$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa File: a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa (raw, json) Hash identifier: ASpGhuWM6vET85JkTaPyXtXVLELypeODmQgMGI4ItqI= Subject key identifier: B1:4B:F1:57:0B:EF:17:F6:73:F3:C3:DE:40:A8:66:79:97:9F:F5:17 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0B76A0657D19828C838EF000 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 209.237.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a0:65:7d:19:82:8c:83:8e:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=17495d32-64fe-438c-8c19-564855549ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:f7:35:3f:0e:40:7b:23:19:98:03:68:9e: 96:32:a8:c7:0b:f3:d9:a2:60:a4:0b:ec:71:3f:f6: 64:62:53:da:aa:e8:20:61:3f:bd:7d:60:37:a9:5f: ae:01:71:ec:50:cd:6a:2c:c3:f5:7e:1a:c8:fa:36: 60:a5:63:5c:a7:d1:2c:36:26:e0:ce:c8:e4:d5:d9: 4e:11:54:f5:95:c4:bc:85:f6:23:7a:52:ea:28:5c: 6b:21:17:c3:e1:64:ef:75:49:ec:85:9a:eb:57:d4: 28:0f:cc:79:20:c3:24:64:fa:3f:cd:0a:82:63:5f: d4:01:6f:4e:17:23:9e:bc:aa:3b:58:95:c9:00:5a: 8e:af:7e:0f:98:37:d7:31:7a:ea:86:33:9e:fe:ed: b1:fd:62:4d:91:30:44:4c:98:17:a9:ef:08:6e:bb: a5:0e:90:ce:e5:ef:4c:bd:df:9c:89:c1:0e:7e:a6: fc:a5:38:97:1b:5d:d3:e2:35:4c:9d:91:88:66:2a: 1d:be:f0:05:b4:a4:a9:70:32:87:ad:50:1b:b9:be: bb:1c:1f:f5:d5:3f:5f:c2:d1:d2:d6:aa:e5:c8:21: 7f:5f:58:bd:8b:08:ff:af:98:eb:51:7a:e0:fa:6f: 50:d5:5d:e3:ec:ab:24:78:2e:a5:79:42:c8:d4:34: a9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4B:F1:57:0B:EF:17:F6:73:F3:C3:DE:40:A8:66:79:97:9F:F5:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:12:49:81:c2:76:ec:f9:60:d4:78:87:97:c5:e1:7f:34:4f: d8:07:67:91:9e:25:9b:cb:49:84:02:d1:47:b2:d5:6d:6d:65: 51:c3:9c:95:28:32:02:9f:04:c8:f0:75:e0:ec:3a:6b:75:b0: 78:da:88:9f:94:06:d0:7f:ce:12:b4:51:1f:37:df:0a:3a:38: d2:d3:b4:66:a1:5f:91:a0:d1:c3:e2:90:3c:8e:7f:51:e0:ab: 06:00:58:6c:3d:60:1b:3b:b8:30:20:f7:bd:b7:ff:f1:37:99: 45:49:74:28:2f:62:55:d9:c7:44:64:67:86:01:fb:c2:2d:15: bf:41:40:10:65:43:ae:47:5b:34:f3:a2:51:f0:ff:46:e6:04: ad:c8:7b:b2:c6:db:79:1d:df:b3:b7:4f:00:ce:d0:4c:42:40: c5:bc:9b:f8:e3:e5:87:97:82:46:dc:3c:4c:b3:a3:49:ca:5f: 27:af:f6:0c:5e:7d:85:7c:0f:e5:51:c6:4d:60:4e:95:3a:fe: d8:e5:51:56:44:30:f7:ba:b7:d5:17:10:49:93:72:3a:86:9a: c8:9a:ce:04:88:38:11:d0:47:bd:fa:55:df:a1:9f:1d:14:90: 28:38:4c:17:65:ed:54:68:d6:3f:d7:13:34:f6:6d:fb:1f:aa: 7f:d9:71:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqBlfRmCjIOO8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MTc0OTVkMzItNjRmZS00MzhjLThjMTktNTY0ODU1NTQ5ZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWD3NT8OQHsjGZgDaJ6WMqjHC/PZomCkC+xx P/ZkYlPaquggYT+9fWA3qV+uAXHsUM1qLMP1fhrI+jZgpWNcp9EsNibgzsjk1dlO EVT1lcS8hfYjelLqKFxrIRfD4WTvdUnshZrrV9QoD8x5IMMkZPo/zQqCY1/UAW9O FyOevKo7WJXJAFqOr34PmDfXMXrqhjOe/u2x/WJNkTBETJgXqe8IbrulDpDO5e9M vd+cicEOfqb8pTiXG13T4jVMnZGIZiodvvAFtKSpcDKHrVAbub67HB/11T9fwtHS 1qrlyCF/X1i9iwj/r5jrUXrg+m9Q1V3j7KskeC6leULI1DSp7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFL8VcL7xf2c/PD3kCoZnmXn/UXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYThjNDcwZGQtNDBhMi0z ZmFhLTg3ZDgtYTk1MWZhZjNkOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoSSYHCduz5YNR4h5fF4X80T9gHZ5GeJZvLSYQC0Uey1W1tZVHDnJUo MgKfBMjwdeDsOmt1sHjaiJ+UBtB/zhK0UR833wo6ONLTtGahX5Gg0cPikDyOf1Hg qwYAWGw9YBs7uDAg9723//E3mUVJdCgvYlXZx0RkZ4YB+8ItFb9BQBBlQ65HWzTz olHw/0bmBK3Ie7LG23kd37O3TwDO0ExCQMW8m/jj5YeXgkbcPEyzo0nKXyev9gxe fYV8D+VRxk1gTpU6/tjlUVZEMPe6t9UXEEmTcjqGmsiazgSIOBHQR736Vd+hnx0U kCg4TBdl7VRo1j/XEzT2bfsfqn/ZcfU= -----END CERTIFICATE-----Generated at Sun Sep 7 21:29:12 2025 by rpki-client