$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa File: c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa (raw, json) Hash identifier: cG11Rg8eUf2JjP89mGhCDvg7dARozpPo8RbDecCaf4w= Subject key identifier: D4:73:F6:4B:6E:F3:6A:A9:E9:1B:BD:4E:AF:F2:05:9F:0A:5D:71:CD Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584ADECBADDA5B9C3E2791E53A60 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 13414 IP address blocks: 199.59.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:ad:da:5b:9c:3e:27:91:e5:3a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=a358cf92-3f4c-4a55-857c-63e3e6550542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:a7:8b:ab:c5:e3:81:a9:da:d4:76:43:fa: 1a:7f:59:04:a1:f9:c5:34:fe:b0:a2:17:67:ba:b3: d3:00:47:f0:f4:f7:3c:8a:13:fa:bf:92:a1:93:8f: 13:c4:a6:81:af:f9:19:40:11:16:28:c3:8f:d7:04: c4:45:81:43:a4:89:bf:67:0a:71:23:09:11:fe:1a: c3:b0:5b:15:93:49:07:49:63:36:70:ea:44:23:32: 05:5d:50:9e:b0:fb:e4:4d:ad:dc:d4:36:0a:8a:53: dc:64:9f:34:cc:47:92:5a:62:04:f5:95:45:0b:3a: cb:aa:cb:a8:52:5b:22:c5:72:8f:00:5a:cf:ce:9c: c7:bc:d3:c4:96:7a:b3:3f:7b:89:92:ce:b7:e0:26: ce:48:61:50:cf:79:e7:97:d7:8c:52:de:c1:a6:68: a0:79:71:e9:dc:c6:8e:09:ba:34:6b:0f:23:fb:ba: af:69:71:90:62:9b:4e:9f:6c:86:36:e4:88:51:e5: 9b:6d:18:97:54:b4:9e:b0:c2:9d:16:5f:6f:cc:57: 14:5a:9f:4a:56:5b:36:a0:30:c2:5b:2e:32:48:16: ed:08:b0:60:25:a7:58:c5:f0:a6:3b:99:64:89:3f: fc:fe:20:0a:09:c4:4b:e8:f0:6a:5c:ae:8e:ca:e2: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:73:F6:4B:6E:F3:6A:A9:E9:1B:BD:4E:AF:F2:05:9F:0A:5D:71:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:09:8f:30:49:32:e5:d6:7f:44:7e:4b:d7:55:13:dc:cf:20: d0:6e:00:f1:d7:73:2a:74:c0:47:ad:df:a4:44:a9:aa:a9:1b: 5b:bc:f6:ac:80:52:de:29:43:e1:58:a7:8f:07:34:ab:26:42: 73:db:ba:cb:63:12:57:29:95:04:06:5c:30:79:81:3a:7d:ec: a9:ed:06:e4:d8:bd:66:3e:46:4d:4b:e1:6e:ff:40:40:a2:69: 9c:38:35:e3:6f:65:ca:35:df:e3:2a:64:e8:af:dd:b2:08:3e: 26:bb:e7:b7:d1:59:f9:3f:2d:42:73:e0:ae:3a:79:8c:bf:58: 3c:cd:af:ea:6c:27:c2:9d:b7:7f:01:ca:ff:07:44:b6:f4:a8: 2f:62:09:20:fe:dd:3e:37:17:05:a0:00:fc:83:0b:b7:33:87: 81:5f:1c:75:8d:e6:e9:24:85:e4:e9:40:03:e1:fb:bd:38:01: 26:6a:77:7d:7c:d6:75:ec:80:a0:46:27:04:66:99:6c:21:47: ec:5a:f3:66:1d:b4:74:db:83:40:6b:43:78:b8:4b:0d:36:dc: 4a:d8:0b:cc:52:e3:0a:76:22:49:d0:25:d5:13:0d:b0:36:c6: 01:b5:6c:a2:0e:08:8d:86:0f:9a:0a:86:ad:f4:6c:bd:e5:2d: a1:d0:c9:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey63aW5w+J5HlOmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YTM1OGNmOTItM2Y0Yy00YTU1LTg1N2MtNjNlM2U2NTUwNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDCni6vF44Gp2tR2Q/oaf1kEofnFNP6wohdn urPTAEfw9Pc8ihP6v5Khk48TxKaBr/kZQBEWKMOP1wTERYFDpIm/ZwpxIwkR/hrD sFsVk0kHSWM2cOpEIzIFXVCesPvkTa3c1DYKilPcZJ80zEeSWmIE9ZVFCzrLqsuo UlsixXKPAFrPzpzHvNPElnqzP3uJks634CbOSGFQz3nnl9eMUt7BpmigeXHp3MaO Cbo0aw8j+7qvaXGQYptOn2yGNuSIUeWbbRiXVLSesMKdFl9vzFcUWp9KVls2oDDC Wy4ySBbtCLBgJadYxfCmO5lkiT/8/iAKCcRL6PBqXK6OyuIxYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRz9ktu82qp6Ru9Tq/yBZ8KXXHNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYzliMGU1YTktODJhYS0z ZDk2LThkODUtODBkMmYyYWE1OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzuXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwJjzBJMuXWf0R+S9dVE9zPINBuAPHXcyp0wEet36REqaqpG1u89qyA Ut4pQ+FYp48HNKsmQnPbustjElcplQQGXDB5gTp97KntBuTYvWY+Rk1L4W7/QECi aZw4NeNvZco13+MqZOiv3bIIPia757fRWfk/LUJz4K46eYy/WDzNr+psJ8Kdt38B yv8HRLb0qC9iCSD+3T43FwWgAPyDC7czh4FfHHWN5ukkheTpQAPh+704ASZqd318 1nXsgKBGJwRmmWwhR+xa82YdtHTbg0BrQ3i4Sw023ErYC8xS4wp2IknQJdUTDbA2 xgG1bKIOCI2GD5oKhq30bL3lLaHQyVg= -----END CERTIFICATE-----Generated at Sun Aug 24 01:23:55 2025 by rpki-client