$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/49a6c0e8-dd74-3ae4-bf50-509dff09e528.roa File: 49a6c0e8-dd74-3ae4-bf50-509dff09e528.roa (raw, json) Hash identifier: /6d0Kjy7BaUveonMPdKR4uhWV5S4bkLt2/JZzYvMd1s= Subject key identifier: AE:84:76:45:3A:82:5F:E7:3F:CB:A9:96:0B:D8:40:5B:C8:B3:08:6F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8575EF698C7053A121DF9A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/49a6c0e8-dd74-3ae4-bf50-509dff09e528.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 396982 IP address blocks: 208.76.71.224/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:ef:69:8c:70:53:a1:21:df:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=2c23dd4f-9b1c-42a7-8c5d-aab725664de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0e:74:78:ea:3e:58:e6:3d:ca:42:56:45:d6: 23:a9:8b:a7:80:46:72:7d:95:a7:e9:a5:7c:93:d3: 9f:44:aa:33:a3:00:c1:01:37:5e:f0:97:3f:5a:ab: 67:ad:71:65:54:36:92:46:db:7c:c1:eb:3d:0e:4d: f5:54:1d:d1:0a:95:a2:37:91:b9:96:53:6e:10:3c: e9:6a:97:58:cc:10:44:c0:9c:ad:80:9c:b1:7e:e5: 2a:9c:a8:b1:9d:e8:c5:44:54:fa:28:ee:f7:4f:37: 9d:b4:71:44:71:34:80:53:a1:4b:09:80:8c:a8:a3: d8:3e:84:f2:36:1e:99:00:d0:f7:37:2c:7d:3b:88: a9:2d:4d:ae:dc:77:67:9b:bc:4b:63:6a:9d:2a:98: ee:69:4a:7a:86:d0:60:32:1d:71:94:c2:8b:20:6b: 09:4b:89:2c:30:b7:53:78:8f:b3:c0:8b:94:7e:4e: ce:ff:db:f8:e1:1b:48:a3:be:41:ba:ef:47:44:21: dc:e6:a2:a1:3f:b6:30:48:05:ee:13:b1:6b:57:d5: b9:d2:5d:9f:00:ce:3e:fd:71:0c:04:a2:4d:30:24: 06:27:1f:ee:ad:54:97:2b:cb:2e:03:46:57:b8:f6: 0a:64:31:96:17:2c:5e:9e:b4:92:6f:de:12:40:83: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:84:76:45:3A:82:5F:E7:3F:CB:A9:96:0B:D8:40:5B:C8:B3:08:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/49a6c0e8-dd74-3ae4-bf50-509dff09e528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.224/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:38:74:e0:21:2c:be:1d:9f:b1:21:fc:3d:48:9e:1d:4f:cf: 76:96:10:0c:30:d4:b6:f4:ae:44:84:d9:31:f1:c0:4b:1f:f1: 5c:7f:83:27:24:14:7c:c4:24:98:b4:aa:83:f4:d2:67:d2:b8: 36:10:74:63:94:4d:0e:26:9c:7a:81:ec:c2:98:ab:15:32:61: bb:98:41:72:f5:cf:54:12:9e:69:3d:bf:a8:48:c3:21:36:c0: 6d:c7:ad:92:62:16:7d:7f:9d:4a:8f:7a:42:c2:7f:38:f7:0f: 00:a3:60:f8:03:98:98:8b:f4:1d:a2:ca:55:06:f2:d3:a2:99: 27:1b:1f:01:67:a0:78:df:06:b3:fd:b4:6e:83:36:bd:2e:fb: c2:95:2e:d0:2f:eb:da:bb:69:1a:7e:49:8f:c0:a1:74:ab:a4: e5:f9:c3:5c:7a:d3:27:fe:c3:ae:80:ce:f0:08:2f:d7:aa:0f: 37:fe:17:34:74:b4:11:7e:32:dc:08:42:70:f3:0c:43:38:54: 7d:33:9b:7f:f5:68:3e:ac:9c:ae:4c:4d:25:57:98:f7:81:71: 7a:e3:58:9e:e1:12:8f:e9:34:f1:5e:ba:b1:e7:e0:f3:79:14: e6:03:ea:c3:55:b3:d8:9a:7a:4e:d2:b6:ca:72:3f:98:7c:4c: 2e:05:74:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqFde9pjHBToSHfmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk MmMyM2RkNGYtOWIxYy00MmE3LThjNWQtYWFiNzI1NjY0ZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw50eOo+WOY9ykJWRdYjqYungEZyfZWn6aV8 k9OfRKozowDBATde8Jc/WqtnrXFlVDaSRtt8wes9Dk31VB3RCpWiN5G5llNuEDzp apdYzBBEwJytgJyxfuUqnKixnejFRFT6KO73TzedtHFEcTSAU6FLCYCMqKPYPoTy Nh6ZAND3Nyx9O4ipLU2u3Hdnm7xLY2qdKpjuaUp6htBgMh1xlMKLIGsJS4ksMLdT eI+zwIuUfk7O/9v44RtIo75Buu9HRCHc5qKhP7YwSAXuE7FrV9W50l2fAM4+/XEM BKJNMCQGJx/urVSXK8suA0ZXuPYKZDGWFyxenrSSb94SQIPFjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK6EdkU6gl/nP8uplgvYQFvIswhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDlhNmMwZTgtZGQ3NC0z YWU0LWJmNTAtNTA5ZGZmMDllNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExH4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCaOHTgISy+HZ+xIfw9SJ4dT892lhAMMNS29K5EhNkx8cBLH/Fcf4Mn JBR8xCSYtKqD9NJn0rg2EHRjlE0OJpx6gezCmKsVMmG7mEFy9c9UEp5pPb+oSMMh NsBtx62SYhZ9f51Kj3pCwn849w8Ao2D4A5iYi/QdospVBvLTopknGx8BZ6B43waz /bRugza9LvvClS7QL+vau2kafkmPwKF0q6Tl+cNcetMn/sOugM7wCC/Xqg83/hc0 dLQRfjLcCEJw8wxDOFR9M5t/9Wg+rJyuTE0lV5j3gXF641ie4RKP6TTxXrqx5+Dz eRTmA+rDVbPYmnpO0rbKcj+YfEwuBXSl -----END CERTIFICATE-----Generated at Mon Aug 4 14:52:11 2025 by rpki-client