$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf6ea6d9-5cac-3031-b9b0-7f5ce3e80324.roa File: bf6ea6d9-5cac-3031-b9b0-7f5ce3e80324.roa (raw, json) Hash identifier: OgQZeb3N7EDX46DdW8TY7w/tb/YjC0WsBrXe1p0sk7k= Subject key identifier: 9F:92:09:1A:82:23:91:B1:99:CB:10:24:F9:31:36:8F:11:D1:0A:D3 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A90A0C190114F6C7DE58A5180 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf6ea6d9-5cac-3031-b9b0-7f5ce3e80324.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 13692 IP address blocks: 69.1.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c1:90:11:4f:6c:7d:e5:8a:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=76ec6400-69ad-4d64-ac1f-30131ddbc552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fd:22:cd:d9:c1:05:a4:3b:ea:0e:34:13:33: 8d:8c:f7:cb:ee:6f:ba:07:f9:d4:fd:ef:dd:eb:4d: 0d:f1:c1:b6:5f:18:0f:81:97:bc:c2:a9:7f:5e:fe: b8:0c:02:eb:82:4a:a4:a7:e6:03:5f:b4:ba:7f:bd: 69:be:e0:74:29:f0:fe:18:5a:05:59:a7:f7:6c:c1: a2:48:f6:d0:50:88:95:a7:8f:32:82:e3:b8:43:ca: 2c:60:78:f6:c1:f5:d5:11:15:2f:e2:60:22:55:8e: c1:5a:f8:4b:4d:e1:3a:48:e6:c0:57:ab:81:4b:f7: 99:e5:4f:42:94:56:7f:29:78:14:a3:7c:92:1a:26: 27:1e:d1:45:fa:dc:20:b4:f5:9c:67:dc:d9:df:ed: 25:c2:eb:90:d2:fd:05:50:33:32:db:d1:6e:19:27: bb:92:e6:67:40:7f:fa:75:27:33:1b:88:2e:f2:29: 57:13:80:e2:77:ca:63:ec:2d:4a:5a:d1:12:d4:44: db:e3:20:e1:2b:45:73:2d:ac:bb:ac:ba:f4:bc:38: 12:fe:b5:8e:e3:31:70:a3:33:93:2e:0b:76:b4:b6: b5:cb:e3:b0:d7:6c:d5:a4:03:54:b5:46:4f:6d:3f: 03:de:a8:6c:19:16:45:7e:e1:bc:9f:ca:1b:c1:5f: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:92:09:1A:82:23:91:B1:99:CB:10:24:F9:31:36:8F:11:D1:0A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf6ea6d9-5cac-3031-b9b0-7f5ce3e80324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 69.1.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:96:e7:14:63:fd:57:33:a7:fe:13:64:e3:f9:07:b4:60:05: 39:a9:5c:eb:a7:0f:78:cf:a3:37:ff:ba:16:59:f8:c1:e4:a4: c9:62:e3:a4:c5:1a:2a:43:34:96:b0:8d:40:45:c5:fa:c3:9e: 45:82:b2:e5:e7:39:38:88:51:41:8d:84:64:e7:bf:fa:fe:97: c6:cc:bf:2d:27:7c:0c:a2:85:b6:24:a1:4b:ca:3a:32:ce:c3: e3:16:7b:0c:45:be:c6:32:00:f7:cd:29:ed:06:8c:a7:13:0b: 89:eb:1c:ca:b3:63:bf:77:ab:6a:a7:7e:63:de:e5:5f:17:e1: de:08:57:61:78:34:39:26:82:0e:c7:ae:40:39:c9:35:c0:c7: 5c:ba:c2:97:76:e5:3a:e0:76:66:a0:35:c8:41:a7:53:08:68: cc:1c:6b:23:3d:de:b0:85:f9:ea:be:90:41:d1:b5:02:6b:2d: cd:71:4e:7b:a0:c2:fa:1b:29:d4:78:46:16:66:32:6a:af:78: 4e:00:f3:45:9d:e9:54:78:fa:61:5b:ec:f7:a2:2d:45:5f:f0: ab:99:a1:52:e5:0f:43:c7:0d:45:55:27:7d:e5:ff:53:a8:2e: 78:a9:ea:64:80:36:d3:5a:0f:82:69:5c:5e:49:64:18:47:85: a3:eb:54:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMGQEU9sfeWKUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NzZlYzY0MDAtNjlhZC00ZDY0LWFjMWYtMzAxMzFkZGJjNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/0izdnBBaQ76g40EzONjPfL7m+6B/nU/e/d 600N8cG2XxgPgZe8wql/Xv64DALrgkqkp+YDX7S6f71pvuB0KfD+GFoFWaf3bMGi SPbQUIiVp48yguO4Q8osYHj2wfXVERUv4mAiVY7BWvhLTeE6SObAV6uBS/eZ5U9C lFZ/KXgUo3ySGiYnHtFF+twgtPWcZ9zZ3+0lwuuQ0v0FUDMy29FuGSe7kuZnQH/6 dSczG4gu8ilXE4Did8pj7C1KWtES1ETb4yDhK0VzLay7rLr0vDgS/rWO4zFwozOT Lgt2tLa1y+Ow12zVpANUtUZPbT8D3qhsGRZFfuG8n8obwV8bVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+SCRqCI5GxmcsQJPkxNo8R0QrTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYmY2ZWE2ZDktNWNhYy0z MDMxLWI5YjAtN2Y1Y2UzZTgwMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRQFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaW5xRj/Vczp/4TZOP5B7RgBTmpXOunD3jPozf/uhZZ+MHkpMli46TF GipDNJawjUBFxfrDnkWCsuXnOTiIUUGNhGTnv/r+l8bMvy0nfAyihbYkoUvKOjLO w+MWewxFvsYyAPfNKe0GjKcTC4nrHMqzY793q2qnfmPe5V8X4d4IV2F4NDkmgg7H rkA5yTXAx1y6wpd25TrgdmagNchBp1MIaMwcayM93rCF+eq+kEHRtQJrLc1xTnug wvobKdR4RhZmMmqveE4A80Wd6VR4+mFb7PeiLUVf8KuZoVLlD0PHDUVVJ33l/1Oo Lnip6mSANtNaD4JpXF5JZBhHhaPrVOo= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:51 2025 by rpki-client