$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ccc992d6-e674-3131-9db3-7f559c253cdc.roa File: ccc992d6-e674-3131-9db3-7f559c253cdc.roa (raw, json) Hash identifier: Nm7HcCDSzQF/LVY+0hr9hX+IRNkHi8nUF3/T6TdHe9M= Subject key identifier: 82:D4:75:34:71:E2:7C:04:82:91:61:CF:5E:BE:E4:42:68:9D:28:EB Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0B769E298C14362994094B00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ccc992d6-e674-3131-9db3-7f559c253cdc.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 209.237.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9e:29:8c:14:36:29:94:09:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=9ebfaad5-744b-426c-9f22-d0b245039805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cd:11:9f:61:58:36:d0:1a:00:e7:50:17:59: e1:da:18:96:79:d9:db:45:48:c1:ef:9f:46:34:cb: 93:d1:b6:67:4d:f9:6e:2c:ec:cb:b9:6d:b3:4e:e9: bd:7c:8d:43:20:1b:24:d9:81:b6:fe:9b:78:22:bf: c4:e6:2f:fe:df:79:b1:96:82:bf:38:d6:10:83:0d: c9:d8:76:61:b4:0e:c6:50:d1:2a:1f:d7:e7:09:a4: f3:7c:e3:dc:61:9d:fd:2a:ff:2d:86:26:5e:2f:4a: 5c:63:b1:2e:85:f7:ff:45:21:a1:53:61:ba:f4:96: a3:46:e1:94:44:00:30:d9:39:58:bc:15:18:03:5b: 64:1c:5b:89:63:cb:17:bc:7d:52:eb:f1:2a:03:0c: 2f:ca:91:b3:2a:a1:db:63:f0:bb:9c:51:36:0b:0d: 84:2e:54:7c:5a:4d:01:a2:76:b5:7a:06:5b:aa:6a: 4a:d9:b0:4f:61:b1:e0:9f:b5:9a:87:06:e5:7f:7f: ba:00:38:e0:2e:11:cf:04:2d:96:72:f7:bb:03:eb: 4c:9a:59:37:b7:ec:33:e4:47:a3:a4:d5:ec:4f:19: 9d:e7:a1:42:72:a5:72:05:99:c4:ff:ed:9d:11:08: 18:e9:04:fa:74:d4:c6:ef:f0:35:b4:a8:a8:9e:45: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D4:75:34:71:E2:7C:04:82:91:61:CF:5E:BE:E4:42:68:9D:28:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ccc992d6-e674-3131-9db3-7f559c253cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:19:2f:c4:c7:9e:c3:00:f1:10:16:40:0d:79:25:07:26:85: ef:f1:74:07:23:ce:77:37:6e:b8:59:7e:08:3f:56:6f:fd:57: 3e:2c:5f:f9:35:9b:d5:46:e4:d7:bb:94:3b:dc:b4:88:12:4b: 59:6d:58:33:13:09:32:93:41:ca:c4:4c:6f:0a:71:69:c1:a3: d9:cb:72:07:57:1e:92:ed:44:16:4e:a7:f3:97:dd:f2:01:f2: 07:96:54:5e:1c:be:a2:2a:7e:95:3a:1b:9c:30:bc:9d:10:cd: f6:2b:fe:53:9e:74:31:bd:ed:8d:76:9b:cd:50:93:2a:d5:b4: 3b:9f:f7:ba:91:11:c1:17:1e:3e:37:d4:63:a2:5d:c5:74:43: f9:40:f1:90:9a:78:64:b0:04:e7:da:8b:c1:a9:09:71:77:15: 61:51:9d:ed:5b:40:91:c8:e7:b2:e2:e8:ef:55:ed:57:f7:cf: de:d0:5d:4a:00:38:4c:da:13:23:8b:a9:ac:d1:6b:2a:d8:89: 4f:7e:23:f0:b7:3a:b5:76:a3:85:13:a9:40:38:aa:b7:3b:d0: 24:cc:c0:0f:c2:b4:62:33:5f:3b:bb:65:15:cc:a0:0a:7a:0e: 68:ce:84:84:e8:27:ec:0b:3c:39:5c:e3:7a:c3:7f:d6:99:75: 20:c1:58:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdp4pjBQ2KZQJSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OWViZmFhZDUtNzQ0Yi00MjZjLTlmMjItZDBiMjQ1MDM5ODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps0Rn2FYNtAaAOdQF1nh2hiWednbRUjB759G NMuT0bZnTfluLOzLuW2zTum9fI1DIBsk2YG2/pt4Ir/E5i/+33mxloK/ONYQgw3J 2HZhtA7GUNEqH9fnCaTzfOPcYZ39Kv8thiZeL0pcY7Euhff/RSGhU2G69JajRuGU RAAw2TlYvBUYA1tkHFuJY8sXvH1S6/EqAwwvypGzKqHbY/C7nFE2Cw2ELlR8Wk0B ona1egZbqmpK2bBPYbHgn7Wahwblf3+6ADjgLhHPBC2Wcve7A+tMmlk3t+wz5Eej pNXsTxmd56FCcqVyBZnE/+2dEQgY6QT6dNTG7/A1tKionkUmiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILUdTRx4nwEgpFhz16+5EJonSjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvY2NjOTkyZDYtZTY3NC0z MTMxLTlkYjMtN2Y1NTljMjUzY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEZL8THnsMA8RAWQA15JQcmhe/xdAcjznc3brhZfgg/Vm/9Vz4sX/k1 m9VG5Ne7lDvctIgSS1ltWDMTCTKTQcrETG8KcWnBo9nLcgdXHpLtRBZOp/OX3fIB 8geWVF4cvqIqfpU6G5wwvJ0QzfYr/lOedDG97Y12m81QkyrVtDuf97qREcEXHj43 1GOiXcV0Q/lA8ZCaeGSwBOfai8GpCXF3FWFRne1bQJHI57Li6O9V7Vf3z97QXUoA OEzaEyOLqazRayrYiU9+I/C3OrV2o4UTqUA4qrc70CTMwA/CtGIzXzu7ZRXMoAp6 DmjOhIToJ+wLPDlc43rDf9aZdSDBWJQ= -----END CERTIFICATE-----Generated at Sun Sep 7 21:31:49 2025 by rpki-client