$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f955a431-f6a6-3fdc-a978-c8d8f8ef7b25.roa File: f955a431-f6a6-3fdc-a978-c8d8f8ef7b25.roa (raw, json) Hash identifier: ZOYdCSON/wrCWzXaynFFeuZ0b6xgI+GPdCGozgq/rdA= Subject key identifier: CD:C6:B7:02:97:52:E3:B6:BB:CC:5E:28:E4:9E:6E:26:63:CC:02:60 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B047C025406313510735C9D80 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f955a431-f6a6-3fdc-a978-c8d8f8ef7b25.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 13414 IP address blocks: 199.96.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:02:54:06:31:35:10:73:5c:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=1258b8d9-97f9-4acb-8c93-16c7f0261f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3b:db:05:e2:d7:d8:98:b1:60:06:9a:67:84: 61:51:83:35:3d:42:e7:69:d6:0b:a3:9a:67:1d:9c: 24:46:64:08:78:5f:05:ef:18:ce:5f:5a:8a:41:61: fd:cb:5a:a2:1e:91:9b:45:98:6d:15:55:08:55:c9: 6a:02:6c:47:b5:0f:e3:50:bd:75:bc:8f:14:fa:90: 5c:6f:5e:8d:2a:b3:2e:a1:21:de:41:4b:1f:3a:48: 76:52:46:b5:22:60:62:f3:b4:d4:0a:d0:cf:6e:93: 40:d6:4e:1d:03:e9:eb:6f:26:25:ba:eb:83:92:27: aa:9f:23:6d:eb:ef:03:40:ce:4d:57:e8:6a:b4:66: a7:e9:5c:eb:98:d6:54:1d:24:81:f3:64:65:f2:11: 18:70:32:1f:56:77:60:e3:d2:6c:bb:3c:41:44:cb: 85:86:c7:ec:6f:6c:c7:9b:78:bb:a9:d3:0d:10:7b: 3f:79:71:4d:0d:88:87:84:ec:e6:dd:7d:34:47:a1: 59:71:a4:42:1e:fd:b1:85:55:72:f3:d9:c5:7d:37: 75:e9:fc:63:dd:98:51:20:c4:97:68:bc:e2:bb:c6: 66:d0:14:fd:9e:42:8b:7d:df:7f:17:50:fc:18:98: 49:0e:d0:e8:ec:7d:05:cd:c6:4f:51:04:1f:71:b3: 61:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C6:B7:02:97:52:E3:B6:BB:CC:5E:28:E4:9E:6E:26:63:CC:02:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f955a431-f6a6-3fdc-a978-c8d8f8ef7b25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.96.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:3c:40:0e:70:d1:dd:7c:4e:90:f0:fd:39:9b:c7:32:43:95: 48:94:d0:c5:6d:96:6b:ba:74:ec:30:97:e1:92:9f:0a:58:b9: 0f:77:0e:8c:fc:22:a8:62:bd:c3:4c:80:c9:35:7f:8d:9f:15: 3b:47:a7:ea:2b:0f:df:a5:4c:c5:b0:2b:ed:23:16:0f:12:b5: db:f3:ba:e3:ab:d5:67:b9:54:f0:06:66:e4:81:87:9b:0e:f7: e3:69:17:fa:a7:d4:e7:8f:ba:e4:ab:90:ef:6a:82:5c:74:fa: 06:9f:c1:33:83:d5:d1:b2:00:a9:ae:5c:ce:12:42:3f:9a:cc: 56:47:35:96:6e:50:a1:76:a1:ac:13:c8:d6:55:d3:ea:9a:ec: c9:71:69:0a:49:6f:e9:fe:6f:c8:8a:d4:a2:22:da:89:5f:12: 8e:42:bf:73:d2:9d:7c:a0:ef:77:de:3d:e8:13:1c:6c:6e:f1: c3:75:4e:31:eb:fe:93:d1:a0:1e:e6:fd:42:93:ec:62:a5:cb: 65:55:ee:f7:cd:a3:a3:ff:1c:ed:a3:63:4b:b9:61:88:56:cc: a9:b8:c8:5b:c5:4b:01:0d:13:ae:27:f3:7f:f2:50:50:49:89: 50:ea:d9:b8:6b:f3:a5:22:fa:b7:d9:b0:b6:a9:0a:d2:d2:b3: 9f:3d:50:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAJUBjE1EHNcnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MTI1OGI4ZDktOTdmOS00YWNiLThjOTMtMTZjN2YwMjYxZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjvbBeLX2JixYAaaZ4RhUYM1PULnadYLo5pn HZwkRmQIeF8F7xjOX1qKQWH9y1qiHpGbRZhtFVUIVclqAmxHtQ/jUL11vI8U+pBc b16NKrMuoSHeQUsfOkh2Uka1ImBi87TUCtDPbpNA1k4dA+nrbyYluuuDkieqnyNt 6+8DQM5NV+hqtGan6VzrmNZUHSSB82Rl8hEYcDIfVndg49JsuzxBRMuFhsfsb2zH m3i7qdMNEHs/eXFNDYiHhOzm3X00R6FZcaRCHv2xhVVy89nFfTd16fxj3ZhRIMSX aLziu8Zm0BT9nkKLfd9/F1D8GJhJDtDo7H0FzcZPUQQfcbNhXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3GtwKXUuO2u8xeKOSebiZjzAJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjk1NWE0MzEtZjZhNi0z ZmRjLWE5NzgtYzhkOGY4ZWY3YjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2A6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG08QA5w0d18TpDw/TmbxzJDlUiU0MVtlmu6dOwwl+GSnwpYuQ93Doz8 IqhivcNMgMk1f42fFTtHp+orD9+lTMWwK+0jFg8StdvzuuOr1We5VPAGZuSBh5sO 9+NpF/qn1OePuuSrkO9qglx0+gafwTOD1dGyAKmuXM4SQj+azFZHNZZuUKF2oawT yNZV0+qa7MlxaQpJb+n+b8iK1KIi2olfEo5Cv3PSnXyg73fePegTHGxu8cN1TjHr /pPRoB7m/UKT7GKly2VV7vfNo6P/HO2jY0u5YYhWzKm4yFvFSwENE64n83/yUFBJ iVDq2bhr86Ui+rfZsLapCtLSs589UFo= -----END CERTIFICATE-----Generated at Sun Sep 7 21:28:08 2025 by rpki-client