$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/cff8125a-573d-30a3-b0e6-78084c6d9bb7.roa File: cff8125a-573d-30a3-b0e6-78084c6d9bb7.roa (raw, json) Hash identifier: YILrtXkU7+NKeI7gd3G/0gqZai8vynHqjyQQfAOi+aQ= Subject key identifier: 77:68:C3:62:48:CB:4F:28:16:16:99:8A:D2:59:CC:DC:81:E4:3A:8E Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0746B54BEBDAF697535EF820 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/cff8125a-573d-30a3-b0e6-78084c6d9bb7.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 13414 IP address blocks: 64.63.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b5:4b:eb:da:f6:97:53:5e:f8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=e23a984d-937c-466b-b03f-e97bb85e3414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:13:86:bb:2f:4d:68:2c:9a:a6:59:27:9c:00: d2:c9:46:18:ab:d5:ab:53:0f:a4:13:2e:2c:bb:42: 0d:79:ec:5b:16:d0:43:a7:ab:a7:71:5d:38:ba:24: d9:88:e8:41:a8:f1:d3:ce:ef:d4:2a:c5:57:ad:05: 91:f9:8a:de:1d:94:9a:dc:0c:0c:49:ad:b2:9f:e0: 43:9c:b6:74:bf:5f:ab:5c:9e:78:3d:75:4d:65:c3: 96:15:6e:90:6d:63:9e:d9:c0:1a:91:2e:10:d2:c1: 9b:0b:bf:5d:b2:90:16:5e:e7:52:b3:79:88:ab:ab: 24:e0:bf:84:3c:62:3d:f1:89:24:47:24:11:c3:bb: af:ff:7f:bb:74:e2:0a:64:bf:d9:6a:9b:6d:06:24: 73:7c:1c:d5:1a:4d:33:85:ce:b0:18:17:38:35:c5: b7:01:a1:5a:6d:01:c9:e1:d3:33:e1:aa:c2:17:a7: 71:4a:b6:4b:08:bb:57:cf:25:e4:0c:c5:fd:f9:4b: 93:a0:50:b2:d0:5b:46:f8:6b:94:6a:2d:d6:a1:ca: c9:fb:89:d5:e0:11:af:d0:4b:6d:74:39:b4:c5:bd: c9:32:87:5f:98:58:f6:78:f1:6b:b5:51:e9:bf:a7: 07:5a:83:51:17:24:2e:42:0d:e4:05:4b:1e:e5:03: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:68:C3:62:48:CB:4F:28:16:16:99:8A:D2:59:CC:DC:81:E4:3A:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/cff8125a-573d-30a3-b0e6-78084c6d9bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:47:aa:1d:9b:b3:c1:46:78:4e:5f:46:ac:c8:db:43:16:17: 1e:eb:c1:29:f2:be:a1:06:40:ab:78:ec:8c:ce:95:54:75:92: a9:c5:53:0b:44:68:96:e3:94:e0:11:d2:cb:1d:23:06:42:8d: 98:42:f8:88:87:f5:ee:58:ff:5a:41:18:aa:65:4b:4b:a3:4e: fd:2b:6b:3b:52:f5:89:54:11:43:fc:3a:2e:f9:f3:bc:ae:d5: 3d:8d:67:49:57:b2:f8:1d:a5:bb:1f:a8:09:1c:b1:a4:a7:9e: 18:af:15:49:04:5c:bd:d1:6f:a6:0d:72:44:75:5b:71:4a:98: 56:a9:57:ed:a9:70:ba:c4:a7:a9:de:6d:a0:7f:63:53:fd:76: 95:5a:25:95:9f:90:a5:6b:6a:1b:d9:75:9d:11:ed:38:2f:ab: 50:fc:59:f0:a5:51:0b:0b:f7:e1:f6:06:51:86:79:b1:3f:13: 82:26:fe:f3:20:c7:ff:7a:5f:1a:c3:1c:2f:32:b5:a5:bf:92: 50:5d:e1:c1:28:0b:af:99:45:19:62:52:c2:90:42:03:41:23: c8:44:eb:33:45:48:5e:e8:e3:40:d7:ac:a0:3b:59:3a:33:51: dc:27:fc:15:f5:48:54:9d:57:c0:c1:f1:f3:0f:67:a8:e1:97: b3:3d:1f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrVL69r2l1Ne+CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZTIzYTk4NGQtOTM3Yy00NjZiLWIwM2YtZTk3YmI4NWUzNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmROGuy9NaCyaplknnADSyUYYq9WrUw+kEy4s u0INeexbFtBDp6uncV04uiTZiOhBqPHTzu/UKsVXrQWR+YreHZSa3AwMSa2yn+BD nLZ0v1+rXJ54PXVNZcOWFW6QbWOe2cAakS4Q0sGbC79dspAWXudSs3mIq6sk4L+E PGI98YkkRyQRw7uv/3+7dOIKZL/ZapttBiRzfBzVGk0zhc6wGBc4NcW3AaFabQHJ 4dMz4arCF6dxSrZLCLtXzyXkDMX9+UuToFCy0FtG+GuUai3WocrJ+4nV4BGv0Ett dDm0xb3JModfmFj2ePFrtVHpv6cHWoNRFyQuQg3kBUse5QPfIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdow2JIy08oFhaZitJZzNyB5DqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvY2ZmODEyNWEtNTczZC0z MGEzLWIwZTYtNzgwODRjNmQ5YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRHqh2bs8FGeE5fRqzI20MWFx7rwSnyvqEGQKt47IzOlVR1kqnFUwtE aJbjlOAR0ssdIwZCjZhC+IiH9e5Y/1pBGKplS0ujTv0raztS9YlUEUP8Oi7587yu 1T2NZ0lXsvgdpbsfqAkcsaSnnhivFUkEXL3Rb6YNckR1W3FKmFapV+2pcLrEp6ne baB/Y1P9dpVaJZWfkKVrahvZdZ0R7Tgvq1D8WfClUQsL9+H2BlGGebE/E4Im/vMg x/96XxrDHC8ytaW/klBd4cEoC6+ZRRliUsKQQgNBI8hE6zNFSF7o40DXrKA7WToz Udwn/BX1SFSdV8DB8fMPZ6jhl7M9H3M= -----END CERTIFICATE-----Generated at Sun Sep 7 21:30:34 2025 by rpki-client