$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d723720-c1b1-3ded-94bb-35dc56996c9f.roa File: 8d723720-c1b1-3ded-94bb-35dc56996c9f.roa (raw, json) Hash identifier: HN205uXZpQvh6bdymy8NZKvn6HOjbVuRV8JMuzl64+E= Subject key identifier: 07:D9:2F:5D:0C:73:B6:7C:DB:D7:D7:59:B0:9A:94:55:60:FB:FF:2C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841175BAE6FDB544FE52CB80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d723720-c1b1-3ded-94bb-35dc56996c9f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 208.76.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:75:ba:e6:fd:b5:44:fe:52:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3ce0101c-17b3-4e3f-bdfa-18d049c07269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:56:16:ba:1e:2e:2b:54:33:1e:84:88:ca:79: 72:8d:24:fa:43:7a:7d:08:2f:1a:62:4f:97:dc:a3: 87:04:32:cb:79:6b:f0:14:35:c3:2f:83:e8:ed:1e: 64:8f:be:f5:5d:4b:43:03:f3:02:4b:85:9c:67:00: b3:0e:c3:23:85:35:be:37:1f:7f:b0:d6:97:fa:29: d4:1b:ff:bf:f7:64:c9:9f:3e:d3:58:09:af:a1:d4: aa:f1:d1:93:bd:81:5e:fa:cd:82:3d:c7:c2:da:3e: 7a:c1:6e:b7:f7:ae:8a:8d:fe:b8:49:cb:45:ae:b1: 26:23:86:45:83:c1:db:b1:ff:6e:6f:c2:30:b8:77: de:fd:f4:9d:64:9e:69:aa:03:3a:7b:57:0a:97:bf: 63:ca:ff:cb:6e:ea:65:5b:4b:37:08:81:0e:10:2b: 95:fb:b8:1d:53:9d:d7:62:ed:58:81:4e:4d:18:38: 6c:0f:5c:a6:ab:cc:b5:50:d4:e9:8d:08:02:f0:65: 04:be:d8:ee:75:85:eb:87:bb:e8:cd:77:96:53:de: 7e:d3:4c:f0:db:f8:7e:70:b3:69:27:ce:d4:fb:de: 72:76:6f:69:8b:35:d6:26:e7:da:fb:49:83:b0:0d: 57:c7:74:46:f3:83:1d:24:4b:c5:63:30:a3:78:29: ee:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D9:2F:5D:0C:73:B6:7C:DB:D7:D7:59:B0:9A:94:55:60:FB:FF:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d723720-c1b1-3ded-94bb-35dc56996c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:85:a3:d5:91:33:89:cb:41:aa:1d:ba:e5:f7:53:af:b8:99: ea:aa:7c:c6:f4:94:c3:06:83:fc:d3:29:8c:64:31:2f:af:11: c0:f0:f7:f4:04:9b:a9:73:a3:3f:7d:0d:0f:8d:1e:fa:8d:90: 16:da:f8:b3:91:61:fe:e7:0c:ee:cd:4d:08:a7:98:41:92:8c: 13:fd:4b:27:99:40:34:6c:7e:43:4f:41:f8:92:36:6e:f7:c5: a4:c4:2c:d1:59:48:b1:73:85:19:7d:38:b7:3e:03:08:83:29: 69:3c:76:cc:25:69:4b:c8:33:9d:a4:ea:67:ba:b1:54:a2:60: f3:44:b0:31:b7:09:17:fe:65:44:db:6a:cd:b8:03:e0:03:43: 48:da:61:64:d3:33:42:9c:94:c2:12:a0:f2:83:8b:69:2d:fb: 09:1b:1a:a0:9a:95:3b:52:50:c6:b9:b4:9a:12:b1:32:84:7e: f2:d9:1d:2f:51:67:86:79:63:78:f9:bc:5c:e8:a1:b2:2f:44: 51:55:51:06:61:c3:eb:ae:d7:11:04:a9:49:5b:8e:98:8d:b9: 3c:16:35:35:52:fd:e8:0e:d3:4c:22:5c:a4:3f:a4:c6:c8:df: f6:bd:b3:d2:a5:98:91:9a:93:40:13:b5:10:70:40:39:2e:99: 06:3e:e9:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXW65v21RP5Sy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2NlMDEwMWMtMTdiMy00ZTNmLWJkZmEtMThkMDQ5YzA3MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1YWuh4uK1QzHoSIynlyjST6Q3p9CC8aYk+X 3KOHBDLLeWvwFDXDL4Po7R5kj771XUtDA/MCS4WcZwCzDsMjhTW+Nx9/sNaX+inU G/+/92TJnz7TWAmvodSq8dGTvYFe+s2CPcfC2j56wW63966Kjf64SctFrrEmI4ZF g8Hbsf9ub8IwuHfe/fSdZJ5pqgM6e1cKl79jyv/LbuplW0s3CIEOECuV+7gdU53X Yu1YgU5NGDhsD1ymq8y1UNTpjQgC8GUEvtjudYXrh7vozXeWU95+00zw2/h+cLNp J87U+95ydm9pizXWJufa+0mDsA1Xx3RG84MdJEvFYzCjeCnujQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfZL10Mc7Z829fXWbCalFVg+/8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGQ3MjM3MjAtYzFiMS0z ZGVkLTk0YmItMzVkYzU2OTk2YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqFo9WRM4nLQaoduuX3U6+4meqqfMb0lMMGg/zTKYxkMS+vEcDw9/QE m6lzoz99DQ+NHvqNkBba+LORYf7nDO7NTQinmEGSjBP9SyeZQDRsfkNPQfiSNm73 xaTELNFZSLFzhRl9OLc+AwiDKWk8dswlaUvIM52k6me6sVSiYPNEsDG3CRf+ZUTb as24A+ADQ0jaYWTTM0KclMISoPKDi2kt+wkbGqCalTtSUMa5tJoSsTKEfvLZHS9R Z4Z5Y3j5vFzoobIvRFFVUQZhw+uu1xEEqUlbjpiNuTwWNTVS/egO00wiXKQ/pMbI 3/a9s9KlmJGak0ATtRBwQDkumQY+6Qc= -----END CERTIFICATE-----Generated at Wed Aug 6 07:53:24 2025 by rpki-client