$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa File: 047692f9-4c45-3534-9455-58a8a7660d58.roa (raw, json) Hash identifier: 5HHVn1PDPSwQ5yNKMRba9+o8dGtKpWhPi1FCZttiL8o= Subject key identifier: 21:23:64:A0:FB:6D:C1:6B:60:E7:24:75:D4:3B:F9:61:B9:57:16:C9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841228177E66719E70EBDC60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 208.76.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:28:17:7e:66:71:9e:70:eb:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=493c9673-b05c-40e5-8d46-d451565217ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bc:79:74:b1:8d:30:f3:ab:c9:60:26:f2:5a: 31:fd:5d:35:fb:ec:ee:91:89:62:d3:c7:7d:9f:5d: bd:8e:84:61:97:e2:94:ad:f1:5e:c3:fb:eb:e6:40: 14:a6:18:b9:ed:b9:5e:8e:4b:5d:ed:51:b0:6b:c3: d1:fc:dd:3b:8f:5b:99:14:df:5a:6e:30:02:bb:aa: 95:3b:8e:a7:62:98:cb:a2:27:c0:83:9e:fc:9f:93: f1:8a:f8:30:da:bd:92:fb:81:1b:aa:37:34:3a:14: 95:9e:80:dc:71:ff:5d:d2:29:80:bb:b2:c1:cd:47: 06:a1:e5:03:a5:69:39:d7:0f:8a:74:67:20:32:55: a8:bf:85:59:d5:4e:a9:35:c1:81:5f:af:ad:90:c5: 28:31:2f:2c:74:30:22:d1:a6:04:f0:f3:c3:9c:ef: 04:27:dc:6f:21:b1:de:c7:fa:13:22:21:62:56:b9: 7a:88:5e:1e:f1:ce:5a:66:de:4b:49:0e:91:30:90: 66:2c:53:e6:8b:29:7f:09:2e:7f:b8:0d:a7:29:ca: 7a:b2:77:86:a1:d5:d3:79:6b:7b:ab:dd:05:c2:0a: 3b:47:16:d3:19:9b:e9:b4:9a:06:1c:f1:be:c1:fe: d7:75:57:44:7f:96:d3:d2:45:aa:3e:50:47:0b:17: 95:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:23:64:A0:FB:6D:C1:6B:60:E7:24:75:D4:3B:F9:61:B9:57:16:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f6:84:01:f1:6d:ce:e8:db:9d:a1:d3:5c:bf:97:37:1c:b0: 4b:d1:3b:d5:3d:2c:94:bb:c2:e0:42:e8:49:b0:c4:63:15:7b: 04:e3:38:c0:8e:91:56:61:9e:dc:79:9e:ea:4d:e0:ec:b4:eb: bf:4f:1b:e9:6e:22:04:58:4b:db:60:c5:36:47:44:d5:ec:92: f3:66:62:02:80:dd:df:75:60:d3:48:9e:97:53:b9:14:fd:29: 94:15:9d:f8:fe:b4:5e:7b:23:6e:99:4b:5d:8b:60:dd:63:72: e7:5c:69:fb:e0:d6:8e:4d:fe:65:8c:3e:77:e1:0c:d4:85:0e: b0:f2:c5:47:9f:41:df:fb:aa:c1:7e:9f:d8:bc:5c:7b:27:e3: e1:f3:c4:ec:07:db:b7:2f:83:d7:b0:bc:a6:2c:68:86:46:db: b7:43:70:e7:43:af:88:8d:2a:6f:d9:74:65:32:c1:c7:90:b4: 50:42:67:8e:8d:fe:2f:e4:5c:5d:f4:80:ea:4e:44:bf:b7:04: 7b:f4:49:dc:dd:85:26:90:8c:59:c2:a5:28:98:1f:04:5e:21: ed:3b:6a:23:0e:7a:e3:9b:a4:b0:58:47:d1:4f:fd:d6:f0:b1: eb:81:50:ce:10:d9:01:2d:b1:c7:b7:4e:d0:cf:6a:1a:b7:e3: f5:1c:2f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEigXfmZxnnDr3GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDkzYzk2NzMtYjA1Yy00MGU1LThkNDYtZDQ1MTU2NTIxN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lx5dLGNMPOryWAm8lox/V01++zukYli08d9 n129joRhl+KUrfFew/vr5kAUphi57blejktd7VGwa8PR/N07j1uZFN9abjACu6qV O46nYpjLoifAg578n5Pxivgw2r2S+4Ebqjc0OhSVnoDccf9d0imAu7LBzUcGoeUD pWk51w+KdGcgMlWov4VZ1U6pNcGBX6+tkMUoMS8sdDAi0aYE8PPDnO8EJ9xvIbHe x/oTIiFiVrl6iF4e8c5aZt5LSQ6RMJBmLFPmiyl/CS5/uA2nKcp6sneGodXTeWt7 q90Fwgo7RxbTGZvptJoGHPG+wf7XdVdEf5bT0kWqPlBHCxeVUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEjZKD7bcFrYOckddQ7+WG5VxbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDQ3NjkyZjktNGM0NS0z NTM0LTk0NTUtNThhOGE3NjYwZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHv2hAHxbc7o252h01y/lzccsEvRO9U9LJS7wuBC6EmwxGMVewTjOMCO kVZhntx5nupN4Oy0679PG+luIgRYS9tgxTZHRNXskvNmYgKA3d91YNNInpdTuRT9 KZQVnfj+tF57I26ZS12LYN1jcudcafvg1o5N/mWMPnfhDNSFDrDyxUefQd/7qsF+ n9i8XHsn4+HzxOwH27cvg9ewvKYsaIZG27dDcOdDr4iNKm/ZdGUywceQtFBCZ46N /i/kXF30gOpORL+3BHv0SdzdhSaQjFnCpSiYHwReIe07aiMOeuObpLBYR9FP/dbw seuBUM4Q2QEtsce3TtDPahq34/UcL6M= -----END CERTIFICATE-----Generated at Wed Aug 6 06:06:34 2025 by rpki-client