$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b27f7839-a4e4-3e21-a6eb-aceb75251914.roa File: b27f7839-a4e4-3e21-a6eb-aceb75251914.roa (raw, json) Hash identifier: EwiAZjiNcBOF/16ZMYDDKydAPMQCRsWbGB6gjiZxZNs= Subject key identifier: 10:8E:68:6A:A7:6C:C9:60:40:2B:35:27:AD:27:96:01:81:7E:70:B7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123354731309C1763CE180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b27f7839-a4e4-3e21-a6eb-aceb75251914.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 208.76.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:33:54:73:13:09:c1:76:3c:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9f2e11b0-0f71-477d-9c77-a0403771f0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:da:47:b9:f0:f5:ae:7b:4e:07:14:f1:f4:3c: 34:1a:21:7b:eb:67:c2:87:8f:db:7c:ba:4c:8a:d5: 90:ce:85:bb:b4:a2:c3:a2:90:67:d1:c5:19:c4:ea: 41:28:1f:2b:3f:f9:21:71:5a:eb:5f:3d:f2:0a:e4: d0:84:78:10:d8:fa:62:b9:b4:d3:98:5b:7b:4a:c2: e9:d8:c6:0e:ba:dd:9e:dc:7e:3c:58:3c:fc:52:ee: 0d:e4:e9:cd:50:df:87:2e:da:88:c3:07:85:79:1d: 49:a7:a3:cf:44:76:95:d4:03:96:30:bc:36:18:42: a5:d5:d5:35:ba:08:0e:d6:67:27:c5:c9:ac:ab:5c: 75:2d:22:44:5d:97:9e:5c:91:32:06:d3:20:cb:54: 43:4c:b1:63:27:54:b5:40:7c:b8:d6:00:49:3d:80: e9:72:f2:cf:cc:9f:24:3c:a8:ab:90:12:4a:7f:cf: 96:70:a9:24:b3:c8:82:a1:e2:46:84:b1:ea:04:73: 40:1b:9d:df:24:46:cd:e5:d3:2b:7e:45:fb:df:14: 4d:77:5e:59:1b:25:b4:10:e1:2d:2f:b9:1d:1c:b2: 4c:86:b5:7c:ef:12:59:84:2e:fa:3d:7b:fb:f3:ed: 71:02:01:5a:98:5f:5f:be:25:bd:14:9c:4b:37:c0: d3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8E:68:6A:A7:6C:C9:60:40:2B:35:27:AD:27:96:01:81:7E:70:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b27f7839-a4e4-3e21-a6eb-aceb75251914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d3:c8:d1:1f:19:4c:00:f3:be:eb:05:6b:86:dc:b1:61:a7: 18:0a:67:7a:3e:aa:03:cd:8e:50:88:68:10:46:41:1d:f9:bf: 65:0c:48:a9:8c:b9:a0:d1:7b:94:0c:61:26:af:c1:9a:0c:37: 92:77:1e:a6:2d:e3:7f:4a:f4:d0:d1:71:e1:d7:f2:c8:ec:bf: 85:5c:94:c9:cb:60:16:26:f9:25:68:66:94:f6:cb:7c:33:31: bb:15:25:d6:1f:6b:cb:88:be:00:47:4a:2d:7e:23:e3:1d:92: f6:b4:be:8f:05:da:00:5c:f5:36:7d:ce:e1:fd:c9:2e:2a:e1: 58:b2:37:5a:cc:22:9e:d0:25:bd:04:70:6e:d4:b7:11:2b:17: 68:f9:44:97:66:f7:7d:b1:51:4f:7f:4d:0d:3f:f8:58:68:45: 8c:9a:69:bb:09:18:c1:9d:78:84:c9:26:e5:79:23:61:dd:59: 73:df:07:22:db:b7:1e:0a:51:6a:2d:89:fe:45:5a:64:4e:76: 7a:0c:1a:42:b3:ec:ee:e3:a9:20:43:c0:89:c7:68:dd:21:87: e5:ee:85:5f:1c:70:ed:69:59:e8:fe:6e:8f:c2:5d:ba:77:14: 53:5a:71:71:33:65:58:a0:ff:da:d2:8d:3a:50:a2:c4:7d:7a: 50:16:12:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjNUcxMJwXY84YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OWYyZTExYjAtMGY3MS00NzdkLTljNzctYTA0MDM3NzFmMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNpHufD1rntOBxTx9Dw0GiF762fCh4/bfLpM itWQzoW7tKLDopBn0cUZxOpBKB8rP/khcVrrXz3yCuTQhHgQ2PpiubTTmFt7SsLp 2MYOut2e3H48WDz8Uu4N5OnNUN+HLtqIwweFeR1Jp6PPRHaV1AOWMLw2GEKl1dU1 uggO1mcnxcmsq1x1LSJEXZeeXJEyBtMgy1RDTLFjJ1S1QHy41gBJPYDpcvLPzJ8k PKirkBJKf8+WcKkks8iCoeJGhLHqBHNAG53fJEbN5dMrfkX73xRNd15ZGyW0EOEt L7kdHLJMhrV87xJZhC76PXv78+1xAgFamF9fviW9FJxLN8DTZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCOaGqnbMlgQCs1J60nlgGBfnC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjI3Zjc4MzktYTRlNC0z ZTIxLWE2ZWItYWNlYjc1MjUxOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ExGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3TyNEfGUwA877rBWuG3LFhpxgKZ3o+qgPNjlCIaBBGQR35v2UMSKmM uaDRe5QMYSavwZoMN5J3HqYt439K9NDRceHX8sjsv4VclMnLYBYm+SVoZpT2y3wz MbsVJdYfa8uIvgBHSi1+I+Mdkva0vo8F2gBc9TZ9zuH9yS4q4ViyN1rMIp7QJb0E cG7UtxErF2j5RJdm932xUU9/TQ0/+FhoRYyaabsJGMGdeITJJuV5I2HdWXPfByLb tx4KUWotif5FWmROdnoMGkKz7O7jqSBDwInHaN0hh+XuhV8ccO1pWej+bo/CXbp3 FFNacXEzZVig/9rSjTpQosR9elAWEuk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:20:48 2025 by rpki-client