$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/af590b3c-8428-3d18-b0dd-b2b2d73d82b3.roa File: af590b3c-8428-3d18-b0dd-b2b2d73d82b3.roa (raw, json) Hash identifier: TKNbWJ9OG3O4ydnOl8jtmQzALNrJbXoa0W/89d76ivQ= Subject key identifier: 8E:89:6C:21:E8:02:73:79:BE:5A:4D:97:0B:D5:2C:2C:15:E4:58:E5 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0746B538F8DD422A90D72400 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/af590b3c-8428-3d18-b0dd-b2b2d73d82b3.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 13414 IP address blocks: 64.63.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b5:38:f8:dd:42:2a:90:d7:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=82e20666-6a56-4a38-a640-b024697b47c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:ae:ad:91:ee:72:00:d6:da:7f:fa:28:6b: 42:a4:08:7f:62:40:1d:80:b6:b8:a3:30:88:96:de: 63:e8:25:23:d5:f8:6e:1b:ad:5e:9b:14:6c:37:b1: 80:c2:3f:71:9d:2b:4f:0a:d6:4b:44:34:07:aa:46: 0b:28:ad:fe:1d:16:a6:c3:19:7f:9c:f2:ad:a0:ca: 28:b3:97:54:2a:37:4c:41:c0:af:9b:e5:ff:c9:83: df:7d:8e:72:33:77:35:c0:cd:90:fc:3b:2d:56:76: ab:ce:41:09:aa:35:2a:29:7b:13:96:a7:92:e3:45: 63:04:81:32:24:2a:62:7e:98:4b:23:9f:36:5b:24: 02:4d:37:9f:28:5c:01:c2:38:57:a8:be:2a:60:32: f9:5d:51:70:b2:67:dc:eb:2c:9d:ac:a0:f6:58:15: 3d:3b:1d:4c:fb:9b:cc:37:88:b2:a9:d2:02:3e:c5: 8a:27:02:a7:5f:1f:e3:5c:f6:cd:e1:7f:89:e8:ba: 08:97:25:b3:d0:2a:c6:6a:b8:d5:ea:45:1f:f3:0d: 7f:75:02:7e:2d:ba:90:f6:6b:52:88:d3:0f:38:ab: a4:dc:33:64:8a:42:d7:3f:d5:37:a0:27:11:3e:b5: 9d:43:bf:12:34:3a:08:16:32:63:71:40:ce:eb:6a: 42:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:89:6C:21:E8:02:73:79:BE:5A:4D:97:0B:D5:2C:2C:15:E4:58:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/af590b3c-8428-3d18-b0dd-b2b2d73d82b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e3:ba:5d:f2:22:ec:95:a1:18:e4:cb:a7:97:19:b2:7f:16: 64:4a:59:88:fe:87:c5:1b:db:c5:af:23:97:c6:b9:83:bc:fd: a3:53:80:16:6e:35:97:75:92:8c:06:c3:01:17:04:3c:e1:81: 38:ea:1e:5e:7f:11:83:ad:c5:74:f1:aa:98:df:11:7a:a0:0d: 99:16:7f:f6:98:c2:5d:0b:dd:15:50:b4:56:3a:ac:13:64:6b: a4:3b:13:fc:2d:c4:4b:ac:ea:c8:ab:b7:55:51:61:03:2b:54: 47:47:e5:89:17:22:db:9a:cd:94:fa:87:aa:6d:51:e0:01:83: 44:28:09:d3:33:e2:d2:2a:75:2d:0f:74:64:b6:6d:e8:11:73: ec:b9:db:b7:ae:22:e3:62:47:38:d2:46:31:12:38:bf:90:be: 52:88:62:79:36:89:07:fb:cc:25:87:01:32:6e:38:05:df:24: 03:f5:c3:95:ff:98:f1:5b:bb:f4:a5:77:b0:4e:32:a0:03:74: 05:21:97:74:8b:8e:bd:32:4d:58:98:1d:48:b4:3a:c1:3c:96: 73:5a:93:a2:83:3a:6f:01:17:3e:ea:43:04:c2:da:77:95:b1: ca:a4:82:d5:da:e1:9f:5d:6c:6b:a1:a8:0d:c2:72:78:50:9f: 94:df:51:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrU4+N1CKpDXJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ODJlMjA2NjYtNmE1Ni00YTM4LWE2NDAtYjAyNDY5N2I0N2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOiurZHucgDW2n/6KGtCpAh/YkAdgLa4ozCI lt5j6CUj1fhuG61emxRsN7GAwj9xnStPCtZLRDQHqkYLKK3+HRamwxl/nPKtoMoo s5dUKjdMQcCvm+X/yYPffY5yM3c1wM2Q/DstVnarzkEJqjUqKXsTlqeS40VjBIEy JCpifphLI582WyQCTTefKFwBwjhXqL4qYDL5XVFwsmfc6yydrKD2WBU9Ox1M+5vM N4iyqdICPsWKJwKnXx/jXPbN4X+J6LoIlyWz0CrGarjV6kUf8w1/dQJ+LbqQ9mtS iNMPOKuk3DNkikLXP9U3oCcRPrWdQ78SNDoIFjJjcUDO62pCUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6JbCHoAnN5vlpNlwvVLCwV5FjlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYWY1OTBiM2MtODQyOC0z ZDE4LWIwZGQtYjJiMmQ3M2Q4MmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXjul3yIuyVoRjky6eXGbJ/FmRKWYj+h8Ub28WvI5fGuYO8/aNTgBZu NZd1kowGwwEXBDzhgTjqHl5/EYOtxXTxqpjfEXqgDZkWf/aYwl0L3RVQtFY6rBNk a6Q7E/wtxEus6sirt1VRYQMrVEdH5YkXItuazZT6h6ptUeABg0QoCdMz4tIqdS0P dGS2begRc+y527euIuNiRzjSRjESOL+QvlKIYnk2iQf7zCWHATJuOAXfJAP1w5X/ mPFbu/Sld7BOMqADdAUhl3SLjr0yTViYHUi0OsE8lnNak6KDOm8BFz7qQwTC2neV scqkgtXa4Z9dbGuhqA3CcnhQn5TfUfs= -----END CERTIFICATE-----Generated at Sun Sep 7 21:39:12 2025 by rpki-client