$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8179aaf0-d9ec-3f0e-b14d-baae18adb650.roa File: 8179aaf0-d9ec-3f0e-b14d-baae18adb650.roa (raw, json) Hash identifier: WUlejD5yz/wngaK5yHpK6sdJj3XJQjKpp7/svttD+tc= Subject key identifier: 48:66:7E:69:5F:B0:28:C1:BE:4C:5B:F0:A4:EC:77:2D:DF:9A:1A:4C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A028E2EE84EB9BD58B19A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8179aaf0-d9ec-3f0e-b14d-baae18adb650.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 208.68.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:28:e2:ee:84:eb:9b:d5:8b:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cc374d31-1a2f-4043-8afe-4a956e965014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e6:70:ef:47:b4:64:ea:af:fe:c3:30:83:0b: 10:8d:37:55:12:df:8b:49:4e:42:91:96:c9:79:70: 6f:0a:15:0a:e1:37:7b:c8:a2:31:99:d4:a9:6b:a2: 4b:8a:a1:94:95:42:16:e6:b3:a9:14:10:40:73:bb: f7:68:89:0f:8b:52:b9:42:fc:6d:55:69:4e:9c:d3: 5a:f4:61:f1:27:99:ab:a3:d8:3f:97:8b:ac:26:ec: 04:55:3b:16:cc:d6:70:e7:75:d7:29:db:29:42:0c: 62:3d:67:4a:cf:8d:8f:7c:d8:47:bb:67:73:dc:6a: 66:0d:af:f3:79:98:51:4e:97:4f:9a:fb:32:50:35: c9:72:3e:e4:f2:46:22:26:88:2b:d1:55:7d:77:57: 40:c5:a3:63:3a:0c:da:74:09:6a:21:28:92:35:56: 6e:87:fd:2b:9a:91:83:a2:d5:c2:d4:57:83:6b:da: 09:02:a8:a4:a0:18:67:42:9f:66:d7:e7:c4:75:65: 57:6a:66:80:c8:1a:42:9f:64:7c:0e:fa:9a:a1:08: 7e:c6:d9:e2:55:ac:76:09:61:b3:e2:be:bd:80:c1: 2a:2e:af:db:ae:54:bf:55:96:88:28:ea:9e:b6:b4: 1d:d2:23:82:0e:a2:36:bd:92:37:90:b2:e4:42:aa: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:66:7E:69:5F:B0:28:C1:BE:4C:5B:F0:A4:EC:77:2D:DF:9A:1A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8179aaf0-d9ec-3f0e-b14d-baae18adb650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:2d:c1:64:c3:17:6d:56:30:53:a1:1f:5e:f4:9e:4d:10:41: cf:ee:15:28:23:c9:8e:b4:6f:0c:5b:3a:c8:08:8c:e6:1c:ee: 6b:01:fe:d6:8a:20:d0:e3:d3:b4:0a:98:60:17:6b:7e:13:76: 3c:23:b9:ee:b2:72:95:3b:4a:c9:ff:5a:c8:48:c1:22:c2:1e: 99:77:f0:bf:17:16:98:ff:ad:8f:af:1e:6e:3c:b4:db:c9:2e: 35:6b:c6:64:6b:90:c4:45:1e:7b:e0:a1:d4:5b:4a:42:1b:4d: 53:9f:49:49:a9:77:2e:8f:4d:50:02:18:73:ae:6d:8b:ed:b4: 65:af:53:91:61:ae:83:ef:d3:f7:cf:f6:a5:16:6f:1f:d5:b7: ab:ba:67:94:d2:04:19:89:4d:d9:e8:d0:49:24:51:40:76:97: b3:a5:25:9b:b3:b6:ca:b7:b4:65:94:a8:8d:39:43:ec:d9:b4: 80:b0:46:ac:65:78:4c:70:9c:ea:28:55:06:29:ff:f5:a4:e9: f9:28:ca:cf:7a:9a:af:8d:7d:75:f7:f5:42:9c:c1:33:6f:c5: 16:74:7f:93:1c:e7:17:b8:19:ed:64:65:37:ea:08:24:ff:85: d9:aa:c3:b2:6d:1e:89:0b:0d:06:4c:c8:7b:9e:00:7a:de:a4: 1a:bd:e5:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noCji7oTrm9WLGaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2MzNzRkMzEtMWEyZi00MDQzLThhZmUtNGE5NTZlOTY1MDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuZw70e0ZOqv/sMwgwsQjTdVEt+LSU5CkZbJ eXBvChUK4Td7yKIxmdSpa6JLiqGUlUIW5rOpFBBAc7v3aIkPi1K5QvxtVWlOnNNa 9GHxJ5mro9g/l4usJuwEVTsWzNZw53XXKdspQgxiPWdKz42PfNhHu2dz3GpmDa/z eZhRTpdPmvsyUDXJcj7k8kYiJogr0VV9d1dAxaNjOgzadAlqISiSNVZuh/0rmpGD otXC1FeDa9oJAqikoBhnQp9m1+fEdWVXamaAyBpCn2R8DvqaoQh+xtniVax2CWGz 4r69gMEqLq/brlS/VZaIKOqetrQd0iOCDqI2vZI3kLLkQqpUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhmfmlfsCjBvkxb8KTsdy3fmhpMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODE3OWFhZjAtZDllYy0z ZjBlLWIxNGQtYmFhZTE4YWRiNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABktwWTDF21WMFOhH170nk0QQc/uFSgjyY60bwxbOsgIjOYc7msB/taK INDj07QKmGAXa34Tdjwjue6ycpU7Ssn/WshIwSLCHpl38L8XFpj/rY+vHm48tNvJ LjVrxmRrkMRFHnvgodRbSkIbTVOfSUmpdy6PTVACGHOubYvttGWvU5FhroPv0/fP 9qUWbx/Vt6u6Z5TSBBmJTdno0EkkUUB2l7OlJZuztsq3tGWUqI05Q+zZtICwRqxl eExwnOooVQYp//Wk6fkoys96mq+NfXX39UKcwTNvxRZ0f5Mc5xe4Ge1kZTfqCCT/ hdmqw7JtHokLDQZMyHueAHrepBq95YY= -----END CERTIFICATE-----Generated at Wed Jul 29 04:09:56 2026 by rpki-client