$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/966134d8-1fc4-30cd-a882-fabc6c02c9af.roa File: 966134d8-1fc4-30cd-a882-fabc6c02c9af.roa (raw, json) Hash identifier: UVcsPoM72nIV43XbDxqSTQd31TE1UQ8dcaCi6FQuxUo= Subject key identifier: 86:00:45:C3:25:D2:F3:9B:57:69:20:E9:72:F8:BD:2B:80:01:67:6A Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0B769E3D12B02170D8B718C0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/966134d8-1fc4-30cd-a882-fabc6c02c9af.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 209.237.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9e:3d:12:b0:21:70:d8:b7:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=928ec49e-4bc8-4e11-a471-064fb0095452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:50:fe:af:1f:ad:01:20:90:1a:68:b1:c9:10: d1:8a:38:2f:84:1f:cf:e6:05:52:d2:f0:e2:d5:29: 9d:09:1c:92:f8:f5:5f:32:b0:ab:bb:7f:8f:f7:62: d7:19:ab:9c:f0:5e:ef:63:c4:72:88:d9:7d:cc:4c: 66:34:b8:6d:d8:ac:20:7d:1f:94:ca:df:15:ff:73: 78:b5:1a:7b:5a:91:70:3a:64:40:dd:80:49:7c:44: f8:4e:99:e0:17:f4:be:01:08:c9:6f:ba:63:ec:ab: 96:93:6b:cb:10:11:6c:f4:2a:3b:5c:5b:af:71:f5: 34:62:df:19:8a:24:c3:99:81:b2:6f:d0:0b:46:f9: 39:72:09:39:30:c5:df:7a:ac:ec:bb:be:9a:e4:4c: 0f:68:6d:65:aa:a7:c2:e7:01:5f:03:99:93:3d:5d: 18:2f:b0:f7:23:23:c7:b9:1c:bf:a9:04:92:6b:b4: d0:00:78:f9:e6:40:f7:45:62:dc:09:99:66:f8:e3: 48:9a:44:20:bd:b9:66:68:8e:28:49:b1:a6:86:c8: f6:43:95:97:85:d8:bf:f9:d2:27:a1:18:fa:b2:b7: 95:e3:a0:d2:2a:d2:42:d1:fa:80:5a:f6:f8:fc:9a: e9:0a:f9:fe:35:51:e9:96:e7:61:5a:33:a7:ee:f4: ed:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:00:45:C3:25:D2:F3:9B:57:69:20:E9:72:F8:BD:2B:80:01:67:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/966134d8-1fc4-30cd-a882-fabc6c02c9af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:88:bc:5d:cb:fa:0d:21:7f:97:b2:b5:8b:52:f6:83:4a:87: 32:e0:3c:1d:67:9d:7b:17:29:88:20:c3:e8:96:95:4f:58:74: df:8c:07:81:35:24:ba:84:fa:e1:57:9e:f7:c4:4d:e8:ef:ee: db:bf:0e:be:98:67:bf:fd:af:ac:22:91:ac:8f:8c:1b:b9:6b: f2:4e:89:db:8e:5b:53:63:9e:89:03:bc:f3:e8:f9:e3:23:fe: 31:9c:2e:72:98:6a:8a:e1:c7:44:02:b7:02:ce:1e:a7:b4:7e: a5:e4:22:f8:fb:b5:f1:fb:4f:94:52:f0:94:3e:1f:15:4d:f3: c2:22:f0:18:2c:07:5b:98:40:a3:51:4c:3c:4a:52:ee:cf:d6: f4:ef:83:8f:0d:5f:21:a3:50:b0:f3:23:eb:df:37:0e:95:ec: e1:c5:11:2f:f3:ec:50:c8:3c:af:16:a1:0a:20:ae:53:e5:48: 4b:0d:77:93:ee:77:d3:5f:43:a8:db:76:c1:2a:c6:eb:a8:35: bf:8f:2d:59:72:31:7c:3f:bb:b4:55:0e:30:cf:92:a2:dc:d7: 29:79:3b:3b:ac:08:45:aa:05:ec:df:e9:99:ce:73:9c:c6:50: 7e:e1:60:bc:7a:f1:c2:74:82:a5:65:d6:e1:b1:80:36:f0:a1: 0a:4c:c0:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdp49ErAhcNi3GMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OTI4ZWM0OWUtNGJjOC00ZTExLWE0NzEtMDY0ZmIwMDk1NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFD+rx+tASCQGmixyRDRijgvhB/P5gVS0vDi 1SmdCRyS+PVfMrCru3+P92LXGauc8F7vY8RyiNl9zExmNLht2KwgfR+Uyt8V/3N4 tRp7WpFwOmRA3YBJfET4TpngF/S+AQjJb7pj7KuWk2vLEBFs9Co7XFuvcfU0Yt8Z iiTDmYGyb9ALRvk5cgk5MMXfeqzsu76a5EwPaG1lqqfC5wFfA5mTPV0YL7D3IyPH uRy/qQSSa7TQAHj55kD3RWLcCZlm+ONImkQgvblmaI4oSbGmhsj2Q5WXhdi/+dIn oRj6sreV46DSKtJC0fqAWvb4/JrpCvn+NVHpludhWjOn7vTt7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYARcMl0vObV2kg6XL4vSuAAWdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOTY2MTM0ZDgtMWZjNC0z MGNkLWE4ODItZmFiYzZjMDJjOWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyIvF3L+g0hf5eytYtS9oNKhzLgPB1nnXsXKYggw+iWlU9YdN+MB4E1 JLqE+uFXnvfETejv7tu/Dr6YZ7/9r6wikayPjBu5a/JOiduOW1NjnokDvPPo+eMj /jGcLnKYaorhx0QCtwLOHqe0fqXkIvj7tfH7T5RS8JQ+HxVN88Ii8BgsB1uYQKNR TDxKUu7P1vTvg48NXyGjULDzI+vfNw6V7OHFES/z7FDIPK8WoQogrlPlSEsNd5Pu d9NfQ6jbdsEqxuuoNb+PLVlyMXw/u7RVDjDPkqLc1yl5OzusCEWqBezf6ZnOc5zG UH7hYLx68cJ0gqVl1uGxgDbwoQpMwCg= -----END CERTIFICATE-----Generated at Sun Sep 7 21:30:33 2025 by rpki-client