$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa File: da1134b4-14a8-3573-ade1-c42f592a22ce.roa (raw, json) Hash identifier: p1SyuuSz7tHkaCLmAIaVBj0zn2HngxeplCr/AKv++uo= Subject key identifier: 8D:53:D3:08:F6:AE:95:55:AD:3B:D0:EB:AC:6E:B4:C5:04:21:C9:A2 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0CDC0721A291311A40398A00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 13414 IP address blocks: 209.237.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:07:21:a2:91:31:1a:40:39:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=ad9ff668-ee30-4cbb-8073-a13e4009434e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7d:da:f5:28:a0:77:b8:2b:73:4f:2a:61:3a: c1:72:63:05:6b:0b:29:6b:57:e1:90:4b:e5:d3:49: d6:a1:7e:6f:a5:bd:07:82:ce:52:b6:60:7d:4e:97: 7b:4d:f1:88:56:75:ad:7a:6c:ff:2c:4e:d7:5b:1d: 4d:20:73:d9:6d:40:96:fc:05:bb:e7:13:fb:49:6b: 06:46:96:a9:72:c2:e2:b2:5b:b2:9f:35:3a:d2:ef: 71:1c:55:02:b5:42:40:66:8c:1e:3d:79:cc:16:87: b2:63:95:4f:f8:a0:91:44:d3:20:6e:aa:13:cb:8b: 37:59:e9:c7:64:86:7a:23:38:07:c0:50:bb:b4:4a: 6d:f3:bd:0f:ad:98:74:58:76:ad:e5:03:5e:fd:5f: 3f:51:48:e4:a2:47:a1:bf:6b:14:f2:cb:0f:89:c0: e9:6c:32:27:b5:44:5b:50:b2:09:99:d1:b9:83:30: bc:c8:92:a4:4c:fa:c6:15:e8:2a:9a:77:84:6e:3b: 48:2e:fa:ff:5f:aa:f9:f2:65:e5:58:21:9c:6c:05: 8c:62:13:1d:9e:c1:cc:fa:68:f3:21:61:5b:2d:47: 2a:9c:95:99:2c:7e:64:e1:f2:f3:d0:61:7c:bd:68: 05:53:21:a0:d1:3e:a3:69:81:fb:56:97:e4:1e:54: 6e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:53:D3:08:F6:AE:95:55:AD:3B:D0:EB:AC:6E:B4:C5:04:21:C9:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a8:03:53:6d:a3:ed:45:d1:cd:de:cf:c1:0d:f1:aa:9a:c2: 76:08:ff:78:cc:d7:9a:35:81:4a:da:e2:6c:c9:d1:d2:c8:b0: 36:36:f2:56:20:48:87:62:f8:fa:63:43:2b:38:f6:56:ed:e1: 17:6f:47:6a:4d:e2:a9:77:2f:00:64:6c:25:0d:db:07:99:ce: db:75:e7:8a:77:e6:53:13:35:01:bf:fd:03:e0:ab:30:17:f2: 41:b9:6d:d2:1c:48:57:e5:c8:95:49:20:68:17:43:ac:b6:79: 2c:a9:f0:ec:4a:a5:61:69:1e:0d:21:1d:e6:8f:ae:8f:38:a3: 46:b7:99:8d:65:3f:d0:8f:e8:12:d1:c0:94:79:69:e8:2d:c0: 61:75:c5:66:a5:83:f4:0d:81:d7:28:b4:8f:8f:50:88:c1:5e: 0b:32:49:7f:c8:58:eb:1e:59:e8:23:14:d2:62:8f:f3:dd:98: dd:00:b7:2d:2d:7d:1d:5d:8e:4c:dd:2d:1c:e1:b7:a1:62:bf: 42:c4:20:32:3a:d8:0d:72:00:81:d7:a7:e4:c5:69:94:7d:f8: fd:e1:74:87:2b:3d:3d:b1:57:ef:c4:70:8e:6a:3f:40:b9:43: f8:3d:b6:0e:df:99:45:67:fd:19:fd:e0:b0:c4:90:fe:8b:ca: 48:44:5d:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AchopExGkA5igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk YWQ5ZmY2NjgtZWUzMC00Y2JiLTgwNzMtYTEzZTQwMDk0MzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh33a9Sigd7grc08qYTrBcmMFawspa1fhkEvl 00nWoX5vpb0Hgs5StmB9Tpd7TfGIVnWtemz/LE7XWx1NIHPZbUCW/AW75xP7SWsG RpapcsLisluynzU60u9xHFUCtUJAZowePXnMFoeyY5VP+KCRRNMgbqoTy4s3WenH ZIZ6IzgHwFC7tEpt870PrZh0WHat5QNe/V8/UUjkokehv2sU8ssPicDpbDIntURb ULIJmdG5gzC8yJKkTPrGFegqmneEbjtILvr/X6r58mXlWCGcbAWMYhMdnsHM+mjz IWFbLUcqnJWZLH5k4fLz0GF8vWgFUyGg0T6jaYH7VpfkHlRuWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1T0wj2rpVVrTvQ66xutMUEIcmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZGExMTM0YjQtMTRhOC0z NTczLWFkZTEtYzQyZjU5MmEyMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqoA1Nto+1F0c3ez8EN8aqawnYI/3jM15o1gUra4mzJ0dLIsDY28lYg SIdi+PpjQys49lbt4RdvR2pN4ql3LwBkbCUN2weZztt154p35lMTNQG//QPgqzAX 8kG5bdIcSFflyJVJIGgXQ6y2eSyp8OxKpWFpHg0hHeaPro84o0a3mY1lP9CP6BLR wJR5aegtwGF1xWalg/QNgdcotI+PUIjBXgsySX/IWOseWegjFNJij/PdmN0Aty0t fR1djkzdLRzht6Fiv0LEIDI62A1yAIHXp+TFaZR9+P3hdIcrPT2xV+/EcI5qP0C5 Q/g9tg7fmUVn/Rn94LDEkP6LykhEXSs= -----END CERTIFICATE-----Generated at Sun Sep 7 21:31:49 2025 by rpki-client