$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b54fd014-e39f-3ef6-9507-17c43f40e70e.roa File: b54fd014-e39f-3ef6-9507-17c43f40e70e.roa (raw, json) Hash identifier: Q2YrJ9fB1GBiigIqrPeSRn98uxumGj2L5au6o7CAMBk= Subject key identifier: DA:9F:03:F6:3F:1F:41:12:D0:9F:50:77:A1:AE:70:5F:32:CA:00:8E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841175ACC8BD81D59B47DC40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b54fd014-e39f-3ef6-9507-17c43f40e70e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 208.76.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:75:ac:c8:bd:81:d5:9b:47:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=204ad7f6-c539-4e56-b5a5-746c9f5cb2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:60:83:6b:e1:0d:0c:ce:11:71:c8:87:b9:f9: 8b:83:bf:ac:cf:e5:93:d3:a9:e3:00:06:62:26:20: 82:fd:bd:64:7f:fc:e5:d2:92:ef:a6:b2:7b:39:00: 3b:c8:5a:12:af:66:b6:5e:74:18:6e:9f:fd:35:49: 3c:ba:2f:c4:87:9d:fd:09:d1:0c:be:6e:bd:66:1c: cd:bc:07:d4:fa:ae:dc:06:28:5c:47:ed:6e:e9:92: b3:38:be:03:05:8c:be:8d:aa:ba:bb:41:d6:2e:ac: 58:87:79:d7:6d:6e:61:dc:b3:4d:dd:21:27:cd:fc: 16:51:71:0f:4d:38:98:d7:b4:8a:01:46:84:ad:34: bc:cb:43:c4:4b:54:58:e0:40:73:6e:73:04:2f:6d: 33:68:90:b8:f6:e8:96:42:51:40:5e:12:e4:cc:53: 29:b0:8b:78:d7:f4:21:e3:b3:3a:c9:ae:05:06:27: db:60:a4:bf:fe:c0:41:67:ec:81:90:a8:43:67:5d: 64:85:07:3f:2c:cb:f2:2e:21:15:f1:27:73:d4:2c: 42:ed:a6:37:d1:61:b5:47:0c:e1:05:62:92:71:4b: d6:3b:be:d5:7f:8e:3f:50:2f:de:3e:92:79:31:8a: 95:10:9a:58:58:96:c4:6e:c6:78:30:13:a1:d4:d4: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9F:03:F6:3F:1F:41:12:D0:9F:50:77:A1:AE:70:5F:32:CA:00:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b54fd014-e39f-3ef6-9507-17c43f40e70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:c2:77:06:d7:b7:4e:cd:0b:f7:8b:6e:6c:78:9d:e2:f5:3c: b7:75:13:b1:df:52:6e:76:b2:bf:95:31:93:7a:9e:4a:b6:dc: 2b:d1:ce:1f:53:e4:af:74:c5:ef:b3:7a:bf:25:38:45:47:7f: 92:0e:45:65:bf:03:4c:87:de:5b:ce:b1:73:3b:1b:08:33:f6: 3a:04:cd:ea:31:66:33:e9:ea:43:e5:10:1b:13:fd:a4:96:35: 3a:97:0f:55:e8:3d:ee:b5:5b:dd:49:e7:e8:62:c8:e3:5b:1c: f3:03:21:45:d3:1c:f1:6e:8a:c4:1e:37:13:a0:11:95:09:fa: 93:05:79:3e:44:3c:58:05:89:18:1c:bb:bc:87:a6:b9:17:c3: 35:ca:a9:28:9d:5c:66:64:75:7f:5c:ba:bb:9d:ed:63:8e:c8: 97:e2:0a:42:17:39:5c:6c:3e:cf:ac:31:ff:f8:f2:90:67:f7: 54:7d:e1:e8:a0:ea:f9:d3:9f:c6:32:a7:ab:f6:18:7a:b4:e1: 36:17:56:31:34:1a:85:6b:36:ae:70:6e:86:c4:7d:9d:9d:df: b9:12:92:c0:e0:c0:5c:3b:d4:e8:b2:e7:78:30:e5:5c:0d:93: 3c:07:ef:32:1b:68:4e:a1:90:df:04:d1:d4:01:0a:63:e9:19: e1:fc:32:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXWsyL2B1ZtH3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjA0YWQ3ZjYtYzUzOS00ZTU2LWI1YTUtNzQ2YzlmNWNiMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGCDa+ENDM4RcciHufmLg7+sz+WT06njAAZi JiCC/b1kf/zl0pLvprJ7OQA7yFoSr2a2XnQYbp/9NUk8ui/Eh539CdEMvm69ZhzN vAfU+q7cBihcR+1u6ZKzOL4DBYy+jaq6u0HWLqxYh3nXbW5h3LNN3SEnzfwWUXEP TTiY17SKAUaErTS8y0PES1RY4EBzbnMEL20zaJC49uiWQlFAXhLkzFMpsIt41/Qh 47M6ya4FBifbYKS//sBBZ+yBkKhDZ11khQc/LMvyLiEV8Sdz1CxC7aY30WG1Rwzh BWKScUvWO77Vf44/UC/ePpJ5MYqVEJpYWJbEbsZ4MBOh1NQVQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqfA/Y/H0ES0J9Qd6GucF8yygCOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjU0ZmQwMTQtZTM5Zi0z ZWY2LTk1MDctMTdjNDNmNDBlNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/CdwbXt07NC/eLbmx4neL1PLd1E7HfUm52sr+VMZN6nkq23CvRzh9T 5K90xe+zer8lOEVHf5IORWW/A0yH3lvOsXM7Gwgz9joEzeoxZjPp6kPlEBsT/aSW NTqXD1XoPe61W91J5+hiyONbHPMDIUXTHPFuisQeNxOgEZUJ+pMFeT5EPFgFiRgc u7yHprkXwzXKqSidXGZkdX9curud7WOOyJfiCkIXOVxsPs+sMf/48pBn91R94eig 6vnTn8Yyp6v2GHq04TYXVjE0GoVrNq5wbobEfZ2d37kSksDgwFw71Oiy53gw5VwN kzwH7zIbaE6hkN8E0dQBCmPpGeH8Mt4= -----END CERTIFICATE-----Generated at Mon Aug 4 14:10:48 2025 by rpki-client