$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa File: 10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa (raw, json) Hash identifier: USNXgJ8gZO5hgw4++xnc9Xvbs0EKBljX4LEb+fx9/fI= Subject key identifier: C9:30:DB:F5:05:FE:E6:B2:93:89:0D:4C:F3:D6:B0:45:3F:17:C9:54 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8576065AA44965BC1C3AEE40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 396982 IP address blocks: 208.76.71.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:06:5a:a4:49:65:bc:1c:3a:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=bc96672c-1f87-4aa6-91cc-aa6685008e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a4:44:d7:35:e9:7e:77:36:ac:c9:0b:a7:e0: e4:ed:80:1d:af:29:0b:d2:19:ba:16:db:e6:36:0c: 5b:3e:83:31:7b:08:c1:ac:c1:3a:1d:8f:b4:91:14: 04:e3:9a:3f:b9:7f:57:c5:03:af:32:d1:8a:be:21: f9:d5:ac:9c:5e:c7:8d:31:9d:2e:44:54:54:40:8d: 1c:7d:6c:86:c3:73:f8:65:97:e1:93:44:0a:5a:0b: ca:fc:0f:66:b5:49:b0:b2:f2:b3:ed:cb:40:0f:5f: fa:70:b0:2a:8b:e6:d0:d1:72:d4:51:15:6c:2a:43: 9f:83:dd:d1:5f:bc:48:23:44:d5:eb:e7:ce:bb:96: 65:55:d0:7a:51:18:40:f3:46:6a:ce:53:90:83:ae: 99:be:8b:0d:92:57:58:c7:fb:c3:92:b1:34:40:68: 88:6f:60:ac:91:c3:4d:77:d0:ef:e7:29:87:0f:9d: b6:38:0f:af:14:da:a2:6d:25:82:68:ad:40:25:a5: 92:55:c7:54:78:5e:a7:2b:cd:9b:0b:e7:d1:ef:63: d1:56:57:dd:90:f3:b5:2f:20:21:5e:15:9e:66:16: 12:b0:0a:df:9f:49:d0:33:0d:81:69:10:1b:58:6b: 97:f8:96:cf:08:e4:2b:71:42:df:1c:cc:90:b8:94: bc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:30:DB:F5:05:FE:E6:B2:93:89:0D:4C:F3:D6:B0:45:3F:17:C9:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.128/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f4:39:08:64:12:2f:8d:9e:f3:21:d6:be:8b:c7:04:ed:58: 2a:5f:b2:92:d4:40:d8:4b:d2:e6:95:c0:d4:85:62:4e:8c:d3: 8e:2c:c9:ba:0f:a7:38:5c:31:54:33:c9:26:5d:80:6e:4d:10: ac:69:aa:71:4d:8c:37:f8:6d:17:2f:9a:cd:f4:95:33:12:7f: c4:78:0f:59:7e:86:f4:f3:59:dc:cf:f3:c7:22:f8:c0:0c:e6: 9c:c7:4a:ed:a9:b3:82:51:c3:aa:d2:44:75:08:d4:05:8f:6a: 58:71:0c:04:f1:6b:81:4e:ab:b5:45:5e:4e:ea:17:cc:f6:8c: a9:98:aa:36:41:dd:56:e4:98:bd:70:83:f3:cc:40:a1:0c:38: 75:3c:e3:7a:01:05:85:32:df:6f:cc:3d:ad:47:ed:f2:7e:6e: 8d:eb:1c:98:4e:c0:79:51:5c:16:a6:f3:b1:02:31:91:30:f1: a4:d2:ef:29:eb:36:32:ab:71:68:c4:4f:7a:0e:99:bc:c8:2f: 00:22:f3:58:f2:1b:ab:33:59:d9:95:32:0e:8b:85:d7:19:63: db:fb:51:5a:63:11:2d:3b:8c:a9:dd:ed:2e:e5:4a:52:72:d4: 46:e9:84:81:96:65:ef:f6:cb:61:81:a5:b1:26:3d:fc:ea:82: f5:12:e9:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqFdgZapEllvBw67kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk YmM5NjY3MmMtMWY4Ny00YWE2LTkxY2MtYWE2Njg1MDA4ZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqRE1zXpfnc2rMkLp+Dk7YAdrykL0hm6Ftvm NgxbPoMxewjBrME6HY+0kRQE45o/uX9XxQOvMtGKviH51aycXseNMZ0uRFRUQI0c fWyGw3P4ZZfhk0QKWgvK/A9mtUmwsvKz7ctAD1/6cLAqi+bQ0XLUURVsKkOfg93R X7xII0TV6+fOu5ZlVdB6URhA80ZqzlOQg66ZvosNkldYx/vDkrE0QGiIb2CskcNN d9Dv5ymHD522OA+vFNqibSWCaK1AJaWSVcdUeF6nK82bC+fR72PRVlfdkPO1LyAh XhWeZhYSsArfn0nQMw2BaRAbWGuX+JbPCOQrcULfHMyQuJS80QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMkw2/UF/uayk4kNTPPWsEU/F8lUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTBiODczYWItYWFiMy0z ZTc4LWJjNjMtZjIxZGEwZTVlZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAF9DkIZBIvjZ7zIda+i8cE7VgqX7KS1EDYS9LmlcDUhWJOjNOOLMm6 D6c4XDFUM8kmXYBuTRCsaapxTYw3+G0XL5rN9JUzEn/EeA9Zfob081ncz/PHIvjA DOacx0rtqbOCUcOq0kR1CNQFj2pYcQwE8WuBTqu1RV5O6hfM9oypmKo2Qd1W5Ji9 cIPzzEChDDh1PON6AQWFMt9vzD2tR+3yfm6N6xyYTsB5UVwWpvOxAjGRMPGk0u8p 6zYyq3FoxE96Dpm8yC8AIvNY8hurM1nZlTIOi4XXGWPb+1FaYxEtO4yp3e0u5UpS ctRG6YSBlmXv9sthgaWxJj386oL1EulS -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:53 2025 by rpki-client