$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/18a3f55c-077a-35b5-98b5-8d870c220038.roa File: 18a3f55c-077a-35b5-98b5-8d870c220038.roa (raw, json) Hash identifier: DUeD8Wv65XNAiq60zTalANCyexQ8K9DRzU4Sw1K9xVc= Subject key identifier: 73:FD:EF:BB:DD:B0:FB:50:60:BC:57:FA:83:47:69:C9:7E:DA:27:99 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B0746BA83AD684089F1605E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/18a3f55c-077a-35b5-98b5-8d870c220038.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 396982 IP address blocks: 208.76.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:ba:83:ad:68:40:89:f1:60:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=a28d8187-ecc4-44e1-b75a-30743748f58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:32:10:69:6a:ce:c1:58:a2:cd:06:12:bc: fa:5f:d0:b7:df:15:86:43:01:8a:9e:e1:62:41:af: b4:32:ba:8e:4c:31:30:02:66:cc:11:a4:d2:ef:ff: ef:66:77:c9:cc:a3:2a:86:73:be:b6:a0:89:7e:6a: f8:4f:37:ee:59:3b:ea:ee:71:29:e5:53:6e:77:14: 48:99:d9:d9:c3:8b:d8:72:70:13:26:58:d3:0f:d2: 88:4b:b1:59:4b:5d:cc:59:07:04:ea:d5:84:08:dc: 46:30:c5:9f:64:31:62:4d:ee:4a:41:1c:b1:0b:ab: 93:3a:47:98:e8:9f:6d:c9:08:04:4a:34:28:75:d2: 23:92:30:5a:bf:e9:6d:23:35:86:ec:e7:5d:07:67: bc:02:be:55:30:f7:73:35:eb:e6:ee:26:4c:e1:63: 7c:17:3e:8f:a5:f5:02:da:0e:da:d8:8c:36:f2:2b: 21:77:ed:de:16:2e:81:23:d1:84:93:5b:9e:cc:22: 5e:5b:ae:40:a5:54:bd:ad:1c:3a:4c:1e:7a:ba:70: 8a:74:3f:b3:20:a9:73:ae:cd:a4:55:40:5a:c1:77: 1d:7b:9a:94:7f:68:26:a2:59:83:da:b3:cc:87:00: 3e:80:61:e0:5e:3a:eb:02:2b:ad:8e:13:c0:4a:f6: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FD:EF:BB:DD:B0:FB:50:60:BC:57:FA:83:47:69:C9:7E:DA:27:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/18a3f55c-077a-35b5-98b5-8d870c220038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a9:b7:86:81:b5:2c:6a:fe:20:bc:c5:a9:7c:0d:bd:30:38: 41:24:32:2a:39:3f:15:68:36:68:53:c9:59:ad:e8:ce:1c:55: b8:8e:67:b3:7b:c4:ef:f5:04:e3:6e:a2:34:6a:c4:7d:bb:78: be:c9:49:71:38:ee:63:9d:10:bf:b5:d7:20:54:2e:0d:3b:59: 93:9c:05:79:f7:29:61:2a:44:d9:5a:09:ca:da:b2:00:93:f9: 7b:82:44:7e:28:d7:ef:86:9e:4b:ec:02:ca:a9:f1:fb:f8:5a: a4:e7:af:bb:be:8d:8c:13:af:98:64:f9:54:95:06:e1:a6:01: 24:de:ed:26:53:9b:29:b4:e9:91:af:34:17:98:56:a9:e4:eb: a7:50:ac:e0:21:6d:23:ef:ec:9e:81:36:c0:4e:57:e4:76:d9: 36:cb:43:2f:35:23:29:2b:98:16:2e:9b:94:8f:0a:e4:56:f5: a7:2d:c0:a4:9d:be:17:8c:d4:93:dc:dd:d5:ca:37:8d:17:51: c1:85:fb:b9:95:ab:56:d8:4c:2c:21:56:05:b8:be:33:2c:b1: be:80:1d:ff:f5:7e:6f:5f:41:02:48:b6:44:14:45:a3:06:96: 52:1d:4f:82:94:ee:88:89:2b:f4:54:07:29:ef:a9:7b:06:a7: 31:a8:08:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrqDrWhAifFgXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YTI4ZDgxODctZWNjNC00NGUxLWI3NWEtMzA3NDM3NDhmNThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotUyEGlqzsFYos0GErz6X9C33xWGQwGKnuFi Qa+0MrqOTDEwAmbMEaTS7//vZnfJzKMqhnO+tqCJfmr4TzfuWTvq7nEp5VNudxRI mdnZw4vYcnATJljTD9KIS7FZS13MWQcE6tWECNxGMMWfZDFiTe5KQRyxC6uTOkeY 6J9tyQgESjQoddIjkjBav+ltIzWG7OddB2e8Ar5VMPdzNevm7iZM4WN8Fz6PpfUC 2g7a2Iw28ishd+3eFi6BI9GEk1uezCJeW65ApVS9rRw6TB56unCKdD+zIKlzrs2k VUBawXcde5qUf2gmolmD2rPMhwA+gGHgXjrrAiutjhPASvZ22QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP977vdsPtQYLxX+oNHacl+2ieZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMThhM2Y1NWMtMDc3YS0z NWI1LTk4YjUtOGQ4NzBjMjIwMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqpt4aBtSxq/iC8xal8Db0wOEEkMio5PxVoNmhTyVmt6M4cVbiOZ7N7 xO/1BONuojRqxH27eL7JSXE47mOdEL+11yBULg07WZOcBXn3KWEqRNlaCcrasgCT +XuCRH4o1++GnkvsAsqp8fv4WqTnr7u+jYwTr5hk+VSVBuGmASTe7SZTmym06ZGv NBeYVqnk66dQrOAhbSPv7J6BNsBOV+R22TbLQy81IykrmBYum5SPCuRW9actwKSd vheM1JPc3dXKN40XUcGF+7mVq1bYTCwhVgW4vjMssb6AHf/1fm9fQQJItkQURaMG llIdT4KU7oiJK/RUBynvqXsGpzGoCDU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:21 2025 by rpki-client