$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/023c0147-31da-314e-b950-3ddf9ade51ea.roa File: 023c0147-31da-314e-b950-3ddf9ade51ea.roa (raw, json) Hash identifier: hNZH3KwgtpCNzhHzyJL3fYo6FIPiGo/cZajE7sk5Gc8= Subject key identifier: 13:20:D0:02:71:78:EE:B8:94:A2:B5:A3:1F:A0:59:DC:5C:3B:2B:C9 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584AAA8736863CDCCCD1C959BCC0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/023c0147-31da-314e-b950-3ddf9ade51ea.roa Signing time: Mon 28 Jul 2025 07:40:37 +0000 ROA not before: Mon 28 Jul 2025 07:40:37 +0000 ROA not after: Sun 26 Oct 2025 07:40:37 +0000 asID: 398493 IP address blocks: 69.176.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:aa:87:36:86:3c:dc:cc:d1:c9:59:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jul 28 07:40:37 2025 GMT Not After : Oct 26 07:40:37 2025 GMT Subject: CN=17020cb1-ae31-463c-884b-36f80f0a65b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8a:cb:01:99:fa:fe:b5:67:5a:97:39:85:47: f3:83:f9:49:dc:f8:85:c4:da:bf:9e:99:d7:ad:a3: ca:3e:ca:ac:4c:60:0c:81:59:64:e6:df:86:5c:ce: 89:7d:de:8d:41:f8:a8:ed:18:f4:f4:2e:86:6e:3a: 56:97:c8:e6:12:f1:83:81:c2:41:0a:59:4b:78:a7: c7:bd:bf:d1:1b:e5:30:34:08:e9:49:8d:6c:29:79: 4f:45:19:8d:42:85:f8:68:30:75:ad:33:74:9e:b8: 17:09:db:10:94:4a:0d:68:4d:54:79:03:1e:bb:bd: 6a:0c:df:9a:8b:ff:ac:41:23:46:a2:2e:d1:9c:98: 30:15:18:fa:55:1f:fb:7d:b9:b6:b3:1b:2e:95:cb: af:5f:d6:a1:34:0e:59:bd:26:dd:f4:17:37:6e:04: bf:a8:58:e6:e9:46:58:20:5c:1a:48:32:ba:02:cf: 96:07:1c:55:46:a7:05:90:83:99:88:69:0f:ea:a4: 11:78:42:ff:fb:f3:3e:2e:ec:f1:a5:9c:7a:76:15: 35:58:4e:38:af:14:e8:33:bd:6e:f5:67:48:27:5d: e0:cb:85:6d:3c:b1:e9:54:c2:ee:47:4c:e1:88:e1: de:8f:37:3e:49:58:bc:bd:af:b6:7d:ac:3d:b3:92: 4c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:20:D0:02:71:78:EE:B8:94:A2:B5:A3:1F:A0:59:DC:5C:3B:2B:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/023c0147-31da-314e-b950-3ddf9ade51ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 69.176.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5e:30:c5:2b:83:4a:21:2b:39:4e:67:94:6a:16:6f:00:39: 8c:52:da:cb:45:5e:2f:05:6f:f1:47:22:78:84:03:cd:87:68: b6:58:ba:5d:3e:79:a3:9e:0c:bc:28:a4:0b:dc:af:b6:f2:cc: 22:93:b7:a0:d7:c3:1d:e9:17:ed:56:1f:ce:bd:13:a7:53:83: 17:a9:79:cb:d6:21:b1:0c:7e:66:aa:23:ed:e6:5d:d5:52:1b: d8:8c:a9:3f:45:d9:62:69:cc:7b:81:83:31:5b:20:79:e5:63: ef:29:87:53:9c:98:ea:d1:07:44:6d:5e:6e:60:f8:96:5c:d0: 56:74:fb:da:e6:91:14:b7:26:50:33:0a:ed:2c:cd:ae:e1:5c: 38:64:e7:37:60:4b:b0:d8:7c:30:4b:a1:fe:c8:50:52:7e:02: 0b:da:f7:66:dd:58:26:08:4a:b7:9b:d3:60:5b:7b:0a:c0:c3: ef:74:f2:3a:86:d5:41:8c:98:06:01:e4:fb:59:32:fc:8a:7d: 2f:f9:02:03:df:a3:0a:0d:60:c2:d3:f5:49:5d:dd:db:49:49: 37:5f:ba:ea:60:0a:49:3f:4e:fb:43:7c:77:13:80:68:9b:f3: 01:1f:eb:8c:0a:02:74:a3:a5:86:25:16:f4:d6:0f:bd:be:dd: 5c:62:5e:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqqhzaGPNzM0clZvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDcyODA3NDAzN1oXDTI1MTAyNjA3NDAzN1owLzEtMCsGA1UEAxMk MTcwMjBjYjEtYWUzMS00NjNjLTg4NGItMzZmODBmMGE2NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgorLAZn6/rVnWpc5hUfzg/lJ3PiFxNq/npnX raPKPsqsTGAMgVlk5t+GXM6Jfd6NQfio7Rj09C6GbjpWl8jmEvGDgcJBCllLeKfH vb/RG+UwNAjpSY1sKXlPRRmNQoX4aDB1rTN0nrgXCdsQlEoNaE1UeQMeu71qDN+a i/+sQSNGoi7RnJgwFRj6VR/7fbm2sxsulcuvX9ahNA5ZvSbd9Bc3bgS/qFjm6UZY IFwaSDK6As+WBxxVRqcFkIOZiGkP6qQReEL/+/M+LuzxpZx6dhU1WE44rxToM71u 9WdIJ13gy4VtPLHpVMLuR0zhiOHejzc+SVi8va+2faw9s5JMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMg0AJxeO64lKK1ox+gWdxcOyvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMDIzYzAxNDctMzFkYS0z MTRlLWI5NTAtM2RkZjlhZGU1MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACheMMUrg0ohKzlOZ5RqFm8AOYxS2stFXi8Fb/FHIniEA82HaLZYul0+ eaOeDLwopAvcr7byzCKTt6DXwx3pF+1WH869E6dTgxepecvWIbEMfmaqI+3mXdVS G9iMqT9F2WJpzHuBgzFbIHnlY+8ph1OcmOrRB0RtXm5g+JZc0FZ0+9rmkRS3JlAz Cu0sza7hXDhk5zdgS7DYfDBLof7IUFJ+Agva92bdWCYISreb02BbewrAw+908jqG 1UGMmAYB5PtZMvyKfS/5AgPfowoNYMLT9Uld3dtJSTdfuupgCkk/TvtDfHcTgGib 8wEf64wKAnSjpYYlFvTWD72+3VxiXjY= -----END CERTIFICATE-----Generated at Mon Aug 4 07:54:08 2025 by rpki-client