$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/3fe0a894-81ce-3b08-9bf0-1f115c079b60.roa File: 3fe0a894-81ce-3b08-9bf0-1f115c079b60.roa (raw, json) Hash identifier: ZkQ2n1fJaWiyjTwzqj1ux/OfrbUvxA0e5PzZ9nrDVss= Subject key identifier: 37:97:87:BF:35:47:A8:01:1B:4A:8E:7D:1C:55:59:5E:D4:8E:32:26 Certificate issuer: /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261 Certificate serial: 010D0C9F4328584B821E219FAEA0F18E85873C80 Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/3fe0a894-81ce-3b08-9bf0-1f115c079b60.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 8075 IP address blocks: 69.52.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:21:9f:ae:a0:f1:8e:85:87:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=690f499b-0cdf-404d-9574-34b647712899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:6f:7f:80:b3:29:c3:98:a1:dc:b7:29:77: 83:e7:30:5e:67:50:d6:46:dd:a3:ae:4a:46:8a:bc: 22:1e:d5:86:06:42:0c:4b:be:26:99:51:1f:37:b0: 4f:1c:ae:28:4f:bf:6f:39:80:1d:e1:d7:d6:08:31: d0:8e:34:9d:a0:6e:1d:e9:ae:9f:89:90:81:99:53: d4:b6:d4:ef:c0:9a:08:c9:d7:ea:24:18:dc:18:d5: 86:d1:ac:a0:19:70:ea:f7:77:9b:77:2b:16:c4:34: d4:55:3b:03:5d:04:7e:3f:34:a5:80:9e:31:3f:ad: 3c:52:79:9e:e8:ab:6d:90:ad:59:2d:d1:73:36:50: 52:75:82:35:75:95:3d:5a:6d:7d:28:8e:88:61:79: 42:5e:64:4d:df:6c:0b:0f:81:06:22:ef:ed:38:f1: a4:a0:cb:33:20:29:1c:8c:ab:20:5d:55:ff:97:97: be:71:31:ec:0a:01:c8:d3:ae:ed:cc:bd:56:a0:72: 9d:00:c7:6c:0f:a4:7b:3b:a5:f5:60:3a:d4:c3:38: ba:68:63:3f:07:f4:bf:ac:e4:43:af:7e:9b:84:ce: b4:92:29:64:5d:5d:6f:09:e9:69:97:bd:80:2d:7c: ff:08:3c:bb:00:b7:a6:be:03:58:2c:a0:3f:3f:9e: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:97:87:BF:35:47:A8:01:1B:4A:8E:7D:1C:55:59:5E:D4:8E:32:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/3fe0a894-81ce-3b08-9bf0-1f115c079b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl X509v3 Authority Key Identifier: keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer sbgp-ipAddrBlock: critical IPv4: 69.52.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:28:68:00:a4:e5:9c:fa:42:1c:b0:fb:b8:8e:88:93:49:f1: 03:e2:82:7f:86:b8:b4:51:ce:e4:57:15:b5:39:ae:00:2f:38: 20:3b:4c:62:91:f6:ab:e8:02:7e:87:6e:d4:ce:4a:ee:e0:ba: f8:8a:88:af:2c:e9:61:1a:18:23:cb:0a:55:30:f1:cc:a1:c7: 73:e8:19:21:c0:38:b0:5d:00:f5:39:c1:9d:c9:12:96:63:fc: 5b:b7:b6:19:f0:d5:00:f1:67:68:d4:44:04:a5:33:02:d2:f5: 6d:d6:ef:43:ba:0c:fe:73:f5:53:83:74:92:cd:62:cd:9f:87: 1f:5f:61:3f:55:7e:c3:97:98:19:e1:c0:2a:f8:d5:ff:e8:11: 9b:40:c4:b1:e7:01:6b:4a:c2:a9:10:01:35:91:a9:4a:ca:ff: a0:3c:49:23:63:d2:9f:67:17:e6:f3:2f:3c:0b:c0:f0:39:fa: 61:24:51:9b:89:58:68:dc:0a:e9:71:84:e3:fe:11:61:6a:13: 5c:62:99:b5:aa:80:df:97:21:33:09:a1:c9:62:de:e5:06:8c: 9b:cc:4f:a8:38:a1:7a:8d:ed:e2:f5:43:cb:77:51:55:07:2a: d6:94:e7:57:a0:75:3b:7d:06:89:a3:93:38:75:43:f7:e0:0c: 71:91:6f:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHiGfrqDxjoWHPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk5N2IxZmItYzFjYy00NWRkLWE3ZWMtMzI3NWE1MjZi MjYxMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NjkwZjQ5OWItMGNkZi00MDRkLTk1NzQtMzRiNjQ3NzEyODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnFvf4CzKcOYody3KXeD5zBeZ1DWRt2jrkpG irwiHtWGBkIMS74mmVEfN7BPHK4oT79vOYAd4dfWCDHQjjSdoG4d6a6fiZCBmVPU ttTvwJoIydfqJBjcGNWG0aygGXDq93ebdysWxDTUVTsDXQR+PzSlgJ4xP608Unme 6KttkK1ZLdFzNlBSdYI1dZU9Wm19KI6IYXlCXmRN32wLD4EGIu/tOPGkoMszICkc jKsgXVX/l5e+cTHsCgHI067tzL1WoHKdAMdsD6R7O6X1YDrUwzi6aGM/B/S/rORD r36bhM60kilkXV1vCelpl72ALXz/CDy7ALemvgNYLKA/P56NiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeXh781R6gBG0qOfRxVWV7UjjImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3 YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1YTUyNmIyNjEvM2ZlMGE4OTQtODFjZS0z YjA4LTliZjAtMWYxMTVjMDc5YjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk5N2IxZmItYzFjYy00NWRkLWE3 ZWMtMzI3NWE1MjZiMjYxL2U5OTdiMWZiLWMxY2MtNDVkZC1hN2VjLTMyNzVhNTI2 YjI2MS5jcmwwHwYDVR0jBBgwFoAUCRmfFSCtJze3gSqlW6Hy7/s1W10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1 YTUyNmIyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTTHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUoaACk5Zz6Qhyw+7iOiJNJ8QPign+GuLRRzuRXFbU5rgAvOCA7TGKR 9qvoAn6HbtTOSu7guviKiK8s6WEaGCPLClUw8cyhx3PoGSHAOLBdAPU5wZ3JEpZj /Fu3thnw1QDxZ2jURASlMwLS9W3W70O6DP5z9VODdJLNYs2fhx9fYT9VfsOXmBnh wCr41f/oEZtAxLHnAWtKwqkQATWRqUrK/6A8SSNj0p9nF+bzLzwLwPA5+mEkUZuJ WGjcCulxhOP+EWFqE1ximbWqgN+XITMJocli3uUGjJvMT6g4oXqN7eL1Q8t3UVUH KtaU51egdTt9Bomjkzh1Q/fgDHGRb6I= -----END CERTIFICATE-----Generated at Sun Oct 19 20:30:09 2025 by rpki-client