$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e0f21a70-77b1-35b8-ae56-182eb5ed8f84.roa File: e0f21a70-77b1-35b8-ae56-182eb5ed8f84.roa (raw, json) Hash identifier: VfRYtb8HgTlfQ5ssB/18jpgEQ9WeNLaZYPPeAnaWiJ4= Subject key identifier: 0D:72:0F:D4:14:E3:0F:5C:ED:84:15:0E:83:DE:C9:5C:EB:1D:B7:5B Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0B76A07E6E248AC954AC5980 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e0f21a70-77b1-35b8-ae56-182eb5ed8f84.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 209.237.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a0:7e:6e:24:8a:c9:54:ac:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=08fa45d8-21dd-46ad-9124-e60d22b1f4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:19:4b:12:29:d9:f8:02:4b:57:91:0c:53: 9e:56:07:2d:eb:83:25:e4:c8:eb:90:30:42:2a:90: 51:4a:2e:01:69:95:07:51:79:d7:27:07:90:68:d5: bc:33:88:a8:23:b2:08:c4:46:c8:53:44:82:eb:57: 7c:f8:7a:50:a1:14:1f:4a:e3:9b:2c:dd:f3:2a:cd: 63:af:c7:99:64:ab:3e:d8:39:ab:15:f2:17:2d:06: 4c:52:66:56:a5:f6:54:5c:e2:a5:7b:31:da:60:9e: 82:5f:06:3f:9f:b0:ea:ce:e3:89:50:3d:53:df:74: 29:a5:1f:7c:cc:18:64:28:44:c3:ef:38:7d:ee:05: 18:51:94:2d:3a:eb:e4:1c:8a:36:bc:05:8c:1e:ef: 31:68:9f:0d:d9:26:e5:fd:fe:f8:f3:67:cb:3c:98: 33:82:27:12:4a:ab:47:11:dd:85:3f:a8:ff:dd:49: 41:e6:02:a2:7c:f0:15:bd:54:12:cd:0e:8b:51:1e: 83:f5:7c:36:c8:83:54:95:6f:71:d9:57:d3:f3:9f: 25:a3:66:a5:cb:90:d0:a8:1c:50:d6:1f:56:7b:6a: 4d:94:e2:41:ec:d2:dc:3c:cf:35:03:64:d6:b9:51: f6:52:df:f4:16:95:85:5c:2c:9b:bf:f9:9b:5d:07: 9f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:72:0F:D4:14:E3:0F:5C:ED:84:15:0E:83:DE:C9:5C:EB:1D:B7:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e0f21a70-77b1-35b8-ae56-182eb5ed8f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:79:e2:20:97:68:3d:75:ef:79:5f:a7:de:d6:78:cb:ad:fd: 41:19:35:dc:f6:ab:bf:2b:a3:37:fc:23:e2:43:25:ad:c1:24: 10:0a:65:bd:59:a4:ed:90:b6:8a:df:75:a0:3b:3b:45:0c:04: 84:c6:1c:2a:14:8e:0a:ce:ec:a9:1e:7e:bf:c3:81:75:06:9b: 55:e2:c1:16:68:8a:e7:1b:50:dc:5a:9a:8b:77:c0:fc:63:43: 5c:82:df:eb:e0:6f:f8:3c:7c:fd:a1:b9:07:c9:bb:05:62:9c: 39:3d:40:e4:be:2c:e2:ed:58:65:73:9a:78:36:19:5b:f7:bb: dc:83:32:c2:83:93:5d:09:2e:ed:33:de:99:d5:76:89:fa:c8: 0c:f6:13:6e:c3:87:cc:04:bd:1b:10:c9:c1:86:fa:5c:b4:89: 83:e1:f6:29:a3:7f:b1:73:dd:f6:47:cd:fd:f1:e8:a9:b1:61: e1:98:ba:be:fe:1f:a9:28:16:e9:bc:a7:c9:53:bd:1f:b1:27: ea:89:4d:f9:17:89:35:83:15:72:1c:a5:55:4d:25:74:12:19: ae:a2:8e:25:9c:13:99:51:01:d9:4a:ff:83:19:56:a5:30:a0: 88:02:1e:67:60:00:21:0b:c1:46:14:98:76:92:95:1f:e3:15: 2f:f4:c6:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqB+biSKyVSsWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MDhmYTQ1ZDgtMjFkZC00NmFkLTkxMjQtZTYwZDIyYjFmNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT0ZSxIp2fgCS1eRDFOeVgct64Ml5MjrkDBC KpBRSi4BaZUHUXnXJweQaNW8M4ioI7IIxEbIU0SC61d8+HpQoRQfSuObLN3zKs1j r8eZZKs+2DmrFfIXLQZMUmZWpfZUXOKlezHaYJ6CXwY/n7DqzuOJUD1T33QppR98 zBhkKETD7zh97gUYUZQtOuvkHIo2vAWMHu8xaJ8N2Sbl/f7482fLPJgzgicSSqtH Ed2FP6j/3UlB5gKifPAVvVQSzQ6LUR6D9Xw2yINUlW9x2VfT858lo2aly5DQqBxQ 1h9We2pNlOJB7NLcPM81A2TWuVH2Ut/0FpWFXCybv/mbXQefAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1yD9QU4w9c7YQVDoPeyVzrHbdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZTBmMjFhNzAtNzdiMS0z NWI4LWFlNTYtMTgyZWI1ZWQ4Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB54iCXaD1173lfp97WeMut/UEZNdz2q78rozf8I+JDJa3BJBAKZb1Z pO2QtorfdaA7O0UMBITGHCoUjgrO7Kkefr/DgXUGm1XiwRZoiucbUNxamot3wPxj Q1yC3+vgb/g8fP2huQfJuwVinDk9QOS+LOLtWGVzmng2GVv3u9yDMsKDk10JLu0z 3pnVdon6yAz2E27Dh8wEvRsQycGG+ly0iYPh9imjf7Fz3fZHzf3x6KmxYeGYur7+ H6koFum8p8lTvR+xJ+qJTfkXiTWDFXIcpVVNJXQSGa6ijiWcE5lRAdlK/4MZVqUw oIgCHmdgACELwUYUmHaSlR/jFS/0xhE= -----END CERTIFICATE-----Generated at Sun Sep 7 21:33:00 2025 by rpki-client