$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/be9c40af-584e-3dc1-8e43-88113dd55c62.roa File: be9c40af-584e-3dc1-8e43-88113dd55c62.roa (raw, json) Hash identifier: ztM1Dc1by5TQUN+LU3c8+LMCwZZAXsvquhV7a/BGJXs= Subject key identifier: DB:38:2C:DE:C6:7E:7D:29:51:8B:7B:F4:7A:0F:75:A0:90:12:48:51 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AEF8BC7CC81DB780532F0D000 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/be9c40af-584e-3dc1-8e43-88113dd55c62.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 199527 IP address blocks: 69.17.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c7:cc:81:db:78:05:32:f0:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=a2b70178-78c4-408b-b2d9-47f1037b3a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:22:94:bf:c1:3c:69:da:d4:25:52:5f:1d:9a: a0:b6:45:f7:11:ac:57:10:9e:80:0c:b0:b7:b3:a5: 5e:44:3f:3f:70:ee:ad:22:66:b0:32:b9:2e:5a:ec: 4e:f2:c4:8c:53:e9:91:c9:42:b7:ec:48:c1:fd:2b: c2:c7:65:70:e2:ce:a9:31:c8:6d:6a:13:a4:82:86: fd:49:89:fc:29:01:d6:f2:62:25:30:64:07:e9:94: 12:1b:08:f2:d1:a2:67:f4:c7:e1:41:ae:dd:10:43: 04:eb:a2:1f:d7:8c:37:16:d7:ab:a9:b5:54:cc:25: 27:71:7f:53:29:3c:d7:1c:95:96:71:9d:85:cd:db: 8b:4b:6d:9b:c5:dc:ab:c3:21:8d:11:fe:3c:53:10: 93:c2:85:43:33:e6:f8:10:b2:ac:d3:65:d0:30:cd: 26:a5:b8:e6:0f:61:ab:60:b5:40:37:bb:6b:1d:05: e9:a5:c7:6c:51:6b:cf:6b:1e:81:cd:d1:43:63:3a: 71:53:a1:1c:30:16:df:f4:89:42:db:b4:9b:81:e3: 91:fa:c2:03:8d:fa:60:7b:d6:65:f0:7b:d1:4b:b3: cb:84:14:a5:2c:56:8e:dc:42:6b:f0:ba:e9:10:f9: ba:d6:8b:db:40:cb:e5:6f:a5:ef:17:90:82:ed:fb: 8c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:38:2C:DE:C6:7E:7D:29:51:8B:7B:F4:7A:0F:75:A0:90:12:48:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/be9c40af-584e-3dc1-8e43-88113dd55c62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.17.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:38:f6:9f:e8:3f:e5:7c:24:bd:f3:bc:ce:f4:73:60:6b:92: 04:ac:53:5f:be:42:24:04:22:b6:cd:c3:f5:8c:21:f4:9e:66: 9c:84:4e:ee:8b:60:9e:fe:cb:5a:0a:de:41:c1:b0:64:59:85: f0:71:74:43:51:cf:14:85:1c:74:39:2f:8f:65:c4:22:a7:96: 32:48:b1:33:7d:10:a8:09:28:a5:48:61:81:1c:2d:a0:78:6c: 2d:01:69:39:9e:2f:1c:5c:fc:f5:b1:a9:c2:be:aa:d8:6b:b0: e8:2a:e1:f9:5c:6d:00:0c:8e:7f:10:39:8b:4a:e6:ff:2a:bc: d7:2a:93:34:d8:4f:f1:61:4e:88:db:e0:7b:45:17:ea:56:e2: 17:62:3a:a7:fd:53:50:1f:66:ac:34:3b:68:58:54:cc:8c:9f: 24:b1:14:92:9f:16:c8:54:69:b8:51:67:25:d3:28:97:4d:38: 39:b4:47:6a:b1:c8:6c:18:4a:ba:4e:ab:0e:97:70:f1:53:cb: 6e:e0:05:58:cf:a2:0a:c0:ef:40:39:6a:c9:59:0a:31:22:0d: 95:6e:79:0a:5e:5f:69:79:57:19:ea:b3:39:5f:c9:3a:7b:ea: a7:c5:9c:57:ec:c7:00:e7:9c:9b:27:64:db:ca:6e:e6:eb:31: 88:ce:f3:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8fMgdt4BTLw0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk YTJiNzAxNzgtNzhjNC00MDhiLWIyZDktNDdmMTAzN2IzYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCKUv8E8adrUJVJfHZqgtkX3EaxXEJ6ADLC3 s6VeRD8/cO6tImawMrkuWuxO8sSMU+mRyUK37EjB/SvCx2Vw4s6pMchtahOkgob9 SYn8KQHW8mIlMGQH6ZQSGwjy0aJn9MfhQa7dEEME66If14w3FterqbVUzCUncX9T KTzXHJWWcZ2FzduLS22bxdyrwyGNEf48UxCTwoVDM+b4ELKs02XQMM0mpbjmD2Gr YLVAN7trHQXppcdsUWvPax6BzdFDYzpxU6EcMBbf9IlC27SbgeOR+sIDjfpge9Zl 8HvRS7PLhBSlLFaO3EJr8LrpEPm61ovbQMvlb6XvF5CC7fuMLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs4LN7Gfn0pUYt79HoPdaCQEkhRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmU5YzQwYWYtNTg0ZS0z ZGMxLThlNDMtODgxMTNkZDU1YzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRREUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALg49p/oP+V8JL3zvM70c2BrkgSsU1++QiQEIrbNw/WMIfSeZpyETu6L YJ7+y1oK3kHBsGRZhfBxdENRzxSFHHQ5L49lxCKnljJIsTN9EKgJKKVIYYEcLaB4 bC0BaTmeLxxc/PWxqcK+qthrsOgq4flcbQAMjn8QOYtK5v8qvNcqkzTYT/FhTojb 4HtFF+pW4hdiOqf9U1AfZqw0O2hYVMyMnySxFJKfFshUabhRZyXTKJdNODm0R2qx yGwYSrpOqw6XcPFTy27gBVjPogrA70A5aslZCjEiDZVueQpeX2l5VxnqszlfyTp7 6qfFnFfsxwDnnJsnZNvKbubrMYjO82M= -----END CERTIFICATE-----Generated at Sun Aug 24 03:10:51 2025 by rpki-client