$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/fed4af4a-1a42-3d04-937d-5dfec9b3124d.roa File: fed4af4a-1a42-3d04-937d-5dfec9b3124d.roa (raw, json) Hash identifier: c5htXY91ve/hMjrfQB9+728yNGsv444OamkDlLg6ea0= Subject key identifier: 82:10:6E:59:09:B7:47:39:FD:D3:A3:6B:C9:AF:9C:BA:46:F9:D6:03 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584B0746ADA217F18690064B5480 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/fed4af4a-1a42-3d04-937d-5dfec9b3124d.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 13414 IP address blocks: 64.63.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:ad:a2:17:f1:86:90:06:4b:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=40050b03-e26b-416b-ac09-d8d9558c07c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1a:81:6b:e9:df:e7:11:f9:94:0e:fc:90:f2: 7f:d8:75:f6:c3:7f:c6:bb:a3:75:62:6f:94:a7:3a: 22:12:26:db:84:47:57:a7:26:70:46:95:d0:42:a6: 5d:09:82:bc:fe:2c:3a:7d:ca:43:6c:59:d8:45:51: 68:f2:ca:26:a5:e7:91:76:25:ea:7c:f5:1e:e0:7f: 1a:71:ed:14:e9:8f:36:ad:df:c3:08:3d:cb:66:9a: 70:aa:73:2e:c7:41:b6:e5:23:18:08:bf:94:bd:f4: 55:04:ab:8f:4c:fb:a7:6b:73:44:e1:68:00:9a:48: ef:77:a8:a2:0a:a4:00:85:68:78:14:13:6b:c4:40: a5:14:d3:de:98:b9:0b:b1:cd:cb:d3:36:f7:c7:95: b9:37:d2:7f:6f:02:20:eb:5c:db:58:d9:76:5f:b9: 2c:b7:9e:02:ad:b8:ae:77:3a:e1:53:0c:9c:8e:ce: 7d:c5:86:70:c7:d7:20:39:06:9d:da:0c:e0:84:31: 9d:75:73:05:22:2c:e6:99:e1:9e:15:82:e1:19:d2: 82:2e:79:0f:eb:7f:54:86:be:4f:f6:f3:85:5b:88: 3c:57:03:af:e7:0c:03:9d:05:c3:b0:29:57:35:9d: e2:93:b0:96:23:c0:f9:de:13:d5:83:5f:2c:87:a3: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:10:6E:59:09:B7:47:39:FD:D3:A3:6B:C9:AF:9C:BA:46:F9:D6:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/fed4af4a-1a42-3d04-937d-5dfec9b3124d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:77:ba:3b:15:00:c0:52:5c:04:88:bf:8e:6b:ff:02:8f:27: b1:3b:1b:10:fb:ee:60:69:e9:e8:3e:c8:b4:46:91:f9:d6:4d: a4:2c:41:ab:1a:a2:97:e6:13:c7:fe:66:0d:0a:67:62:5c:48: 4d:d5:07:94:d8:a9:8c:bc:67:0d:27:a0:47:9a:0b:33:9f:fc: 6d:80:6d:83:30:64:65:17:56:8b:63:70:e9:ed:1e:37:c7:e4: 99:77:9e:ac:52:b8:1e:4d:01:35:04:cc:e2:57:d3:cd:90:71: b2:77:5f:fe:40:a1:9a:dc:4c:4e:49:8e:00:db:b2:43:f5:bc: d4:33:f9:65:2b:61:c9:c2:83:bb:89:55:b7:40:73:31:80:a8: 25:92:90:e3:c6:91:c6:69:d8:23:84:1a:8b:26:13:6e:79:99: db:fc:9a:a0:52:14:4c:d8:b5:ce:68:a8:59:5d:3a:f4:f9:86: bd:a7:54:7d:ef:a8:f7:9b:56:de:a0:06:1d:18:f4:7b:df:18: 9c:ef:d1:13:e1:79:ea:9a:e7:55:81:6e:59:ee:6a:62:f4:b5: 10:0c:10:4c:6a:47:5e:3a:4c:3b:20:d8:91:b4:74:d7:93:ce: 52:6e:29:7b:d7:e5:e8:e2:10:7a:30:45:cd:c0:3a:28:0d:01: ce:ec:9f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRq2iF/GGkAZLVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk NDAwNTBiMDMtZTI2Yi00MTZiLWFjMDktZDhkOTU1OGMwN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBqBa+nf5xH5lA78kPJ/2HX2w3/Gu6N1Ym+U pzoiEibbhEdXpyZwRpXQQqZdCYK8/iw6fcpDbFnYRVFo8sompeeRdiXqfPUe4H8a ce0U6Y82rd/DCD3LZppwqnMux0G25SMYCL+UvfRVBKuPTPuna3NE4WgAmkjvd6ii CqQAhWh4FBNrxEClFNPemLkLsc3L0zb3x5W5N9J/bwIg61zbWNl2X7kst54Crbiu dzrhUwycjs59xYZwx9cgOQad2gzghDGddXMFIizmmeGeFYLhGdKCLnkP639Uhr5P 9vOFW4g8VwOv5wwDnQXDsClXNZ3ik7CWI8D53hPVg18sh6MOSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIQblkJt0c5/dOja8mvnLpG+dYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZmVkNGFmNGEtMWE0Mi0z ZDA0LTkzN2QtNWRmZWM5YjMxMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx3ujsVAMBSXASIv45r/wKPJ7E7GxD77mBp6eg+yLRGkfnWTaQsQasa opfmE8f+Zg0KZ2JcSE3VB5TYqYy8Zw0noEeaCzOf/G2AbYMwZGUXVotjcOntHjfH 5Jl3nqxSuB5NATUEzOJX082QcbJ3X/5AoZrcTE5JjgDbskP1vNQz+WUrYcnCg7uJ VbdAczGAqCWSkOPGkcZp2COEGosmE255mdv8mqBSFEzYtc5oqFldOvT5hr2nVH3v qPebVt6gBh0Y9HvfGJzv0RPheeqa51WBblnuamL0tRAMEExqR146TDsg2JG0dNeT zlJuKXvX5ejiEHowRc3AOigNAc7sn2Q= -----END CERTIFICATE-----Generated at Sun Sep 7 21:39:12 2025 by rpki-client