$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9704a73-990b-37e2-b5bb-a2bc801fb27b.roa File: b9704a73-990b-37e2-b5bb-a2bc801fb27b.roa (raw, json) Hash identifier: /uCTEnsLeqpZaRCoouHDtNyWx2yVWwBXViinsAjz7nU= Subject key identifier: C3:38:E3:A7:DE:BC:28:3C:BA:38:B8:99:D6:3A:20:C5:0B:40:35:1C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841182E7CF100AB6B528A0B0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9704a73-990b-37e2-b5bb-a2bc801fb27b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 208.76.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:82:e7:cf:10:0a:b6:b5:28:a0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e148d2ae-866d-4cc4-b7b5-9ab9f585ba2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:4e:60:15:2e:14:f5:0c:20:0c:cf:09:24: 2b:96:a1:41:4d:50:92:0b:d2:86:52:62:1e:56:88: da:eb:20:d3:26:81:03:c5:7a:c4:71:4d:9b:e9:a6: 6d:48:18:55:08:ca:a6:16:08:25:47:69:01:4e:13: c4:d5:a2:57:98:e1:38:ff:c4:28:ea:ef:f7:c9:9c: 37:a9:48:52:67:c3:1e:57:dd:15:48:90:43:53:5e: 0a:16:4e:a2:ad:ac:c6:5e:72:49:54:0a:cf:b3:54: 09:3c:cb:48:74:82:37:27:99:e3:c5:0b:6d:9c:cb: 23:1b:bc:c3:51:fc:5d:c6:3e:54:3f:65:ac:bf:f3: 90:0e:b8:a6:7b:c3:3b:cb:d1:2f:b2:12:26:3d:54: 9e:8a:04:5d:64:fe:f5:24:60:6e:40:87:49:ce:49: 05:1d:43:59:b9:ed:68:81:0c:51:c5:fd:b8:7f:fc: fa:f8:8a:bb:14:6f:37:e0:23:4d:c6:3d:3f:c3:1d: ab:52:6c:5b:7a:43:c0:a0:98:96:ef:67:2b:a2:60: 2d:21:84:ed:05:0c:5f:63:60:c4:bd:90:44:bf:c7: c5:d1:19:3d:0d:fd:f5:ac:ad:8d:fe:be:51:84:6b: 14:0f:5c:31:8f:13:f7:ea:de:c0:45:4d:da:85:56: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:38:E3:A7:DE:BC:28:3C:BA:38:B8:99:D6:3A:20:C5:0B:40:35:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9704a73-990b-37e2-b5bb-a2bc801fb27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:92:da:e3:2e:02:19:8b:c7:f6:3a:a5:08:6f:09:89:39:dd: 8e:74:22:7e:7b:08:5a:42:3f:e0:58:b3:03:3b:81:82:f3:51: b6:5f:3e:d8:bc:d1:71:7d:0e:21:01:e3:d0:de:11:32:be:a5: ba:5a:6e:8f:62:d6:d6:78:91:d5:c9:5f:38:3b:c6:48:8e:79: 07:33:1d:df:ae:9d:e5:d0:c4:90:fd:77:c2:17:db:d7:18:59: b7:f0:45:e9:9a:68:16:7b:d3:12:a2:5f:f8:d8:d6:7d:6c:b6: 02:25:e5:d4:e3:bd:f3:9a:b4:ce:d4:58:c9:90:6f:de:1e:af: 2f:3d:3d:43:94:ae:ab:44:be:6b:48:8e:c1:21:a0:56:13:f7: 33:25:8d:91:c5:80:59:de:8b:dc:de:47:84:51:d1:7d:b1:c5: 2a:dc:1d:09:2d:4f:94:a7:9a:fd:ae:96:b5:8e:16:77:ff:51: b1:6f:c4:81:57:10:c3:a6:55:db:ac:63:49:4f:e1:20:78:6d: 7e:7d:90:39:b3:50:b1:05:0b:d7:f2:39:bd:06:80:59:05:e9: 5a:84:93:33:3a:ee:f3:8b:41:6c:61:d6:a8:b7:30:f2:51:9b: d0:1f:41:34:7e:bc:65:ca:b6:e7:d5:2c:9c:a2:f5:97:ed:68: 71:f0:bf:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYLnzxAKtrUooLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTE0OGQyYWUtODY2ZC00Y2M0LWI3YjUtOWFiOWY1ODViYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNJOYBUuFPUMIAzPCSQrlqFBTVCSC9KGUmIe Voja6yDTJoEDxXrEcU2b6aZtSBhVCMqmFgglR2kBThPE1aJXmOE4/8Qo6u/3yZw3 qUhSZ8MeV90VSJBDU14KFk6irazGXnJJVArPs1QJPMtIdII3J5njxQttnMsjG7zD Ufxdxj5UP2Wsv/OQDrime8M7y9EvshImPVSeigRdZP71JGBuQIdJzkkFHUNZue1o gQxRxf24f/z6+Iq7FG834CNNxj0/wx2rUmxbekPAoJiW72cromAtIYTtBQxfY2DE vZBEv8fF0Rk9Df31rK2N/r5RhGsUD1wxjxP36t7ARU3ahVZBsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMM446fevCg8uji4mdY6IMULQDUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjk3MDRhNzMtOTkwYi0z N2UyLWI1YmItYTJiYzgwMWZiMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+S2uMuAhmLx/Y6pQhvCYk53Y50In57CFpCP+BYswM7gYLzUbZfPti8 0XF9DiEB49DeETK+pbpabo9i1tZ4kdXJXzg7xkiOeQczHd+uneXQxJD9d8IX29cY WbfwRemaaBZ70xKiX/jY1n1stgIl5dTjvfOatM7UWMmQb94ery89PUOUrqtEvmtI jsEhoFYT9zMljZHFgFnei9zeR4RR0X2xxSrcHQktT5Snmv2ulrWOFnf/UbFvxIFX EMOmVdusY0lP4SB4bX59kDmzULEFC9fyOb0GgFkF6VqEkzM67vOLQWxh1qi3MPJR m9AfQTR+vGXKtufVLJyi9ZftaHHwvww= -----END CERTIFICATE-----Generated at Mon Aug 4 19:16:26 2025 by rpki-client