef:38:4f:97:9d:e2:8f:0c: 07:ad:7a:35:38:b8:67:d8:50:6f:28:98:77:c6:14: c4:35:fb:a4:74:c2:12:95:3b:0a:9b:3b:4b:6e:30: b3:80:7b:66:5c:b1:cf:d8:b3:02:09:eb:9a:b9:6c: a2:a3:89:33:af:f5:0e:e9:a9:3d:34:c2:29:53:1f: a0:b6:4a:ac:11:2d:65:38:d9:ac:0c:1e:03:00:3f: 0a:52:27:b9:ef:81:9c:2a:f6:de:a1:18:73:80:6f: c1:72:ae:b3:f6:5f:f5:ed:70:9c:f5:5b:6c:9a:26: 3a:07:e9:36:f4:9d:2f:39:47:5d:96:cc:9c:00:bb: ad:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:68:F6:44:B5:8A:BA:6A:1C:30:0E:AD:5F:4E:50:7D:67:DB:31:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:74:fc:51:d6:e7:e4:63:18:64:74:3f:9e:4d:50:f9:2e:4a: 34:43:06:5b:27:bf:02:7a:7e:5f:c7:64:38:94:c8:72:3c:12: d7:ef:48:01:9e:36:97:7a:09:ae:92:fe:1e:ed:e9:2c:f1:25: d6:93:6a:60:92:9b:b5:b9:e3:7a:e4:ba:4c:6c:f2:0e:d9:e5: 52:3c:60:54:84:a0:50:c1:b2:dc:34:bc:ba:02:78:a6:db:b8: 2e:1d:c4:4d:f0:cc:21:bd:82:5d:a4:f9:d2:d7:6a:eb:94:4b: 0e:f5:da:bb:2a:ef:30:75:d7:e5:84:a5:88:88:11:19:59:3b: 8f:96:3d:13:74:dd:db:7e:5b:46:b4:cc:a1:62:11:01:c6:1f: 99:f1:72:2e:1c:27:06:c4:f1:85:c6:1b:d7:52:4e:c8:84:9e: 35:49:d3:ae:45:49:a4:9e:6b:1c:07:c3:46:7a:21:2b:ba:23: e7:f8:66:35:81:d0:86:6c:c4:9c:8f:06:cc:82:ac:d9:86:57: 2e:14:b2:10:26:a5:cb:57:43:2d:30:6d:dd:ae:94:8a:84:71: b1:b2:a3:eb:c3:b1:02:76:c0:87:74:99:5a:b6:06:01:f1:37: 5f:a4:ba:73:08:36:8f:c0:24:ea:7e:af:a9:56:89:4b:a7:1b: 98:81:89:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWF1C0f9L2t5nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MTZhN2EwMGEtY2NjZC00ZTMzLWEyOWUtYTY2MjBkNTAxOTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDUh1cOZNWlRMlWUM3apqMVeJsPbxkX8/p/B oh3Awqm0q8XUdP22oxrlSPtv9gHjfEARnuqc8xmYMfoxokUf9zNC6+g+EKF1u4k8 XPlq630QSQuECdCCxxUVMfLTinjpX87Oby1cCimQ6UDAT/ymyLdIR5lM0SQrqPiM GAPn7zhPl53ijwwHrXo1OLhn2FBvKJh3xhTENfukdMISlTsKmztLbjCzgHtmXLHP 2LMCCeuauWyio4kzr/UO6ak9NMIpUx+gtkqsES1lONmsDB4DAD8KUie574GcKvbe oRhzgG/Bcq6z9l/17XCc9VtsmiY6B+k29J0vOUddlsycALut1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZo9kS1irpqHDAOrV9OUH1n2zG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOGQ2YTk1ZGUtOGU4ZS0z YTEyLWFmMTAtNWI2ZTEzZWQ4N2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE10/FHW5+RjGGR0P55NUPkuSjRDBlsnvwJ6fl/HZDiUyHI8EtfvSAGe Npd6Ca6S/h7t6SzxJdaTamCSm7W543rkukxs8g7Z5VI8YFSEoFDBstw0vLoCeKbb uC4dxE3wzCG9gl2k+dLXauuUSw712rsq7zB11+WEpYiIERlZO4+WPRN03dt+W0a0 zKFiEQHGH5nxci4cJwbE8YXGG9dSTsiEnjVJ065FSaSeaxwHw0Z6ISu6I+f4ZjWB 0IZsxJyPBsyCrNmGVy4UshAmpctXQy0wbd2ulIqEcbGyo+vDsQJ2wId0mVq2BgHx N1+kunMINo/AJOp+r6lWiUunG5iBiQ8= -----END CERTIFICATE-----Generated at Sun Sep 7 21:30:34 2025 by rpki-client