$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa File: f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa (raw, json) Hash identifier: GW8F4LC11jb3Sr+gpAWslMBPl6f0fMHEWs1ExFNb0fo= Subject key identifier: 1D:88:14:3F:A6:6C:7B:9D:61:18:9C:0A:88:39:D5:DF:F0:7C:F8:38 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0CDC0736C8CCA235D47E1540 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 13414 IP address blocks: 209.237.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:07:36:c8:cc:a2:35:d4:7e:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=f93fa765-5ac2-4831-9160-0356a5d6b919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:51:b6:25:7e:4d:37:ef:57:59:74:48:d7:54: dd:30:7a:65:ec:aa:cb:51:9a:d1:05:fa:a2:0d:0f: a2:68:71:3e:76:de:55:63:68:6f:08:31:43:00:02: 0e:a5:b0:b5:ae:42:a6:00:eb:35:5d:b2:65:9b:cb: c2:c7:db:30:a9:bc:4d:52:d9:5e:3a:60:25:b9:78: d1:aa:66:88:05:2d:35:90:f9:c7:d8:ba:87:0e:07: b8:f9:d9:3c:63:12:d2:d5:c7:11:5e:ec:30:c8:a0: 55:c8:6e:85:8f:b8:bb:c8:e8:85:60:f0:0d:2f:c2: 14:27:9f:24:15:99:ad:35:60:54:62:1c:85:d1:15: 50:aa:00:d6:7b:2c:79:8e:f8:23:55:e1:b9:9a:16: 05:d4:08:91:c2:70:20:8c:af:d8:e8:e6:89:29:1d: 55:a2:ac:0d:f5:d3:9c:b1:1f:84:5d:9d:f9:e7:19: 2b:c3:14:32:9d:b6:b6:b1:7c:8c:81:28:9b:8c:6d: b4:ad:32:8a:74:76:50:c7:53:4e:17:f6:56:7b:46: d7:1b:1b:64:cc:68:e3:ca:b2:4c:ad:e1:19:d7:35: 4c:cb:4b:06:7e:a8:7a:18:59:0d:8d:30:e4:a4:f6: b6:25:23:1f:07:c9:e9:bd:85:45:76:04:f8:24:f7: 0f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:88:14:3F:A6:6C:7B:9D:61:18:9C:0A:88:39:D5:DF:F0:7C:F8:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:29:66:ca:13:23:0c:96:92:0f:47:37:c2:26:7f:4c:19:7d: c4:65:b6:80:a3:1c:e1:14:a9:79:77:43:e7:3c:d8:68:3e:64: 64:cd:6a:01:ba:ef:5c:c5:52:fc:d7:bc:12:b5:73:d1:57:8e: 62:8f:d0:53:29:c7:be:08:2f:e2:4a:2c:9c:3b:f3:ce:c9:71: da:8a:69:90:a6:95:37:a7:95:bb:23:b3:b9:7b:a2:54:70:12: c8:f4:50:ea:2b:53:8c:89:c2:e7:54:cc:da:8f:d6:c8:9a:81: 50:23:7e:1b:d3:45:df:3c:94:e1:62:63:ec:34:f8:4d:67:89: 3b:8c:4f:80:06:ba:ce:8d:5b:da:95:93:54:47:45:ad:35:aa: 30:45:71:32:fd:57:21:67:33:4b:f5:ae:f3:c8:66:7c:06:8e: 00:cc:5b:ef:0d:50:d2:9d:be:50:18:df:46:d3:6a:5e:03:be: 96:b5:ef:b6:2c:49:bb:4d:49:61:2a:24:c1:2b:69:de:e5:6c: c9:30:80:94:d7:5f:5b:94:cb:46:a5:e8:bd:7b:0c:38:d2:43: 4a:b8:04:f7:96:f0:36:59:d8:a6:05:56:c4:42:5a:2f:d7:50: 72:55:8a:2c:13:0a:9e:05:58:5b:0f:e6:be:76:fa:21:e1:15: 7e:53:88:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3Ac2yMyiNdR+FUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZjkzZmE3NjUtNWFjMi00ODMxLTkxNjAtMDM1NmE1ZDZiOTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlG2JX5NN+9XWXRI11TdMHpl7KrLUZrRBfqi DQ+iaHE+dt5VY2hvCDFDAAIOpbC1rkKmAOs1XbJlm8vCx9swqbxNUtleOmAluXjR qmaIBS01kPnH2LqHDge4+dk8YxLS1ccRXuwwyKBVyG6Fj7i7yOiFYPANL8IUJ58k FZmtNWBUYhyF0RVQqgDWeyx5jvgjVeG5mhYF1AiRwnAgjK/Y6OaJKR1VoqwN9dOc sR+EXZ355xkrwxQynba2sXyMgSibjG20rTKKdHZQx1NOF/ZWe0bXGxtkzGjjyrJM reEZ1zVMy0sGfqh6GFkNjTDkpPa2JSMfB8npvYVFdgT4JPcPZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2IFD+mbHudYRicCog51d/wfPg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjFiZDFjMTgtNTMzZC0z YzNmLWI3YTgtZGIyZWYxZWYxZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcpZsoTIwyWkg9HN8Imf0wZfcRltoCjHOEUqXl3Q+c82Gg+ZGTNagG6 71zFUvzXvBK1c9FXjmKP0FMpx74IL+JKLJw7887JcdqKaZCmlTenlbsjs7l7olRw Esj0UOorU4yJwudUzNqP1siagVAjfhvTRd88lOFiY+w0+E1niTuMT4AGus6NW9qV k1RHRa01qjBFcTL9VyFnM0v1rvPIZnwGjgDMW+8NUNKdvlAY30bTal4Dvpa177Ys SbtNSWEqJMErad7lbMkwgJTXX1uUy0al6L17DDjSQ0q4BPeW8DZZ2KYFVsRCWi/X UHJViiwTCp4FWFsP5r52+iHhFX5TiKw= -----END CERTIFICATE-----Generated at Sun Nov 2 13:42:07 2025 by rpki-client