$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a420750c-a5d8-3043-b838-9eefcf7cad52.roa File: a420750c-a5d8-3043-b838-9eefcf7cad52.roa (raw, json) Hash identifier: aL9B3u1cI6xPx+NpHLOQ/Iy1yxiZcaEtF0egPas3LWI= Subject key identifier: E4:7E:E2:A4:78:1B:33:80:E5:48:A6:8F:D0:02:9E:39:D2:CC:D3:D5 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0A1162CBA62E77860FBC1500 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a420750c-a5d8-3043-b838-9eefcf7cad52.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 13414 IP address blocks: 64.63.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:62:cb:a6:2e:77:86:0f:bc:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=70867a9b-b043-44d5-bc6d-96ddad9bbf30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:cf:d2:59:09:ed:98:d1:a7:53:6c:cb:7a: 4c:b1:ae:e3:55:38:e0:55:c9:26:39:ba:4d:df:f5: ad:b3:69:40:d9:d8:46:06:d7:67:09:7e:6b:77:2d: 96:8b:3a:55:8c:90:eb:7e:3a:a8:b4:ed:42:24:3c: c5:28:c2:6e:92:50:46:f3:30:6d:dd:ac:a1:34:2c: b6:4f:26:d3:d4:c0:b6:0b:f8:79:91:0d:e1:13:54: 70:79:d5:4b:32:94:6e:09:f7:c5:b9:ef:12:a5:c5: 34:24:71:9b:f9:3d:0b:11:10:f9:bb:a6:a6:51:e4: ba:c0:f2:74:e3:97:5b:32:1b:60:e1:65:f9:7c:87: de:71:6b:ce:a5:c2:cd:ad:fc:40:e5:ac:02:35:ae: 49:ec:ec:e4:88:bd:d6:23:8b:30:45:6d:63:d4:69: cb:3a:7e:71:2f:4f:86:06:8e:c9:3f:9a:d3:e1:8b: bc:b5:81:55:2d:ef:61:a6:7c:3f:ff:03:08:55:00: 56:07:f6:99:c1:b3:30:5a:a1:ca:1f:63:db:88:f8: da:8b:f5:c5:fc:25:5a:06:33:ea:56:51:08:f5:c9: 02:04:e2:74:b5:d0:68:93:a1:89:ba:7a:50:11:f6: 2b:d4:b4:e5:78:42:89:34:89:ae:9b:51:67:6f:38: 39:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7E:E2:A4:78:1B:33:80:E5:48:A6:8F:D0:02:9E:39:D2:CC:D3:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a420750c-a5d8-3043-b838-9eefcf7cad52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f2:11:e8:0f:c2:6c:6d:f8:fe:d6:b0:72:aa:10:9e:a0:f9: 6b:51:0e:10:47:cc:3e:80:02:25:0d:e5:74:9f:95:de:e0:7c: 1c:83:51:3c:ae:97:5d:be:d7:9b:dd:b7:eb:2f:7f:74:a9:01: ad:ca:31:e5:ea:e0:f5:78:7e:b9:5c:39:32:db:80:04:1d:87: eb:33:ad:ff:02:b8:23:01:36:b1:87:1f:b7:76:b2:75:6b:45: b8:bd:44:b2:7b:26:b7:da:fe:f0:3c:fc:fc:cf:53:7f:5f:0d: 8c:f9:9a:9c:94:82:b0:8d:7c:f5:4a:14:fd:52:8e:f3:8f:60: f6:4e:8b:0b:ca:cd:64:f9:07:e5:0a:53:70:d1:42:68:5c:87: ae:a7:80:3e:b7:60:40:86:37:11:d7:82:d3:73:7c:d5:c7:0a: 62:c6:18:5d:db:74:41:5d:e2:b6:31:9b:91:b4:69:0a:49:c7: 32:5b:d7:f0:f3:c8:21:e9:db:cc:b2:4f:a3:eb:23:87:50:15: 06:95:f9:46:1d:72:7f:50:dc:2d:34:30:ed:97:27:6a:54:f4: db:a8:27:83:4d:0c:9f:c1:3a:ed:fa:a9:e8:b9:81:ae:03:3e: d0:f4:89:59:43:41:46:17:94:7a:f6:37:1e:41:3a:d7:71:02: ec:db:d1:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWLLpi53hg+8FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NzA4NjdhOWItYjA0My00NGQ1LWJjNmQtOTZkZGFkOWJiZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnvP0lkJ7ZjRp1Nsy3pMsa7jVTjgVckmObpN 3/Wts2lA2dhGBtdnCX5rdy2WizpVjJDrfjqotO1CJDzFKMJuklBG8zBt3ayhNCy2 TybT1MC2C/h5kQ3hE1RwedVLMpRuCffFue8SpcU0JHGb+T0LERD5u6amUeS6wPJ0 45dbMhtg4WX5fIfecWvOpcLNrfxA5awCNa5J7OzkiL3WI4swRW1j1GnLOn5xL0+G Bo7JP5rT4Yu8tYFVLe9hpnw//wMIVQBWB/aZwbMwWqHKH2PbiPjai/XF/CVaBjPq VlEI9ckCBOJ0tdBok6GJunpQEfYr1LTleEKJNImum1Fnbzg5GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOR+4qR4GzOA5Uimj9ACnjnSzNPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYTQyMDc1MGMtYTVkOC0z MDQzLWI4MzgtOWVlZmNmN2NhZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD82MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAryEegPwmxt+P7WsHKqEJ6g+WtRDhBHzD6AAiUN5XSfld7gfByDUTyu l12+15vdt+svf3SpAa3KMeXq4PV4frlcOTLbgAQdh+szrf8CuCMBNrGHH7d2snVr Rbi9RLJ7Jrfa/vA8/PzPU39fDYz5mpyUgrCNfPVKFP1SjvOPYPZOiwvKzWT5B+UK U3DRQmhch66ngD63YECGNxHXgtNzfNXHCmLGGF3bdEFd4rYxm5G0aQpJxzJb1/Dz yCHp28yyT6PrI4dQFQaV+UYdcn9Q3C00MO2XJ2pU9NuoJ4NNDJ/BOu36qei5ga4D PtD0iVlDQUYXlHr2Nx5BOtdxAuzb0b8= -----END CERTIFICATE-----Generated at Sun Nov 2 13:41:57 2025 by rpki-client