$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d44ca5a0-4244-33e6-b6bf-c220a94ee74b.roa File: d44ca5a0-4244-33e6-b6bf-c220a94ee74b.roa (raw, json) Hash identifier: BgfErhHDMwVwBv9WYyRn38z8kAlPOfEZ7hMb89KOERA= Subject key identifier: 40:ED:E6:29:F4:F3:BF:F8:47:FB:C9:2B:AF:FA:D5:87:BF:5C:77:93 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0B76A0963E86DE6F2A6FFF90 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d44ca5a0-4244-33e6-b6bf-c220a94ee74b.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 209.237.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a0:96:3e:86:de:6f:2a:6f:ff:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=a03acdc2-24ff-4de8-a68f-f0efcd0b0e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:90:98:59:56:1e:ea:53:0a:03:8d:5a:5d:dd: ab:31:d7:72:82:06:b1:86:5a:9f:e0:e6:3c:97:3e: ed:35:5a:bd:c2:f4:d9:ba:b6:38:3b:30:97:71:72: 77:6e:87:58:ad:41:d2:17:ad:94:40:94:e6:5f:55: 25:b7:27:c1:af:e2:01:d8:03:14:34:41:39:e9:dd: bd:46:0b:19:88:91:c8:72:d5:59:29:f2:57:32:f2: 14:2f:f6:e4:07:43:de:4d:9c:cd:f2:ff:58:ab:6a: 0f:29:b1:b3:bf:0c:a9:c1:1b:91:65:82:e7:97:65: 86:bc:b5:ed:00:5d:56:69:bf:af:c5:f2:26:32:d0: 48:ee:20:f3:28:33:d1:6c:40:c6:e9:c4:11:c9:f9: 4a:58:fc:40:7c:3b:45:90:c7:c7:b3:8c:58:34:23: c7:88:cd:16:9d:17:09:76:6f:b9:c6:c3:67:dd:1a: 60:d0:71:48:fd:cf:04:8e:e6:5a:6b:d3:4a:aa:ba: 5d:33:b5:81:f2:7d:0c:0a:98:3d:c4:3c:c0:f7:b5: de:55:a5:0e:fa:78:0a:25:05:a4:74:ac:d9:0e:31: 59:7e:bd:51:ff:1c:75:da:21:da:81:46:dd:57:7c: 49:d8:b9:e7:9d:25:0c:12:4b:82:fc:d0:eb:d6:c2: 1b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:ED:E6:29:F4:F3:BF:F8:47:FB:C9:2B:AF:FA:D5:87:BF:5C:77:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d44ca5a0-4244-33e6-b6bf-c220a94ee74b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7d:41:14:43:7d:85:ad:42:c1:4c:c2:2c:79:2d:5b:2b:50: b6:90:83:2a:ae:79:87:6d:e5:92:3d:97:be:6a:2e:45:ee:6f: ef:b2:06:58:cc:a0:48:4c:23:52:b1:e7:25:8a:b6:63:ef:ff: 3d:b2:74:fa:00:f7:37:04:be:fe:d9:9c:ff:51:f1:9b:b7:da: 4e:6b:10:f7:e8:65:c8:dc:37:03:b1:64:07:3a:5a:61:ee:97: 4a:41:a2:a5:a9:c0:23:e7:e0:dc:df:30:46:77:97:0e:f7:46: 5b:71:07:56:bb:f1:d1:5c:e0:59:0f:8d:e6:8c:bd:d6:3e:0a: f9:ac:b2:7b:63:b8:4e:c7:c0:6b:a8:9c:bf:73:1d:08:fc:bc: 60:fa:03:e4:c3:76:14:24:ad:64:90:9d:fd:e4:76:06:a6:07: 3e:99:1c:0a:5a:cc:72:a5:3b:e3:29:52:c0:de:86:3b:a5:08: c1:e8:98:9d:48:ea:80:db:ae:bd:2f:3c:54:8f:b2:a6:68:d0: ef:5a:ba:8c:77:5b:c4:10:32:d2:06:a6:4b:a2:ea:29:e6:95: 95:3a:a7:fd:6a:e9:6d:e5:6d:26:ec:a8:6d:83:b0:29:1e:8e: 0c:18:07:03:44:62:8d:fd:c6:97:33:74:d7:ce:52:8d:33:e6: 37:fd:81:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqCWPobebypv/5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YTAzYWNkYzItMjRmZi00ZGU4LWE2OGYtZjBlZmNkMGIwZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpCYWVYe6lMKA41aXd2rMddyggaxhlqf4OY8 lz7tNVq9wvTZurY4OzCXcXJ3bodYrUHSF62UQJTmX1UltyfBr+IB2AMUNEE56d29 RgsZiJHIctVZKfJXMvIUL/bkB0PeTZzN8v9Yq2oPKbGzvwypwRuRZYLnl2WGvLXt AF1Wab+vxfImMtBI7iDzKDPRbEDG6cQRyflKWPxAfDtFkMfHs4xYNCPHiM0WnRcJ dm+5xsNn3Rpg0HFI/c8EjuZaa9NKqrpdM7WB8n0MCpg9xDzA97XeVaUO+ngKJQWk dKzZDjFZfr1R/xx12iHagUbdV3xJ2LnnnSUMEkuC/NDr1sIb8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDt5in087/4R/vJK6/61Ye/XHeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZDQ0Y2E1YTAtNDI0NC0z M2U2LWI2YmYtYzIyMGE5NGVlNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ9QRRDfYWtQsFMwix5LVsrULaQgyqueYdt5ZI9l75qLkXub++yBljM oEhMI1Kx5yWKtmPv/z2ydPoA9zcEvv7ZnP9R8Zu32k5rEPfoZcjcNwOxZAc6WmHu l0pBoqWpwCPn4NzfMEZ3lw73RltxB1a78dFc4FkPjeaMvdY+CvmssntjuE7HwGuo nL9zHQj8vGD6A+TDdhQkrWSQnf3kdgamBz6ZHApazHKlO+MpUsDehjulCMHomJ1I 6oDbrr0vPFSPsqZo0O9auox3W8QQMtIGpkui6inmlZU6p/1q6W3lbSbsqG2DsCke jgwYBwNEYo39xpczdNfOUo0z5jf9gao= -----END CERTIFICATE-----Generated at Sun Nov 2 13:43:47 2025 by rpki-client