$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3a1cd750-9ba6-33f4-8a2c-0ab6ccf6854c.roa File: 3a1cd750-9ba6-33f4-8a2c-0ab6ccf6854c.roa (raw, json) Hash identifier: YSYUsrVnX3u49VuK/AY8DX1uCU3VX5NLUBNmbvPw86Q= Subject key identifier: A8:1F:93:66:47:94:B9:4A:00:90:15:95:42:B7:74:30:DC:7B:EA:3C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AE2FBC81D1174CEBFEED95880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3a1cd750-9ba6-33f4-8a2c-0ab6ccf6854c.roa Signing time: Sun 17 Aug 2025 13:00:41 +0000 ROA not before: Sun 17 Aug 2025 13:00:41 +0000 ROA not after: Sat 15 Nov 2025 14:00:41 +0000 asID: 5065 IP address blocks: 69.17.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:fb:c8:1d:11:74:ce:bf:ee:d9:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 17 13:00:41 2025 GMT Not After : Nov 15 14:00:41 2025 GMT Subject: CN=2a77ef7d-95c3-4eaf-95a8-b3a97fe97a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:2a:49:7a:4a:f6:58:fb:16:7e:b3:c7:df: c0:38:79:13:26:24:79:59:a7:18:f3:bb:65:b8:2d: dc:eb:71:a9:16:e2:43:64:20:8a:9c:ad:65:8b:41: f2:b6:14:72:33:d6:17:16:d8:3b:5d:2c:82:c4:8c: 2b:ab:9c:9c:da:49:20:b4:15:1a:16:77:37:5f:2e: 82:31:5d:f0:f4:e3:a6:dc:b0:fb:1d:2c:fb:b7:c2: 19:59:97:ed:4d:d9:14:6f:94:b3:ec:f4:56:bd:40: 75:d4:b8:6a:79:54:56:25:47:0b:44:fa:02:e0:1b: 5f:cc:ff:71:f8:56:33:d8:1e:d8:ff:26:55:ff:3a: 13:9a:c0:b1:82:15:c7:0d:78:8b:f5:e0:d4:25:00: 03:08:ee:9e:b5:f9:b5:2a:09:04:e6:55:e5:4b:ae: 28:f5:60:e5:89:73:62:cc:77:e9:4b:e1:ed:c0:11: d2:98:f7:6e:43:01:18:fe:6e:9f:f0:55:86:58:25: f0:3e:36:7e:41:5a:fd:1a:44:b3:1d:78:f2:da:fd: 83:8a:65:90:98:07:61:45:04:5a:ba:7c:60:ee:77: d4:11:e2:41:7c:bb:da:4e:5d:b2:cc:a7:99:a0:7f: f9:1e:b9:c5:c4:93:eb:73:c8:e1:d2:a1:fd:83:ed: 9c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1F:93:66:47:94:B9:4A:00:90:15:95:42:B7:74:30:DC:7B:EA:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3a1cd750-9ba6-33f4-8a2c-0ab6ccf6854c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.17.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:41:6b:bd:7a:f8:c4:86:06:b3:da:92:a5:c7:aa:43:9e:e6: 17:18:d7:49:c9:43:12:4c:9f:ca:19:f5:59:75:68:19:95:b2: 0b:5b:39:2e:11:8a:79:87:6a:5b:e2:9f:4e:f5:08:ce:a8:4b: ef:11:78:9d:1e:d8:28:3d:df:7e:0d:7a:84:67:e0:18:36:14: 88:22:51:97:0f:22:f7:ea:c8:f2:f0:d4:0c:ec:2a:cb:9a:92: 24:e6:3d:33:0a:61:8c:a3:17:b9:ad:1f:ed:c8:b9:b9:4b:2e: 95:05:31:6b:4d:39:ff:13:e8:c3:cb:05:4b:20:91:5a:a9:d7: ef:a1:90:6e:16:26:9e:7b:6c:6d:47:c3:5c:2e:fd:67:f1:65: 18:43:77:86:60:d0:5f:19:48:a4:5b:cc:a8:95:3d:7f:f5:d2: f1:1d:a9:96:f5:fb:67:5f:0f:2a:fc:d9:ae:76:a6:39:0a:c7: 73:89:20:b2:09:24:13:96:29:4f:a9:3b:2d:e3:3c:f0:a6:4c: 02:d2:b9:1b:f2:c0:56:d1:32:ef:83:2d:a4:bf:07:f2:ea:24: ca:6b:37:4c:f6:6d:f4:d8:e0:79:67:a1:b4:11:0a:8c:26:54: fb:09:a3:39:6f:4d:e9:5d:2e:10:68:5b:fd:84:c4:db:d1:00: df:56:d7:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEri+8gdEXTOv+7ZWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk MmE3N2VmN2QtOTVjMy00ZWFmLTk1YTgtYjNhOTdmZTk3YTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOAqSXpK9lj7Fn6zx9/AOHkTJiR5WacY87tl uC3c63GpFuJDZCCKnK1li0HythRyM9YXFtg7XSyCxIwrq5yc2kkgtBUaFnc3Xy6C MV3w9OOm3LD7HSz7t8IZWZftTdkUb5Sz7PRWvUB11LhqeVRWJUcLRPoC4BtfzP9x +FYz2B7Y/yZV/zoTmsCxghXHDXiL9eDUJQADCO6etfm1KgkE5lXlS64o9WDliXNi zHfpS+HtwBHSmPduQwEY/m6f8FWGWCXwPjZ+QVr9GkSzHXjy2v2DimWQmAdhRQRa unxg7nfUEeJBfLvaTl2yzKeZoH/5HrnFxJPrc8jh0qH9g+2cCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgfk2ZHlLlKAJAVlUK3dDDce+o8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2ExY2Q3NTAtOWJhNi0z M2Y0LThhMmMtMGFiNmNjZjY4NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARREJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpBa716+MSGBrPakqXHqkOe5hcY10nJQxJMn8oZ9Vl1aBmVsgtbOS4R inmHalvin071CM6oS+8ReJ0e2Cg9334NeoRn4Bg2FIgiUZcPIvfqyPLw1AzsKsua kiTmPTMKYYyjF7mtH+3IublLLpUFMWtNOf8T6MPLBUsgkVqp1++hkG4WJp57bG1H w1wu/WfxZRhDd4Zg0F8ZSKRbzKiVPX/10vEdqZb1+2dfDyr82a52pjkKx3OJILIJ JBOWKU+pOy3jPPCmTALSuRvywFbRMu+DLaS/B/LqJMprN0z2bfTY4HlnobQRCowm VPsJozlvTeldLhBoW/2ExNvRAN9W1yA= -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:52 2025 by rpki-client