$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2c9575af-cc4c-380b-a190-1fe829176b88.roa File: 2c9575af-cc4c-380b-a190-1fe829176b88.roa (raw, json) Hash identifier: 30bmNBGKEAv8Kyr7+pXPHzBmhP9GzRUmc/XlQ8iOGD8= Subject key identifier: C4:67:BC:83:E5:7A:A2:02:12:09:3D:25:8B:48:7A:C1:AB:38:41:1D Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584B0B76AA8DEE65A2CE35BDAAC0 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2c9575af-cc4c-380b-a190-1fe829176b88.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 69.170.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:aa:8d:ee:65:a2:ce:35:bd:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=a80e6b9d-a45c-4fb2-b230-79d4ceb1ace3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3a:48:7f:e2:e1:9b:7f:f0:20:4a:40:d8:1a: 43:c4:42:35:5e:7a:a2:00:13:18:ca:e7:6e:f5:3e: 20:9c:c2:03:74:d8:8b:b2:06:3d:07:ef:83:c8:6a: 1a:4a:d1:38:b2:18:70:f0:27:66:4c:9e:f5:b1:34: 40:01:f6:1e:03:ea:1e:3a:58:c5:ed:27:2f:5f:19: c0:4a:5c:6a:c7:1d:fc:06:fb:e2:dd:70:65:ef:b4: 7b:b3:cd:eb:df:ff:d2:66:83:f3:5a:cd:96:a7:ba: b2:97:8b:37:14:0c:15:e1:5c:1e:9e:06:2b:12:a3: ba:35:de:82:0c:7f:dd:74:b4:cf:b6:bf:e2:ef:ba: ef:ff:79:18:0f:ae:49:03:0e:72:4f:e5:b7:da:12: 7b:18:f3:1a:22:06:43:52:68:55:b5:7b:c2:a8:68: 15:c3:53:57:55:4b:4d:ba:68:76:95:e5:98:9e:0c: 18:63:8c:af:cf:9a:1d:cd:ef:dc:a7:38:ae:5a:97: a1:37:8d:97:4c:d6:e3:f6:38:aa:d3:a9:de:fe:ac: 0a:61:7b:9f:53:b3:f7:f9:79:fe:14:d0:97:6e:b5: 7a:7a:67:5d:92:7f:8b:bb:52:d6:6c:52:8e:6a:0f: 58:30:7f:9a:ac:74:71:62:f3:95:1d:d6:28:0f:b8: a2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:67:BC:83:E5:7A:A2:02:12:09:3D:25:8B:48:7A:C1:AB:38:41:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2c9575af-cc4c-380b-a190-1fe829176b88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 69.170.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ce:29:9b:40:d7:57:fa:d7:8d:87:a9:9f:35:b9:06:a1:5f: 4e:ed:bd:39:b0:d5:f3:a5:92:64:1b:78:bd:37:80:47:1e:b4: 8a:07:e8:02:65:9d:ed:0e:b7:4f:bd:5e:87:0f:d2:71:50:09: f8:73:39:d5:a9:9f:16:8e:92:ca:ad:a0:c4:68:0d:e7:54:e1: 6b:8b:96:3d:9a:a2:4f:6c:15:ad:65:af:ac:b9:d8:d9:46:97: 5e:68:d5:87:dd:02:cc:1d:7f:d9:26:dc:fe:52:52:32:1e:34: d7:83:31:99:ad:e3:ae:80:60:2c:87:67:cd:26:8b:6f:a7:5b: 36:da:78:56:4f:98:e3:d1:3a:25:ab:d4:4d:27:d0:8b:b3:a1: 0c:5b:ff:2c:91:35:a3:db:fb:cf:b4:d7:3b:08:f0:8f:b1:33: e3:f1:fe:5c:42:b8:99:75:ec:73:21:22:47:e7:c3:99:42:99: e0:34:5d:5a:9b:c5:a1:2f:3c:d7:34:3b:83:79:87:f8:9a:28: 7c:2f:47:46:aa:c0:26:1b:aa:67:67:b8:1e:cc:cf:f9:9c:84: 67:b2:a3:f9:6d:40:f3:ac:af:01:8a:14:4d:da:c4:fb:06:ad: fc:44:7d:3a:a7:0d:be:1b:79:a1:6b:d5:65:ed:d0:c7:83:2b: c3:cb:6a:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqqN7mWizjW9qsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YTgwZTZiOWQtYTQ1Yy00ZmIyLWIyMzAtNzlkNGNlYjFhY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizpIf+Lhm3/wIEpA2BpDxEI1XnqiABMYyudu 9T4gnMIDdNiLsgY9B++DyGoaStE4shhw8CdmTJ71sTRAAfYeA+oeOljF7ScvXxnA Slxqxx38Bvvi3XBl77R7s83r3//SZoPzWs2Wp7qyl4s3FAwV4VwengYrEqO6Nd6C DH/ddLTPtr/i77rv/3kYD65JAw5yT+W32hJ7GPMaIgZDUmhVtXvCqGgVw1NXVUtN umh2leWYngwYY4yvz5odze/cpziuWpehN42XTNbj9jiq06ne/qwKYXufU7P3+Xn+ FNCXbrV6emddkn+Lu1LWbFKOag9YMH+arHRxYvOVHdYoD7ii4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRnvIPleqICEgk9JYtIesGrOEEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvMmM5NTc1YWYtY2M0Yy0z ODBiLWExOTAtMWZlODI5MTc2Yjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARaq7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTOKZtA11f6142HqZ81uQahX07tvTmw1fOlkmQbeL03gEcetIoH6AJl ne0Ot0+9XocP0nFQCfhzOdWpnxaOksqtoMRoDedU4WuLlj2aok9sFa1lr6y52NlG l15o1YfdAswdf9km3P5SUjIeNNeDMZmt466AYCyHZ80mi2+nWzbaeFZPmOPROiWr 1E0n0IuzoQxb/yyRNaPb+8+01zsI8I+xM+Px/lxCuJl17HMhIkfnw5lCmeA0XVqb xaEvPNc0O4N5h/iaKHwvR0aqwCYbqmdnuB7Mz/mchGeyo/ltQPOsrwGKFE3axPsG rfxEfTqnDb4beaFr1WXt0MeDK8PLais= -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:24 2025 by rpki-client