$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/966134d8-1fc4-30cd-a882-fabc6c02c9af.roa File: 966134d8-1fc4-30cd-a882-fabc6c02c9af.roa (raw, json) Hash identifier: 99HwfTKBWOFXv7hcHc70E0dPqv/NNMNVNGxgGIkqiRM= Subject key identifier: 57:67:72:5B:8C:07:7F:7A:C2:C4:23:75:35:6F:70:13:6B:9A:B8:13 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584A2ABAD03CDB93BB3781273600 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/966134d8-1fc4-30cd-a882-fabc6c02c9af.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 13414 IP address blocks: 209.237.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:d0:3c:db:93:bb:37:81:27:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=7e1ff3ef-93af-4769-b3d4-982e6f7b570a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:ba:1f:23:fa:8f:e8:3d:f2:fb:cb:92:7a: c7:49:fc:9a:6c:5a:60:94:f3:53:de:ab:c2:99:37: 26:3d:8c:d9:da:08:de:cf:98:cc:75:86:4a:0e:14: c8:d8:31:a3:cf:4e:71:c2:da:e8:61:e3:91:b2:cc: f3:97:df:85:34:64:c5:fa:57:ed:c9:c5:58:3d:4b: 6e:4e:20:81:80:73:e1:ad:1c:cc:99:4c:9c:c2:ab: bf:08:a1:8a:d6:7d:dd:19:2a:88:89:71:07:78:a5: 93:9f:c3:8a:da:0a:c5:c8:a8:b7:31:07:90:10:74: 07:42:cf:a6:e3:8c:87:c9:fa:0d:e9:0a:ce:65:79: 68:28:cc:02:55:08:68:b9:78:6e:59:0e:64:8b:3d: 23:b2:6e:79:0d:02:4b:d0:af:24:6e:84:5d:ad:e6: e8:31:c9:56:2c:70:a2:51:10:09:2c:59:12:ac:59: 0e:67:73:b6:b3:7e:4f:b5:26:2f:07:c9:d3:d3:cc: 2c:15:c1:c3:06:e7:7d:10:20:9e:a6:58:77:82:0a: c0:1b:24:e2:da:0a:ca:c5:42:d1:0f:88:7c:a4:8f: cb:ba:15:bb:64:1a:6a:55:75:dc:0f:95:74:e3:5b: 7d:de:ea:57:9f:15:23:91:bf:f0:b7:30:17:21:1e: 48:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:67:72:5B:8C:07:7F:7A:C2:C4:23:75:35:6F:70:13:6B:9A:B8:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/966134d8-1fc4-30cd-a882-fabc6c02c9af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c7:3c:26:03:76:d1:5e:b5:be:df:7f:74:af:25:69:d4:f6: 3f:e4:1a:ea:fe:1b:27:d2:84:da:70:b2:69:c1:27:2a:25:a8: c8:29:5b:01:33:ea:3a:a2:a6:f0:a3:99:48:be:b8:91:cc:0e: f2:f5:ab:d4:c2:83:7c:76:df:28:48:dd:bd:6f:73:36:32:9d: 47:5f:86:68:16:ed:ed:ec:10:74:29:3e:9b:43:23:96:92:01: 64:bf:86:67:7f:1f:0f:3b:01:90:5e:65:6e:d7:f8:16:65:61: 38:5c:40:9a:ac:cd:44:80:1d:a2:3e:4e:e0:8c:54:68:23:1e: 7b:d0:56:84:e5:0a:83:04:36:de:42:c9:83:42:e9:b7:e3:21: ba:eb:c5:22:9b:01:af:63:e0:31:7a:39:6a:50:ef:1b:30:fd: b0:38:4d:bb:c4:60:2c:0e:94:26:de:06:cb:5e:be:ea:68:a5: a9:32:3e:ad:45:de:48:a4:3c:e8:12:ea:3d:b0:fb:2b:7d:eb: c7:d3:dd:9e:b2:62:ae:35:f5:ee:57:d3:ba:50:61:03:9e:e3: a6:57:c4:a2:e8:07:78:a1:53:cc:9a:a6:99:40:90:53:e9:c1: 43:a2:ed:ff:62:f8:f2:ee:1d:42:ff:6e:15:a9:9e:f3:d1:bf: 94:6b:b0:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutA825O7N4EnNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk N2UxZmYzZWYtOTNhZi00NzY5LWIzZDQtOTgyZTZmN2I1NzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qa6HyP6j+g98vvLknrHSfyabFpglPNT3qvC mTcmPYzZ2gjez5jMdYZKDhTI2DGjz05xwtroYeORsszzl9+FNGTF+lftycVYPUtu TiCBgHPhrRzMmUycwqu/CKGK1n3dGSqIiXEHeKWTn8OK2grFyKi3MQeQEHQHQs+m 44yHyfoN6QrOZXloKMwCVQhouXhuWQ5kiz0jsm55DQJL0K8kboRdreboMclWLHCi URAJLFkSrFkOZ3O2s35PtSYvB8nT08wsFcHDBud9ECCeplh3ggrAGyTi2grKxULR D4h8pI/LuhW7ZBpqVXXcD5V041t93upXnxUjkb/wtzAXIR5IIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdncluMB396wsQjdTVvcBNrmrgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOTY2MTM0ZDgtMWZjNC0z MGNkLWE4ODItZmFiYzZjMDJjOWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXHPCYDdtFetb7ff3SvJWnU9j/kGur+GyfShNpwsmnBJyolqMgpWwEz 6jqipvCjmUi+uJHMDvL1q9TCg3x23yhI3b1vczYynUdfhmgW7e3sEHQpPptDI5aS AWS/hmd/Hw87AZBeZW7X+BZlYThcQJqszUSAHaI+TuCMVGgjHnvQVoTlCoMENt5C yYNC6bfjIbrrxSKbAa9j4DF6OWpQ7xsw/bA4TbvEYCwOlCbeBstevupopakyPq1F 3kikPOgS6j2w+yt968fT3Z6yYq419e5X07pQYQOe46ZXxKLoB3ihU8yapplAkFPp wUOi7f9i+PLuHUL/bhWpnvPRv5RrsHM= -----END CERTIFICATE-----Generated at Tue Jun 17 11:09:08 2025 by rpki-client