$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa File: 2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa (raw, json) Hash identifier: NU3dctxTfUR79VNaJDojkQUX99BWE0Ym83LTfe65BhY= Subject key identifier: 54:51:6C:F2:1F:03:6A:0E:FB:4F:6A:72:E9:A6:25:B6:F0:CE:E2:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411720B9A52D3A873F2B9D0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 208.68.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:72:0b:9a:52:d3:a8:73:f2:b9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=42b0e6ba-813d-4442-b87e-e12b20f52be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:f3:06:6f:68:78:cb:f9:a9:6a:7a:0c:17: 38:12:77:5f:c7:16:cf:60:be:b8:52:54:e7:cd:8e: 1a:91:ca:93:e9:01:16:6c:1c:6d:60:12:5d:8b:bb: 4d:58:5d:0a:81:7b:90:8a:62:2f:09:1c:4b:41:96: 66:e5:99:08:aa:1d:ab:60:d9:94:0e:de:27:50:a4: f4:33:01:21:d9:f9:4b:4d:f5:b4:03:42:43:10:28: 70:45:30:04:34:3f:9c:88:ff:5a:40:5f:e2:e2:7a: 9c:b3:51:67:60:37:44:39:10:8d:11:4e:97:9a:37: ad:26:25:fb:af:02:18:12:d9:ea:89:30:b8:5c:31: 61:f7:a4:2b:53:a5:40:1b:8e:e0:36:89:af:7f:a6: 94:6a:05:92:53:38:33:98:20:04:03:7d:38:0a:20: ac:57:2f:26:97:53:30:54:b2:80:fa:18:2b:b8:99: 9f:93:5f:7a:23:f0:43:1e:88:92:0e:d6:9a:28:e3: 60:85:65:86:c5:8a:44:ac:94:0b:67:27:25:03:08: da:32:53:df:e1:f9:a7:b9:c3:ba:9a:8f:dc:ab:a4: 69:64:1d:3d:88:8a:60:8c:6b:b9:22:a7:a0:c3:24: f1:f4:7b:fc:e1:42:d4:c2:c0:2f:32:4d:53:3f:b3: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:51:6C:F2:1F:03:6A:0E:FB:4F:6A:72:E9:A6:25:B6:F0:CE:E2:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a0:be:fe:de:4d:5d:16:ce:4a:59:02:7f:63:fc:9d:6a:b3: 66:3e:cf:ec:26:00:35:7e:1e:a2:2d:6d:dc:4e:79:3e:35:1c: ba:60:c5:19:55:96:23:ad:f0:12:be:0c:46:3e:45:e8:a1:a3: 8e:b4:40:80:88:98:07:0c:1b:b1:f9:c0:f9:bb:7a:d8:fe:13: ca:7b:0f:c9:cd:f8:36:2a:83:78:8e:e9:a4:75:77:35:99:51: 41:41:5f:f7:01:a9:87:be:62:34:44:aa:85:e6:9a:62:39:7a: 46:81:b0:4b:e1:c3:de:91:04:c0:2d:87:fc:90:6e:75:f7:67: 00:fb:a3:4d:b7:4d:d3:a4:8d:2d:d7:c1:76:61:22:3b:1a:89: 53:ed:09:9a:8d:80:92:1d:34:f6:b3:b9:fb:53:d5:69:04:42: b1:55:76:4d:55:f6:53:eb:dd:e7:b1:99:34:13:9e:64:35:05: 6a:4e:8f:66:2e:63:37:28:57:7d:a4:6f:0f:39:24:c0:7f:63: 52:9a:81:72:39:c4:38:f9:d4:fa:33:40:31:f2:12:4c:fc:36: 92:37:19:07:d8:c8:b9:67:03:b1:9a:95:dc:86:02:8f:39:3a: 93:e9:f5:3f:46:4d:be:97:57:4a:d5:d0:24:93:69:03:d7:de: 52:26:70:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXILmlLTqHPyudAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDJiMGU2YmEtODEzZC00NDQyLWI4N2UtZTEyYjIwZjUyYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx97zBm9oeMv5qWp6DBc4EndfxxbPYL64UlTn zY4akcqT6QEWbBxtYBJdi7tNWF0KgXuQimIvCRxLQZZm5ZkIqh2rYNmUDt4nUKT0 MwEh2flLTfW0A0JDEChwRTAEND+ciP9aQF/i4nqcs1FnYDdEORCNEU6XmjetJiX7 rwIYEtnqiTC4XDFh96QrU6VAG47gNomvf6aUagWSUzgzmCAEA304CiCsVy8ml1Mw VLKA+hgruJmfk196I/BDHoiSDtaaKONghWWGxYpErJQLZyclAwjaMlPf4fmnucO6 mo/cq6RpZB09iIpgjGu5IqegwyTx9Hv84ULUwsAvMk1TP7POUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRRbPIfA2oO+09qcummJbbwzuL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmE3MGFlNjEtNGQxYy0z ZGJiLWEwNDYtMjI1Zjc2NTAwZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOgvv7eTV0WzkpZAn9j/J1qs2Y+z+wmADV+HqItbdxOeT41HLpgxRlV liOt8BK+DEY+Reiho460QICImAcMG7H5wPm7etj+E8p7D8nN+DYqg3iO6aR1dzWZ UUFBX/cBqYe+YjREqoXmmmI5ekaBsEvhw96RBMAth/yQbnX3ZwD7o023TdOkjS3X wXZhIjsaiVPtCZqNgJIdNPazuftT1WkEQrFVdk1V9lPr3eexmTQTnmQ1BWpOj2Yu YzcoV32kbw85JMB/Y1KagXI5xDj51PozQDHyEkz8NpI3GQfYyLlnA7GaldyGAo85 OpPp9T9GTb6XV0rV0CSTaQPX3lImcNU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:16:36 2025 by rpki-client