$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa File: 9a864864-8b89-3c24-892f-a08a1af18543.roa (raw, json) Hash identifier: tZdomfqjyW0L5KBhm+zkO5hdjdaewDRM2lWcDkICUb4= Subject key identifier: 6D:AB:EB:C8:AE:29:1E:42:23:B8:12:81:D0:9A:FB:5D:D4:B9:66:A5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841221B48E448B1FEAC6CA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 208.68.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:21:b4:8e:44:8b:1f:ea:c6:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=949898be-39b8-4c6d-9772-411ac4d4abbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:90:f6:ac:94:19:b7:6c:92:ec:e7:2d:8a:99: 0f:5c:da:f4:64:37:1d:3a:39:88:46:b3:71:9b:15: 50:67:85:f5:bf:3d:62:aa:cc:cb:19:b6:67:ad:b9: 1a:ef:db:a5:2b:a7:57:45:52:b5:77:a5:69:ab:19: a5:b0:47:33:cf:d9:b0:54:25:ad:f2:88:ca:cb:a6: 45:e7:b9:d0:ab:3e:5a:d6:28:1f:18:35:c0:75:76: 6a:94:f4:09:83:ab:5d:c9:62:26:de:f9:e6:ae:5e: 6f:1e:5d:20:6e:f4:91:97:04:75:a7:d6:79:b2:ed: f2:9b:c8:16:b4:19:0b:f8:ce:47:fd:11:71:e6:32: 74:b3:20:e3:5c:17:1e:b0:50:0a:3a:69:56:d2:dc: ff:d6:9c:6e:2c:70:e6:21:55:22:50:97:5b:8a:57: 25:a4:af:85:09:10:65:cc:fb:61:0d:05:96:20:f0: 84:b6:4c:d5:59:98:9c:df:e0:19:13:11:45:e7:ff: 59:9d:e3:93:b4:20:f4:c2:e4:85:5a:f7:58:fd:0c: 35:d5:50:b7:17:43:38:f9:54:62:6a:c8:e5:bc:08: ab:30:32:49:8a:43:3f:f6:2d:72:50:0d:7d:ac:34: 03:e2:23:2f:0d:78:ce:9c:07:25:83:91:ac:37:3d: 87:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AB:EB:C8:AE:29:1E:42:23:B8:12:81:D0:9A:FB:5D:D4:B9:66:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f2:b3:34:95:24:cd:7d:46:46:b9:db:43:e8:4c:b1:a7:e9: 41:9f:5b:14:82:69:d5:89:e4:fb:e1:6f:88:b4:94:61:00:51: b5:c0:ed:f0:22:ff:e5:e4:59:f8:0c:04:2b:3a:4e:40:ad:7f: 33:08:fa:76:23:79:29:ee:45:cb:2d:65:5f:f3:7c:9d:49:71: 93:ae:4a:fe:29:13:6f:ec:c5:ea:b8:8e:c6:05:cb:1d:f6:cd: da:82:9b:0e:d8:0e:58:58:7a:ac:f2:88:a6:18:55:4f:f3:c8: 8e:f4:47:60:9f:89:4a:45:fa:09:35:f7:b6:88:3d:22:d6:55: b5:b5:12:00:08:2f:47:9d:bd:be:ce:6b:74:bf:70:85:fc:d3: a0:7f:f5:b9:6b:e9:06:b6:78:54:46:b1:57:07:27:5b:bb:b6: 8c:94:61:6f:28:1f:46:c0:af:21:15:e9:75:46:37:be:c5:a4: 83:5d:ee:66:1a:04:17:50:e7:89:4e:0c:48:22:2c:c6:f4:8c: 3a:0f:23:6e:f3:94:3a:09:78:e0:34:c8:6b:be:e5:7c:a7:3f: c9:93:a7:97:96:86:df:10:07:f4:d5:23:a5:d8:73:c2:ce:93: a7:1c:0b:df:0c:67:ac:14:40:4a:ad:e9:7c:4e:60:ad:2e:91: a6:c8:d5:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiG0jkSLH+rGygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTQ5ODk4YmUtMzliOC00YzZkLTk3NzItNDExYWM0ZDRhYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZD2rJQZt2yS7OctipkPXNr0ZDcdOjmIRrNx mxVQZ4X1vz1iqszLGbZnrbka79ulK6dXRVK1d6VpqxmlsEczz9mwVCWt8ojKy6ZF 57nQqz5a1igfGDXAdXZqlPQJg6tdyWIm3vnmrl5vHl0gbvSRlwR1p9Z5su3ym8gW tBkL+M5H/RFx5jJ0syDjXBcesFAKOmlW0tz/1pxuLHDmIVUiUJdbilclpK+FCRBl zPthDQWWIPCEtkzVWZic3+AZExFF5/9ZneOTtCD0wuSFWvdY/Qw11VC3F0M4+VRi asjlvAirMDJJikM/9i1yUA19rDQD4iMvDXjOnAclg5GsNz2HnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2r68iuKR5CI7gSgdCa+13UuWalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWE4NjQ4NjQtOGI4OS0z YzI0LTg5MmYtYTA4YTFhZjE4NTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXyszSVJM19Rka520PoTLGn6UGfWxSCadWJ5Pvhb4i0lGEAUbXA7fAi /+XkWfgMBCs6TkCtfzMI+nYjeSnuRcstZV/zfJ1JcZOuSv4pE2/sxeq4jsYFyx32 zdqCmw7YDlhYeqzyiKYYVU/zyI70R2CfiUpF+gk197aIPSLWVbW1EgAIL0edvb7O a3S/cIX806B/9blr6Qa2eFRGsVcHJ1u7toyUYW8oH0bAryEV6XVGN77FpINd7mYa BBdQ54lODEgiLMb0jDoPI27zlDoJeOA0yGu+5XynP8mTp5eWht8QB/TVI6XYc8LO k6ccC98MZ6wUQEqt6XxOYK0ukabI1Z0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:15 2025 by rpki-client