$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f6a52efd-474d-33ea-8616-746a15ea162e.roa File: f6a52efd-474d-33ea-8616-746a15ea162e.roa (raw, json) Hash identifier: Zl5GuCUFAyX00GHWcSujIqcpGC2cUck38ReolFEN5vM= Subject key identifier: 6B:F8:51:79:3F:37:F1:2E:83:11:84:7A:65:A9:D2:82:5F:2B:4B:97 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0CDC0B03554118E4C04E6400 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f6a52efd-474d-33ea-8616-746a15ea162e.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 13414 IP address blocks: 209.237.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0b:03:55:41:18:e4:c0:4e:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=273f2c99-eed9-41f5-bb45-ed831194ce34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:96:28:63:1c:87:f7:2e:71:2e:20:f8:bc:56: 8d:fe:a3:7a:8d:f3:9b:23:15:5b:2e:2e:02:9e:54: df:e8:3e:b9:7c:b3:63:62:36:e6:6f:45:94:ee:ba: 16:71:b3:cf:77:f2:2f:a7:ed:7e:10:60:44:ca:33: ec:3e:8a:4a:d2:d9:23:98:ef:8a:57:82:84:28:1e: 35:5a:41:47:64:1d:c4:a2:08:50:1d:0f:d2:45:9a: fe:27:f8:05:8c:89:3b:85:e7:cc:04:57:ed:9e:72: 14:6b:2c:c1:17:37:6a:61:23:e4:ad:f3:d8:c2:cd: cc:48:8d:48:64:d4:bd:23:69:97:97:48:dd:75:e9: 4a:7e:c5:59:4e:7f:a2:29:21:1b:6b:e4:71:f8:c6: 75:82:f0:d2:2b:fd:db:89:15:49:24:ed:83:11:b1: f5:1b:fd:a7:bb:3f:5e:5f:a0:98:45:fd:61:27:8d: a3:3b:59:ca:0a:05:81:3b:71:f8:42:a0:30:df:d3: 0b:b3:05:52:93:e1:bb:f4:74:b1:ee:db:27:51:c1: 86:5d:75:0e:28:ec:03:b3:20:21:87:d9:6b:47:7b: 31:43:7a:f1:96:6c:72:c8:24:4c:12:12:e9:11:45: c5:4d:c8:08:97:28:e2:24:17:7e:97:f6:93:0c:37: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F8:51:79:3F:37:F1:2E:83:11:84:7A:65:A9:D2:82:5F:2B:4B:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f6a52efd-474d-33ea-8616-746a15ea162e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:18:a0:42:6e:19:c6:c0:69:9f:d3:d3:2e:af:a2:23:b3:0e: c3:5b:17:86:49:a8:c4:a7:11:a8:c8:02:32:14:fe:bc:35:a4: 08:6b:fc:3d:58:ee:34:5c:12:83:6b:ac:06:52:6a:05:c1:0a: ef:fc:31:2a:43:c8:4d:b9:12:ff:7e:84:65:99:e2:98:ad:93: 36:94:34:1e:03:66:6a:d8:53:0d:34:77:38:21:53:de:38:24: 3e:99:f2:ce:9b:cc:7c:ce:ac:d7:94:29:89:00:ad:7b:18:6f: b3:ff:bc:df:07:bc:61:6b:13:21:4f:72:40:db:2f:5d:cd:0b: 95:51:09:d9:ae:5d:bd:89:09:3b:7f:a6:c6:25:f5:3a:f5:ef: b1:d2:af:94:f6:10:e7:50:5a:f2:7a:eb:de:20:56:79:9f:bb: 03:e0:29:b1:e6:d3:cb:19:5e:94:d1:f3:1c:75:3a:b2:b3:46: 38:2b:ed:46:fb:6d:5c:8e:ee:24:e5:1a:01:89:6c:e2:d1:bf: b7:9b:94:f6:3a:87:33:38:84:7d:1a:83:b3:e9:a7:ef:93:e4: cf:b9:cd:8b:5b:81:de:44:92:0f:73:57:41:dc:4f:88:c4:9c: 40:50:e0:20:f4:67:da:36:3b:ff:38:34:e1:be:be:bf:cf:2b: 77:73:d5:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AsDVUEY5MBOZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MjczZjJjOTktZWVkOS00MWY1LWJiNDUtZWQ4MzExOTRjZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZYoYxyH9y5xLiD4vFaN/qN6jfObIxVbLi4C nlTf6D65fLNjYjbmb0WU7roWcbPPd/Ivp+1+EGBEyjPsPopK0tkjmO+KV4KEKB41 WkFHZB3EoghQHQ/SRZr+J/gFjIk7hefMBFftnnIUayzBFzdqYSPkrfPYws3MSI1I ZNS9I2mXl0jddelKfsVZTn+iKSEba+Rx+MZ1gvDSK/3biRVJJO2DEbH1G/2nuz9e X6CYRf1hJ42jO1nKCgWBO3H4QqAw39MLswVSk+G79HSx7tsnUcGGXXUOKOwDsyAh h9lrR3sxQ3rxlmxyyCRMEhLpEUXFTcgIlyjiJBd+l/aTDDcPTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv4UXk/N/EugxGEemWp0oJfK0uXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjZhNTJlZmQtNDc0ZC0z M2VhLTg2MTYtNzQ2YTE1ZWExNjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwYoEJuGcbAaZ/T0y6voiOzDsNbF4ZJqMSnEajIAjIU/rw1pAhr/D1Y 7jRcEoNrrAZSagXBCu/8MSpDyE25Ev9+hGWZ4pitkzaUNB4DZmrYUw00dzghU944 JD6Z8s6bzHzOrNeUKYkArXsYb7P/vN8HvGFrEyFPckDbL13NC5VRCdmuXb2JCTt/ psYl9Tr177HSr5T2EOdQWvJ6694gVnmfuwPgKbHm08sZXpTR8xx1OrKzRjgr7Ub7 bVyO7iTlGgGJbOLRv7eblPY6hzM4hH0ag7Ppp++T5M+5zYtbgd5Ekg9zV0HcT4jE nEBQ4CD0Z9o2O/84NOG+vr/PK3dz1fU= -----END CERTIFICATE-----Generated at Sun Sep 7 21:34:36 2025 by rpki-client