$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa File: b72371d5-0193-3c24-ba87-0c8deffa2219.roa (raw, json) Hash identifier: WbA0RUlCjAowTi3Tj/dALdxBXJta3PSPX1CQxY6j6lE= Subject key identifier: 30:67:08:C2:78:F3:57:5B:6C:A2:76:60:A6:AC:01:1B:C8:BF:B7:A6 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584BBFA59BE0895A759C01512FE0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 13414 IP address blocks: 199.16.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:9b:e0:89:5a:75:9c:01:51:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=fffafccc-6bd5-4bfd-9c0c-713e68b52046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4f:9b:7b:bf:7f:c2:0d:0e:30:c2:12:6e:3d: a6:32:72:a2:18:fd:16:77:41:6b:bd:18:f6:ba:7c: 54:5b:54:c7:4f:f6:95:7d:1f:8c:3a:b8:d5:f3:5b: 6e:fb:91:67:a5:f4:30:50:54:d2:a6:78:65:7f:c5: 4e:d3:68:a6:77:b6:e5:81:1f:cb:3a:d6:60:55:54: 67:71:0a:6c:af:82:c4:32:95:0f:bf:4d:75:38:44: 5c:42:37:64:84:b5:6d:c3:3b:5c:29:cf:53:ef:fa: 59:e4:b5:d2:6b:9e:84:9d:42:92:a1:a6:73:a8:88: 36:d2:69:6b:f0:fe:02:24:b1:54:e8:0c:9d:4c:69: 89:de:25:fb:27:fe:cd:28:4e:ad:80:c6:7f:6c:20: d0:ca:b2:e3:54:06:df:31:ca:a3:7d:7b:55:8d:76: 95:2a:3d:25:da:b2:5f:d2:a5:a3:ca:ad:ac:8e:75: e3:22:e1:de:49:f6:9d:8c:d5:5b:0c:01:e6:d1:fb: 7f:fa:0a:f4:7e:ab:06:79:0e:d4:77:4b:d3:9e:b0: 7d:c8:62:d6:03:68:1d:85:80:9b:15:82:15:32:ff: ae:2e:b3:8b:c5:be:7b:9a:d7:07:fc:6a:2b:74:8d: 2d:55:7c:3b:f1:14:9a:8f:40:14:1a:f5:dd:21:30: c9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:67:08:C2:78:F3:57:5B:6C:A2:76:60:A6:AC:01:1B:C8:BF:B7:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a6:08:ee:7f:a8:d2:f8:b3:10:83:13:45:29:80:4e:eb:f0: f9:2b:54:ce:33:79:59:6a:82:8e:8f:c2:8a:5e:98:54:1d:fb: 62:e4:43:65:57:ad:aa:39:51:d6:cc:dd:6a:2f:04:f3:e3:79: c8:9a:58:66:c7:af:c5:34:90:2c:e3:ef:e3:b5:08:41:70:77: ae:c1:15:e8:f2:a0:bd:2a:7f:7b:9b:71:f2:80:41:45:a1:f3: 9e:27:f9:c8:17:c8:e9:d1:10:45:a3:9e:0c:59:1b:cc:6f:d1: 9f:b9:4d:e8:1c:43:4a:49:fc:10:48:04:14:c0:ff:c2:dd:03: 8d:98:14:40:97:b0:07:23:32:04:8f:f9:7b:bd:42:64:ad:25: dc:33:c8:bb:08:6d:70:41:81:1d:6c:5b:af:c8:99:2d:69:4f: 0c:16:2a:59:5d:5b:c4:72:d2:0b:b1:7d:0e:8d:72:df:59:3d: 46:b8:a3:39:cf:5e:ba:ce:4f:f0:df:3f:71:4c:d4:b5:47:22: ac:8f:c3:58:23:d9:cb:4a:94:7b:51:e0:ae:d3:d2:fd:12:0e: 38:f0:07:86:3b:ce:07:c6:3f:01:cb:06:c6:f3:58:73:b4:30: d7:e9:6e:ba:27:2b:74:db:78:92:64:56:67:b1:38:a0:8d:09: 30:22:1c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZvgiVp1nAFRL+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZmZmYWZjY2MtNmJkNS00YmZkLTljMGMtNzEzZTY4YjUyMDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU+be79/wg0OMMISbj2mMnKiGP0Wd0FrvRj2 unxUW1THT/aVfR+MOrjV81tu+5FnpfQwUFTSpnhlf8VO02imd7blgR/LOtZgVVRn cQpsr4LEMpUPv011OERcQjdkhLVtwztcKc9T7/pZ5LXSa56EnUKSoaZzqIg20mlr 8P4CJLFU6AydTGmJ3iX7J/7NKE6tgMZ/bCDQyrLjVAbfMcqjfXtVjXaVKj0l2rJf 0qWjyq2sjnXjIuHeSfadjNVbDAHm0ft/+gr0fqsGeQ7Ud0vTnrB9yGLWA2gdhYCb FYIVMv+uLrOLxb57mtcH/GordI0tVXw78RSaj0AUGvXdITDJCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBnCMJ481dbbKJ2YKasARvIv7emMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYjcyMzcxZDUtMDE5My0z YzI0LWJhODctMGM4ZGVmZmEyMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSmCO5/qNL4sxCDE0UpgE7r8PkrVM4zeVlqgo6PwopemFQd+2LkQ2VX rao5UdbM3WovBPPjeciaWGbHr8U0kCzj7+O1CEFwd67BFejyoL0qf3ubcfKAQUWh 854n+cgXyOnREEWjngxZG8xv0Z+5TegcQ0pJ/BBIBBTA/8LdA42YFECXsAcjMgSP +Xu9QmStJdwzyLsIbXBBgR1sW6/ImS1pTwwWKlldW8Ry0guxfQ6Nct9ZPUa4oznP XrrOT/DfP3FM1LVHIqyPw1gj2ctKlHtR4K7T0v0SDjjwB4Y7zgfGPwHLBsbzWHO0 MNfpbronK3TbeJJkVmexOKCNCTAiHJ0= -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:59 2025 by rpki-client