$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/34c1d0cf-b41a-3317-9c39-481cdefc7dfa.roa File: 34c1d0cf-b41a-3317-9c39-481cdefc7dfa.roa (raw, json) Hash identifier: zrN0zsNyggOFfcB0Erx3lCP+5X+bYH4LhGTYQOOX0iU= Subject key identifier: 8A:81:E6:8B:C5:CB:10:47:68:78:47:87:1D:6A:1B:2C:F6:23:D9:12 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584BBFA59B8B6E01B42AD4C82FE0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/34c1d0cf-b41a-3317-9c39-481cdefc7dfa.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 13414 IP address blocks: 199.16.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:9b:8b:6e:01:b4:2a:d4:c8:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=9a61e59e-614c-4eb1-b2da-82d54f75aea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a3:f1:d7:18:62:80:ee:ce:a9:41:aa:f5:d4: 78:86:d5:27:e6:e2:b6:25:f1:f6:c7:c7:f7:d6:56: 86:93:08:ac:12:c6:c7:c5:cf:8f:3e:4f:37:7b:dd: 71:ae:9d:30:b7:78:95:71:8e:06:02:db:43:6c:11: 6f:87:50:ea:48:fe:a5:95:d9:a2:6f:e0:38:60:12: 93:37:a9:38:a0:5b:10:f6:42:19:3e:53:73:04:5e: 4e:f5:f7:29:60:eb:4b:2c:e5:00:63:90:77:9a:97: 0c:02:46:17:2d:65:f9:e9:ec:12:67:97:58:4e:e3: 76:30:4c:b9:11:08:21:03:8d:31:7a:c8:b0:33:cb: 91:9a:6e:2a:b6:bc:47:50:10:24:56:d4:ae:b9:a0: d5:8c:51:25:3c:8b:25:77:04:c3:be:7f:a7:b6:72: 94:1e:17:39:c9:5d:37:7e:bf:24:a8:53:57:5e:a3: af:f4:e0:b3:c2:98:03:56:3e:69:67:55:83:90:ce: 5c:ae:47:f2:0e:23:c5:76:b3:b6:bd:1c:c5:fa:42: 09:3b:d4:62:56:db:68:a4:8f:a8:64:2d:49:4c:cf: fc:70:eb:69:da:29:c0:4e:c1:20:3c:a7:f5:82:7a: f3:92:cf:e9:2e:cb:ff:ff:77:4c:37:67:30:bf:0e: d4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:81:E6:8B:C5:CB:10:47:68:78:47:87:1D:6A:1B:2C:F6:23:D9:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/34c1d0cf-b41a-3317-9c39-481cdefc7dfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bd:84:fa:1f:84:e8:61:da:29:d3:a8:6b:08:d3:fd:fa:62: ab:f1:87:46:3a:ea:f1:35:8d:fe:d3:32:cd:a8:52:24:b8:80: 13:b9:33:6a:a0:2a:d4:62:f6:f7:5d:e9:cf:17:c8:f1:aa:a8: fa:7c:d0:77:e2:26:53:ae:8f:b4:d0:25:84:5c:93:dc:56:0e: 0b:c6:23:f3:e2:dc:90:a5:15:00:a4:4b:86:41:e7:e6:cb:9e: 1d:ac:22:76:cf:74:6c:b5:f0:fd:a8:96:24:c0:7a:b9:a7:1f: 40:c0:12:30:2b:5e:75:30:39:74:7b:07:12:85:7e:67:61:fe: ea:0b:6f:b4:a8:b9:93:18:9e:d4:50:f2:68:6b:ea:0c:9b:1f: 1a:9c:2c:6c:7c:d0:35:72:29:54:23:40:89:a3:87:25:a3:4e: 92:c5:71:e4:6f:c1:9c:e0:72:63:5a:df:48:fb:4a:52:c7:2f: 33:36:8c:c5:5b:6a:29:59:47:38:72:fe:5c:89:4a:7e:22:85: 38:4c:1d:ef:ab:28:d3:d4:72:27:55:d4:77:89:46:67:ae:40: e9:c0:11:3a:05:ef:d3:5e:6c:df:0b:1e:7b:81:60:2a:3e:29: b1:9e:69:2d:7f:0f:97:49:ba:78:63:c3:54:1d:1b:c1:5f:a7: 1b:f5:26:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZuLbgG0KtTIL+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk OWE2MWU1OWUtNjE0Yy00ZWIxLWIyZGEtODJkNTRmNzVhZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KPx1xhigO7OqUGq9dR4htUn5uK2JfH2x8f3 1laGkwisEsbHxc+PPk83e91xrp0wt3iVcY4GAttDbBFvh1DqSP6lldmib+A4YBKT N6k4oFsQ9kIZPlNzBF5O9fcpYOtLLOUAY5B3mpcMAkYXLWX56ewSZ5dYTuN2MEy5 EQghA40xesiwM8uRmm4qtrxHUBAkVtSuuaDVjFElPIsldwTDvn+ntnKUHhc5yV03 fr8kqFNXXqOv9OCzwpgDVj5pZ1WDkM5crkfyDiPFdrO2vRzF+kIJO9RiVttopI+o ZC1JTM/8cOtp2inATsEgPKf1gnrzks/pLsv//3dMN2cwvw7UOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqB5ovFyxBHaHhHhx1qGyz2I9kSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMzRjMWQwY2YtYjQxYS0z MzE3LTljMzktNDgxY2RlZmM3ZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO9hPofhOhh2inTqGsI0/36Yqvxh0Y66vE1jf7TMs2oUiS4gBO5M2qg KtRi9vdd6c8XyPGqqPp80HfiJlOuj7TQJYRck9xWDgvGI/Pi3JClFQCkS4ZB5+bL nh2sInbPdGy18P2oliTAermnH0DAEjArXnUwOXR7BxKFfmdh/uoLb7SouZMYntRQ 8mhr6gybHxqcLGx80DVyKVQjQImjhyWjTpLFceRvwZzgcmNa30j7SlLHLzM2jMVb ailZRzhy/lyJSn4ihThMHe+rKNPUcidV1HeJRmeuQOnAEToF79NebN8LHnuBYCo+ KbGeaS1/D5dJunhjw1QdG8Ffpxv1Jn4= -----END CERTIFICATE-----Generated at Wed Nov 5 19:27:17 2025 by rpki-client