$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/91f0db5a-4400-3591-af55-e22c5016a52d.roa File: 91f0db5a-4400-3591-af55-e22c5016a52d.roa (raw, json) Hash identifier: evCiwYJCEMSVoAP/8FT1/rGOZcHPcFux8mfEU0/c+iA= Subject key identifier: BA:20:E5:A7:03:88:C2:DE:E2:16:B4:51:A8:4F:87:55:1C:0F:92:67 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0B769E5466C9A34B592CAB00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/91f0db5a-4400-3591-af55-e22c5016a52d.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 209.237.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9e:54:66:c9:a3:4b:59:2c:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=ce0a1a6f-439b-491a-b06d-0f6108a94b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:86:7c:73:ba:48:32:1f:f5:8a:d6:1e:5c: 99:08:40:a4:52:85:c7:0c:d7:05:73:46:7d:bc:2b: f3:07:4d:bb:34:44:a0:c5:93:52:b4:de:c5:b8:b0: 93:91:d8:8b:3d:3b:1e:9f:db:27:cd:74:83:19:1e: d8:02:c0:3e:34:69:0e:b5:2a:96:6e:8f:db:e1:82: f1:b5:2d:a4:76:9d:5b:73:62:d4:b8:7d:be:2c:4b: 6f:dd:ca:db:bf:86:c5:d7:b8:71:c3:98:b7:ee:6b: d5:83:3a:63:53:ab:8c:5c:44:f3:83:bf:22:e6:3c: a4:59:76:35:a0:48:85:f3:1e:e0:e8:b3:3f:8c:be: 77:73:25:b8:b2:18:fa:8a:fe:e4:1c:9c:f5:6b:6d: cf:7e:91:6c:16:10:3b:46:9d:d0:bc:71:71:a5:ee: da:f0:8c:6f:29:d1:1f:68:dc:bc:10:19:f0:fc:39: 75:28:fb:b0:0b:78:11:93:90:64:0b:94:56:8c:fa: 86:13:69:b7:96:10:ca:e9:92:23:e8:36:1a:aa:de: da:4f:dc:86:03:33:8c:ae:e2:9f:2c:30:ab:5d:65: 73:74:ba:49:ef:6c:8d:b9:d1:97:1b:b0:45:b3:7f: ec:b4:c6:86:db:3f:59:c3:9c:90:20:8d:be:98:39: 81:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:20:E5:A7:03:88:C2:DE:E2:16:B4:51:A8:4F:87:55:1C:0F:92:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/91f0db5a-4400-3591-af55-e22c5016a52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:4b:ba:85:68:43:11:c9:c9:00:f4:53:e3:55:8e:bf:0f:84: fc:06:4c:a2:c1:24:ec:af:2e:9f:95:46:eb:f6:c2:cd:9d:91: c5:da:0c:46:b5:a2:ea:73:e1:8d:b8:b1:14:1e:7d:87:a2:2a: 8e:1c:93:ca:38:3f:16:2d:e7:a2:e0:bc:75:85:dc:b2:af:b1: de:85:e9:23:c4:44:75:68:f9:83:4e:ba:cb:e4:5a:e0:2f:85: 53:62:9d:cf:ee:44:69:e9:0a:04:02:df:84:6e:6b:d9:82:48: 67:b5:c1:e7:a1:b3:e0:42:df:be:58:a2:88:b0:6d:58:88:72: 93:09:b2:30:ad:55:a1:e4:a5:dd:1e:93:c5:ce:1c:6f:e6:b1: fd:7b:c2:b0:af:d1:4c:e9:3c:32:a1:61:5e:25:cd:b0:80:45: 99:af:b9:24:5d:c4:99:e4:2d:02:22:88:6d:f1:3c:44:c9:f7: 52:b6:13:7f:8b:2b:c9:25:f1:5b:2b:1d:bd:28:ca:8b:7c:15: 50:7c:4d:b2:d1:24:18:11:21:86:a6:97:fb:89:63:c6:d8:18: b7:3a:1e:c4:e3:8f:4d:52:2b:53:5f:e1:3e:14:0e:b0:5a:1f: 9d:4c:03:1a:98:4a:19:ca:d1:a9:35:49:8b:b6:3c:1c:2f:7a: 82:e3:b7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdp5UZsmjS1ksqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk Y2UwYTFhNmYtNDM5Yi00OTFhLWIwNmQtMGY2MTA4YTk0YjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF6GfHO6SDIf9YrWHlyZCECkUoXHDNcFc0Z9 vCvzB027NESgxZNStN7FuLCTkdiLPTsen9snzXSDGR7YAsA+NGkOtSqWbo/b4YLx tS2kdp1bc2LUuH2+LEtv3crbv4bF17hxw5i37mvVgzpjU6uMXETzg78i5jykWXY1 oEiF8x7g6LM/jL53cyW4shj6iv7kHJz1a23PfpFsFhA7Rp3QvHFxpe7a8IxvKdEf aNy8EBnw/Dl1KPuwC3gRk5BkC5RWjPqGE2m3lhDK6ZIj6DYaqt7aT9yGAzOMruKf LDCrXWVzdLpJ72yNudGXG7BFs3/stMaG2z9Zw5yQII2+mDmBZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLog5acDiMLe4ha0UahPh1UcD5JnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOTFmMGRiNWEtNDQwMC0z NTkxLWFmNTUtZTIyYzUwMTZhNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlLuoVoQxHJyQD0U+NVjr8PhPwGTKLBJOyvLp+VRuv2ws2dkcXaDEa1 oupz4Y24sRQefYeiKo4ck8o4PxYt56LgvHWF3LKvsd6F6SPERHVo+YNOusvkWuAv hVNinc/uRGnpCgQC34Rua9mCSGe1weehs+BC375YooiwbViIcpMJsjCtVaHkpd0e k8XOHG/msf17wrCv0UzpPDKhYV4lzbCARZmvuSRdxJnkLQIiiG3xPETJ91K2E3+L K8kl8VsrHb0oyot8FVB8TbLRJBgRIYaml/uJY8bYGLc6HsTjj01SK1Nf4T4UDrBa H51MAxqYShnK0ak1SYu2PBwveoLjtx8= -----END CERTIFICATE-----Generated at Sun Sep 7 21:34:35 2025 by rpki-client