$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ccc9faba-f32f-30e1-bdf4-f0a283aa23e1.roa File: ccc9faba-f32f-30e1-bdf4-f0a283aa23e1.roa (raw, json) Hash identifier: F/TjfNwbUcrxJswQGy+3wkQf+bsPTe3/uy72M/oD9Yo= Subject key identifier: F7:0C:AD:64:8D:35:8F:37:C7:E7:B4:9A:0A:06:65:70:6F:5C:D3:BD Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584F2EED0BA2B537C5F75342B080 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ccc9faba-f32f-30e1-bdf4-f0a283aa23e1.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 13414 IP address blocks: 64.63.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0b:a2:b5:37:c5:f7:53:42:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=549e59cc-e972-49bf-95dc-6a858c143817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cf:06:a5:dc:e4:03:7a:0f:19:37:60:57:d4: 5e:4e:2e:2b:0f:b1:f8:6a:2c:a9:57:c5:64:00:92: 7c:77:4b:fb:ca:04:8c:92:32:73:9a:a4:7d:cc:d8: cc:b5:87:d9:79:da:59:da:de:c4:38:0b:b0:98:7d: fe:df:64:77:b5:83:f8:31:a3:52:dd:2c:7e:73:2e: 4d:22:e6:b2:c1:df:c4:65:e4:4a:07:ee:21:3b:26: bd:d9:e9:c2:77:4c:fb:3a:f0:d4:51:65:13:9c:77: 09:05:94:73:a5:5a:05:b0:54:64:ef:87:11:02:7e: 71:62:08:c2:f4:55:99:42:cc:b1:fa:cd:e6:dd:58: ee:83:a6:4d:08:1a:48:cd:ec:cd:ce:77:ce:19:61: a1:0a:42:2e:5b:2d:8f:2e:5a:02:54:74:43:b3:56: f2:a0:5c:c4:53:ef:b9:ca:4f:c1:9b:d0:67:27:9a: e5:a5:a9:e8:6d:4a:b4:e1:57:2c:5f:8e:d7:3b:ff: 25:7a:9e:48:d8:2e:24:78:ee:d0:f4:e3:56:6d:cd: e1:a8:cc:ed:65:fa:df:9e:00:49:63:46:a5:d8:4c: 1d:ff:b5:f6:9c:df:3e:aa:0a:30:3f:ed:19:e4:4f: 8f:f8:c8:f1:7e:0b:06:20:c0:80:50:14:6f:dc:5f: 67:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0C:AD:64:8D:35:8F:37:C7:E7:B4:9A:0A:06:65:70:6F:5C:D3:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ccc9faba-f32f-30e1-bdf4-f0a283aa23e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:83:aa:71:e1:95:19:89:b5:00:94:af:1b:b0:bd:5f:5d:90: 9a:15:e1:50:05:bb:0b:e8:c5:ea:a4:35:0b:b1:be:0c:c7:b8: d3:8a:db:47:38:af:d4:de:04:56:c0:0c:bb:80:b9:b2:d2:d1: 82:76:8b:aa:b7:6b:67:60:0e:2b:22:c7:d8:f4:97:17:64:f1: 66:21:b2:7e:a5:47:92:6c:34:c1:8b:22:8c:4d:ad:c2:78:62: 79:c1:7e:23:16:32:2d:73:97:27:f8:90:14:cc:93:e1:34:6a: 74:d9:1d:26:c2:a0:84:fa:ac:83:c7:22:06:d1:5e:6c:27:3c: 8f:24:84:ed:bd:b6:db:9e:4d:52:a2:d0:df:d3:13:9f:2a:d1: e2:d0:cb:0d:96:11:1b:2a:94:2f:f3:e4:e3:ec:92:d6:18:f9: fe:3f:37:bb:ea:b1:24:24:8b:8b:8d:19:45:54:dc:42:8a:21: 01:1f:86:45:01:82:c5:55:b5:55:ee:e6:59:c1:64:e3:b6:69: df:5e:34:99:63:70:bc:27:ec:f8:77:30:23:58:dd:c6:94:e7: 2f:3e:0b:9f:93:d6:ae:9e:45:be:80:ed:14:7a:e8:94:17:6e: 93:e6:ce:2d:cf:75:fb:36:d1:a7:86:01:55:f0:70:14:36:48: bf:e4:6b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7QuitTfF91NCsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NTQ5ZTU5Y2MtZTk3Mi00OWJmLTk1ZGMtNmE4NThjMTQzODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM8GpdzkA3oPGTdgV9ReTi4rD7H4aiypV8Vk AJJ8d0v7ygSMkjJzmqR9zNjMtYfZedpZ2t7EOAuwmH3+32R3tYP4MaNS3Sx+cy5N Iuaywd/EZeRKB+4hOya92enCd0z7OvDUUWUTnHcJBZRzpVoFsFRk74cRAn5xYgjC 9FWZQsyx+s3m3Vjug6ZNCBpIzezNznfOGWGhCkIuWy2PLloCVHRDs1byoFzEU++5 yk/Bm9BnJ5rlpanobUq04VcsX47XO/8lep5I2C4keO7Q9ONWbc3hqMztZfrfngBJ Y0al2Ewd/7X2nN8+qgowP+0Z5E+P+MjxfgsGIMCAUBRv3F9n8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcMrWSNNY83x+e0mgoGZXBvXNO9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvY2NjOWZhYmEtZjMyZi0z MGUxLWJkZjQtZjBhMjgzYWEyM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+DqnHhlRmJtQCUrxuwvV9dkJoV4VAFuwvoxeqkNQuxvgzHuNOK20c4 r9TeBFbADLuAubLS0YJ2i6q3a2dgDisix9j0lxdk8WYhsn6lR5JsNMGLIoxNrcJ4 YnnBfiMWMi1zlyf4kBTMk+E0anTZHSbCoIT6rIPHIgbRXmwnPI8khO29ttueTVKi 0N/TE58q0eLQyw2WERsqlC/z5OPsktYY+f4/N7vqsSQki4uNGUVU3EKKIQEfhkUB gsVVtVXu5lnBZOO2ad9eNJljcLwn7Ph3MCNY3caU5y8+C5+T1q6eRb6A7RR66JQX bpPmzi3Pdfs20aeGAVXwcBQ2SL/kazA= -----END CERTIFICATE-----Generated at Sat Sep 26 09:15:00 2026 by rpki-client