$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c3ac29bf-e89b-314f-95de-e9ba9ed1070f.roa File: c3ac29bf-e89b-314f-95de-e9ba9ed1070f.roa (raw, json) Hash identifier: JGhveguKQRX8UG/tJQNjHe4a7eFGimAgjMDrvVPboPc= Subject key identifier: AF:F8:FC:3C:B8:64:99:3B:8E:F6:36:AE:ED:49:BE:BA:CB:C7:BE:66 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0B76A0A9C9B15B1B5F024A00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c3ac29bf-e89b-314f-95de-e9ba9ed1070f.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 209.237.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a0:a9:c9:b1:5b:1b:5f:02:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=dc88386b-8ade-4fdb-9807-7440d5d0aa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:fd:9d:58:6d:bf:7f:72:f3:b6:d0:da:f8: 4e:24:d1:20:fb:bc:de:f6:b4:67:9d:45:99:59:56: 0d:09:64:e4:2c:84:00:e7:96:ac:c3:f1:39:1a:93: a2:b5:fd:56:f4:bb:2e:27:1d:17:2f:c4:14:85:02: 7a:5e:26:64:68:4c:a8:d8:c8:27:35:2a:c6:87:24: 74:f3:de:50:45:70:d6:3f:3a:a4:a4:6d:a9:f9:2c: 51:3c:1c:85:87:3b:0f:2d:4f:bf:5e:09:7e:09:c9: b5:1d:11:29:cf:86:6d:b6:74:c0:00:b5:0a:27:90: 9f:8d:bb:65:77:41:f1:a5:3e:4c:2a:02:82:b4:c2: 6d:ec:7e:0f:8e:24:55:bf:62:88:23:04:17:16:17: 06:57:ef:85:46:5e:f7:6e:33:b9:b1:8d:50:cc:b1: d4:95:25:0c:80:7d:89:af:27:85:b5:4b:92:cd:82: 18:0f:59:e9:ca:17:0e:6e:b9:b3:60:62:3f:ca:09: cb:55:de:6a:da:2b:ee:7c:4d:1b:d9:57:d3:fa:8c: d3:62:3d:5e:4c:00:b6:c2:ab:6d:b0:e9:63:30:c4: 77:c3:1e:62:7d:46:af:91:56:1f:5c:0a:35:46:c9: 2a:d1:8d:9a:fe:ba:b0:be:6b:82:b9:d4:d4:78:fc: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F8:FC:3C:B8:64:99:3B:8E:F6:36:AE:ED:49:BE:BA:CB:C7:BE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c3ac29bf-e89b-314f-95de-e9ba9ed1070f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:54:a9:e9:78:33:18:fe:f9:36:8a:28:f6:f6:2d:0a:dd:19: 04:07:df:2d:0b:05:4b:38:c6:8b:f7:86:6f:01:d5:64:9d:bd: 12:ee:a3:65:47:12:68:42:2a:45:ab:4e:58:86:b4:95:58:0f: 5e:e1:ce:ec:b6:15:62:8a:22:79:b3:2b:af:43:34:9e:7e:15: 62:3c:b7:e5:a5:a4:6f:f3:1e:0a:f7:ee:25:ec:03:71:5a:06: 47:66:d9:3c:f7:e4:55:11:ed:ac:80:bb:e8:ed:74:a5:3c:8a: 16:40:43:c8:09:90:35:6d:e7:f8:6d:d2:1e:ff:a4:6c:e4:50: 06:bb:85:4f:6e:bc:5f:ac:d5:e4:6a:e2:c5:75:a5:d4:d1:db: fc:45:f5:68:59:3f:e4:cc:89:e2:f6:7d:4c:ad:0a:7a:dc:c8: f8:4c:9c:63:b0:47:c5:29:d8:f6:08:83:07:84:99:be:42:88: 15:a7:60:6f:e3:55:a2:09:09:5d:6a:ee:b8:d8:64:ba:90:95: be:0b:15:16:68:d9:f4:f3:30:8c:e2:40:e3:f3:b2:dc:46:92: 3a:22:40:48:c5:b2:a6:d9:ac:9a:9f:83:7f:5f:74:d0:95:c0: b9:27:c1:56:38:c1:4c:dc:2d:24:fe:28:9a:51:c5:c5:4b:29: 84:bf:c7:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqCpybFbG18CSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZGM4ODM4NmItOGFkZS00ZmRiLTk4MDctNzQ0MGQ1ZDBhYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxH9nVhtv39y87bQ2vhOJNEg+7ze9rRnnUWZ WVYNCWTkLIQA55asw/E5GpOitf1W9LsuJx0XL8QUhQJ6XiZkaEyo2MgnNSrGhyR0 895QRXDWPzqkpG2p+SxRPByFhzsPLU+/Xgl+Ccm1HREpz4ZttnTAALUKJ5Cfjbtl d0HxpT5MKgKCtMJt7H4PjiRVv2KIIwQXFhcGV++FRl73bjO5sY1QzLHUlSUMgH2J ryeFtUuSzYIYD1npyhcObrmzYGI/ygnLVd5q2ivufE0b2VfT+ozTYj1eTAC2wqtt sOljMMR3wx5ifUavkVYfXAo1Rskq0Y2a/rqwvmuCudTUePxTIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/4/Dy4ZJk7jvY2ru1JvrrLx75mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYzNhYzI5YmYtZTg5Yi0z MTRmLTk1ZGUtZTliYTllZDEwNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFUqel4Mxj++TaKKPb2LQrdGQQH3y0LBUs4xov3hm8B1WSdvRLuo2VH EmhCKkWrTliGtJVYD17hzuy2FWKKInmzK69DNJ5+FWI8t+WlpG/zHgr37iXsA3Fa Bkdm2Tz35FUR7ayAu+jtdKU8ihZAQ8gJkDVt5/ht0h7/pGzkUAa7hU9uvF+s1eRq 4sV1pdTR2/xF9WhZP+TMieL2fUytCnrcyPhMnGOwR8Up2PYIgweEmb5CiBWnYG/j VaIJCV1q7rjYZLqQlb4LFRZo2fTzMIziQOPzstxGkjoiQEjFsqbZrJqfg39fdNCV wLknwVY4wUzcLST+KJpRxcVLKYS/x88= -----END CERTIFICATE-----Generated at Sun Nov 2 13:46:39 2025 by rpki-client