$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa File: db86d00a-9156-38fa-a2ec-a5019abb2c87.roa (raw, json) Hash identifier: Ldl4WCh9Vky+R4RfESFkmRW5nW5h1dzsiUMXSnCtyiE= Subject key identifier: 54:AD:E8:CA:45:2F:22:B0:04:44:EC:C8:34:EE:85:59:10:ED:12:DC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841225EFA45C80A3F80FFD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 208.76.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:25:ef:a4:5c:80:a3:f8:0f:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=504c1bbd-e5d5-4d43-90af-3fe5c06cc490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:61:94:0f:1c:72:dd:a6:d5:db:7c:84:71: f5:c8:af:0a:97:5c:4f:b7:f3:c2:4c:bd:f6:7b:63: 5d:53:a4:41:11:30:fc:dd:1e:f5:3a:89:ae:fb:b3: c9:6c:ab:3a:3e:77:0a:02:cc:d1:43:c9:9e:d6:9b: 37:0b:54:df:d9:c5:39:4d:65:c5:95:9e:11:a8:3a: ca:28:26:07:41:ca:02:18:c5:b8:c9:20:9a:a5:40: 17:5e:7e:05:ee:43:1f:ee:b6:ed:ee:70:21:5f:3d: bf:91:a3:71:7f:cc:6c:26:ff:d5:da:5b:cb:03:91: ab:19:ff:33:25:10:de:0a:05:65:e0:76:64:27:f2: 4d:f6:c4:86:5c:cc:88:9a:97:ba:7b:da:74:e2:f0: 7f:38:a1:c2:4d:53:1e:46:88:c6:f3:a8:37:fe:50: f2:11:63:1f:33:68:6d:ca:27:0b:e1:b0:53:f8:74: 72:5b:53:9a:9d:f7:9f:b3:7a:c3:a5:51:d6:50:4b: 81:5a:52:0b:4d:47:35:04:fd:f5:c7:20:ea:9f:5b: a2:7d:9f:8f:45:12:08:e7:96:a7:3e:51:85:86:5e: d3:ee:a3:e8:97:7c:83:4e:1f:31:1e:4c:a4:1b:19: 30:72:60:39:35:6e:17:7b:23:d3:c0:84:f5:0e:cc: 38:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AD:E8:CA:45:2F:22:B0:04:44:EC:C8:34:EE:85:59:10:ED:12:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ce:d0:b6:89:f6:8e:11:ff:50:71:d8:8a:ce:69:71:57:d7: 5e:cc:ad:16:12:e4:3d:e9:79:60:d0:04:cc:a8:e2:7a:02:9e: 5b:88:cf:ac:5a:6e:3d:a7:e3:52:b8:f7:bb:8d:67:a5:73:c3: d7:5c:cc:5c:f6:d7:63:96:e8:a9:dc:cb:a6:de:23:82:dd:8b: e5:9f:41:de:fe:41:1a:4d:85:d5:82:b0:9f:4f:3e:f0:9c:a4: d4:19:e1:6a:a4:b4:05:26:14:4a:80:46:b6:7b:15:29:92:a7: 96:d2:96:d4:40:7c:c1:47:c9:8e:aa:de:ee:96:7b:44:06:e0: fd:27:02:d5:ae:f0:31:a3:45:8a:ab:51:0a:1c:38:0c:a7:85: dd:85:eb:1e:15:fd:e9:85:78:2d:4e:48:16:9a:b0:40:44:3d: 1f:b9:ee:2c:79:40:12:de:4f:a6:e4:a5:99:04:3f:a1:3b:bb: 5a:93:2e:df:a2:68:40:d4:b1:57:34:df:d5:79:06:a7:7e:1e: 25:b7:4e:ce:c8:f6:08:0b:cb:7c:4e:28:67:15:5c:4d:c7:3c: 04:f7:24:17:7e:78:73:aa:7a:d0:1e:70:15:ae:f9:1b:99:2a: 3a:f2:51:eb:40:38:27:d4:ee:00:4f:bd:94:fe:ca:ec:c4:f7: 95:7a:74:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiXvpFyAo/gP/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTA0YzFiYmQtZTVkNS00ZDQzLTkwYWYtM2ZlNWMwNmNjNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP1hlA8cct2m1dt8hHH1yK8Kl1xPt/PCTL32 e2NdU6RBETD83R71Oomu+7PJbKs6PncKAszRQ8me1ps3C1Tf2cU5TWXFlZ4RqDrK KCYHQcoCGMW4ySCapUAXXn4F7kMf7rbt7nAhXz2/kaNxf8xsJv/V2lvLA5GrGf8z JRDeCgVl4HZkJ/JN9sSGXMyImpe6e9p04vB/OKHCTVMeRojG86g3/lDyEWMfM2ht yicL4bBT+HRyW1Oanfefs3rDpVHWUEuBWlILTUc1BP31xyDqn1uifZ+PRRII55an PlGFhl7T7qPol3yDTh8xHkykGxkwcmA5NW4XeyPTwIT1Dsw4FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSt6MpFLyKwBETsyDTuhVkQ7RLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGI4NmQwMGEtOTE1Ni0z OGZhLWEyZWMtYTUwMTlhYmIyYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDO0LaJ9o4R/1Bx2IrOaXFX117MrRYS5D3peWDQBMyo4noCnluIz6xa bj2n41K497uNZ6Vzw9dczFz212OW6Kncy6beI4Ldi+WfQd7+QRpNhdWCsJ9PPvCc pNQZ4WqktAUmFEqARrZ7FSmSp5bSltRAfMFHyY6q3u6We0QG4P0nAtWu8DGjRYqr UQocOAynhd2F6x4V/emFeC1OSBaasEBEPR+57ix5QBLeT6bkpZkEP6E7u1qTLt+i aEDUsVc039V5Bqd+HiW3Ts7I9ggLy3xOKGcVXE3HPAT3JBd+eHOqetAecBWu+RuZ KjryUetAOCfU7gBPvZT+yuzE95V6dAw= -----END CERTIFICATE-----Generated at Mon Aug 4 15:00:40 2025 by rpki-client