$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/99cf3bf1-1b90-38a3-89a0-e0988ee8054a.roa File: 99cf3bf1-1b90-38a3-89a0-e0988ee8054a.roa (raw, json) Hash identifier: 5ExhyiNYgo8cxoqs0kNHt0/+A4RwSXKh4FEAwwmhInQ= Subject key identifier: CD:B4:9B:BC:CF:27:3B:27:80:CC:5B:80:7C:92:A6:F9:48:F4:B4:C2 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0A1161972686B1D0E5019F20 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/99cf3bf1-1b90-38a3-89a0-e0988ee8054a.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 13414 IP address blocks: 64.63.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:61:97:26:86:b1:d0:e5:01:9f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=0b1c66a2-b6c8-44c5-adef-c79118c4ad63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9c:65:02:13:2e:5c:7c:f4:89:86:44:7b:81: 73:27:eb:da:4d:bd:fd:bd:fd:23:43:8b:de:2c:ab: ef:88:01:28:2e:75:c9:69:58:60:71:2a:ff:d8:86: 01:13:71:8c:dc:d8:f9:9b:fb:6c:cc:9d:2d:06:36: 0e:f8:a2:17:3f:eb:aa:2d:7b:3d:bb:60:a1:45:e6: ee:11:9c:5c:c5:61:4b:e4:48:90:bf:69:32:63:1e: 31:3e:c1:f0:6d:0c:30:c9:13:c9:9b:f9:d0:fc:d3: 9b:a0:c9:f9:02:ea:16:ab:f6:26:84:48:7b:76:9c: f6:86:bc:1e:3c:19:d2:30:74:c5:26:b0:cb:30:f2: b2:35:54:54:5e:26:1c:d9:47:81:62:64:2c:50:8e: 1f:58:9f:2b:dc:30:33:7a:a5:96:12:28:a7:55:a9: f6:ce:a0:75:ac:b5:7b:a2:f1:c8:9a:df:18:65:89: 60:09:ff:ca:8f:d1:2b:4a:6d:cb:9b:1e:76:7e:40: c7:5c:8e:69:40:15:2f:11:e5:1e:6a:e9:93:df:8c: 60:35:f6:df:28:d8:aa:57:7e:b3:05:a9:a4:6e:fa: 3b:b7:e9:c8:dd:26:aa:62:d5:ab:c1:18:0a:7e:2c: ce:64:01:4f:9a:6e:5a:24:0a:4a:af:9a:98:cd:b4: e3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B4:9B:BC:CF:27:3B:27:80:CC:5B:80:7C:92:A6:F9:48:F4:B4:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/99cf3bf1-1b90-38a3-89a0-e0988ee8054a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0a:d7:ca:04:d0:8e:ce:1c:c0:5e:60:d4:58:d9:39:12:ed: 7c:63:86:47:d1:9b:a4:8c:80:82:65:58:8d:45:f9:08:1f:8d: b2:15:11:7b:57:42:22:dc:0a:03:88:44:3e:58:59:2a:3e:5c: 39:95:2a:df:7f:0a:94:cb:0b:2a:d5:d6:90:77:dc:1a:e1:21: 0a:55:8d:ea:89:93:5e:18:f8:32:d6:26:2e:c9:3e:02:a5:9f: 00:cf:d4:54:be:7f:6e:df:ba:03:98:f9:d9:f0:b3:27:69:d4: ed:13:96:f2:a2:aa:0b:c6:e7:44:94:43:e8:a2:ae:26:de:67: 9a:ff:b5:48:da:16:ff:18:bd:03:02:2f:ec:e2:ae:ff:30:69: ea:d0:7f:18:a8:25:04:d4:54:4b:6f:31:2c:41:33:d3:66:74: ba:5d:78:cc:90:b3:5b:47:46:66:bd:f8:49:91:6e:0b:5c:96: 11:02:f1:30:55:5b:04:a3:cd:dd:ec:e9:af:42:27:6f:b9:34: 98:95:ff:3b:43:b0:46:f3:94:f3:1f:8f:27:5d:c9:ed:52:56: 10:65:84:e2:51:26:22:f8:43:d5:5b:3c:a5:fb:5e:3c:e5:06: ae:53:47:a1:e5:f8:5a:13:de:34:46:16:4a:02:d0:a4:de:a1: f8:eb:5b:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWGXJoax0OUBnyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MGIxYzY2YTItYjZjOC00NGM1LWFkZWYtYzc5MTE4YzRhZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpxlAhMuXHz0iYZEe4FzJ+vaTb39vf0jQ4ve LKvviAEoLnXJaVhgcSr/2IYBE3GM3Nj5m/tszJ0tBjYO+KIXP+uqLXs9u2ChRebu EZxcxWFL5EiQv2kyYx4xPsHwbQwwyRPJm/nQ/NOboMn5AuoWq/YmhEh7dpz2hrwe PBnSMHTFJrDLMPKyNVRUXiYc2UeBYmQsUI4fWJ8r3DAzeqWWEiinVan2zqB1rLV7 ovHImt8YZYlgCf/Kj9ErSm3Lmx52fkDHXI5pQBUvEeUeaumT34xgNfbfKNiqV36z Bamkbvo7t+nI3SaqYtWrwRgKfizOZAFPmm5aJApKr5qYzbTjewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM20m7zPJzsngMxbgHySpvlI9LTCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOTljZjNiZjEtMWI5MC0z OGEzLTg5YTAtZTA5ODhlZTgwNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAK18oE0I7OHMBeYNRY2TkS7XxjhkfRm6SMgIJlWI1F+QgfjbIVEXtX QiLcCgOIRD5YWSo+XDmVKt9/CpTLCyrV1pB33BrhIQpVjeqJk14Y+DLWJi7JPgKl nwDP1FS+f27fugOY+dnwsydp1O0TlvKiqgvG50SUQ+iiribeZ5r/tUjaFv8YvQMC L+zirv8waerQfxioJQTUVEtvMSxBM9NmdLpdeMyQs1tHRma9+EmRbgtclhEC8TBV WwSjzd3s6a9CJ2+5NJiV/ztDsEbzlPMfjyddye1SVhBlhOJRJiL4Q9VbPKX7Xjzl Bq5TR6Hl+FoT3jRGFkoC0KTeofjrW0g= -----END CERTIFICATE-----Generated at Sun Sep 7 21:31:49 2025 by rpki-client