$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa File: db86d00a-9156-38fa-a2ec-a5019abb2c87.roa (raw, json) Hash identifier: HqmQQQu4a23GUcj6OpPWYxHyMrQZAWARmC0DTkz9W3o= Subject key identifier: DB:30:0C:19:EB:EA:02:AF:0E:C5:88:1A:B6:94:E5:96:23:3C:E6:51 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE10CDC758C628074720B3 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 208.76.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:10:cd:c7:58:c6:28:07:47:20:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=540bcf2e-8917-47e7-a8fd-b6968afb5d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:92:b2:62:53:ca:e3:98:b5:6d:f8:3f:26: 47:41:cc:68:15:30:eb:1d:e3:6a:db:15:e9:99:04: ab:7b:e8:fb:eb:0a:08:29:32:d7:fb:59:68:62:96: 72:66:18:2d:a2:10:6e:10:1e:b6:ee:2d:98:b6:b2: b0:f8:2a:d5:3b:c8:70:72:a2:a4:6e:6b:17:20:90: 3f:d1:fa:96:8c:f9:21:f2:2b:18:be:7e:b2:c7:3c: 8d:b8:73:87:99:4a:d8:30:16:7b:46:e3:5b:5b:32: b3:fc:a2:67:9b:39:0c:b9:9f:24:e8:d1:20:8c:c9: a7:73:e5:1f:d6:10:bf:60:7e:36:04:5c:c2:22:48: 07:ed:23:f0:73:b7:31:60:7c:1d:3a:4e:98:db:25: 80:26:35:3b:ea:ea:7a:4b:bc:8c:3b:b4:fe:46:91: 83:09:be:5e:24:a2:e9:09:d5:e1:fe:d6:e6:8d:a8: 6a:88:71:d4:79:4c:b8:2c:a2:ba:7f:a9:43:26:11: 71:67:86:28:e8:73:13:4a:51:5f:15:8b:41:b9:ea: f8:fd:29:a7:70:f7:4f:e1:9d:3b:2c:17:7c:d1:0f: b2:82:a5:97:2d:be:07:d4:41:10:70:66:d8:af:74: c5:af:9f:af:4a:e1:22:99:71:75:62:66:13:d4:bf: 0c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:30:0C:19:EB:EA:02:AF:0E:C5:88:1A:B6:94:E5:96:23:3C:E6:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:76:4b:79:25:cd:ac:45:f7:81:28:a9:22:cf:c5:39:ea:c1: c6:0c:a9:82:f2:9b:2f:6f:82:51:9a:30:50:16:bf:e9:4d:ec: 5c:af:22:3c:b6:c3:8e:b0:71:9e:2c:ba:93:c8:2b:03:f4:6f: 30:ac:a4:e4:a5:f5:be:44:a2:55:96:63:20:9d:e7:6f:8b:bb: d7:16:85:bf:5d:a7:b2:9c:a9:fc:37:86:d0:00:73:21:50:94: 74:ac:fb:48:19:99:7a:a2:77:bb:22:d6:66:0e:e2:b4:f9:41: 8f:f5:a5:f3:35:64:a6:99:b9:ec:fc:e1:ef:22:68:ba:f0:83: bd:bf:6b:a9:53:bc:d8:15:a6:73:1b:17:a4:f3:e0:17:22:cb: b6:53:02:1b:ce:1c:79:57:cd:07:fb:32:50:08:17:e4:20:e1: f3:ca:1a:39:e1:a1:c4:c2:d2:21:d8:89:3e:6a:2e:4a:d6:fe: a7:af:6f:5d:21:8c:63:6d:0b:a7:e2:27:f0:27:93:70:6a:8d: 85:a9:f7:be:9d:4c:60:4f:42:2f:60:30:41:13:4d:03:0b:18: db:6d:7e:ca:66:a0:66:2f:45:de:97:a4:b2:a0:94:48:27:15: 3a:72:de:95:27:ca:51:92:95:7d:bc:98:4d:0c:0f:b6:11:f3: 92:11:c9:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhDNx1jGKAdHILMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTQwYmNmMmUtODkxNy00N2U3LWE4ZmQtYjY5NjhhZmI1ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveuSsmJTyuOYtW34PyZHQcxoFTDrHeNq2xXp mQSre+j76woIKTLX+1loYpZyZhgtohBuEB627i2YtrKw+CrVO8hwcqKkbmsXIJA/ 0fqWjPkh8isYvn6yxzyNuHOHmUrYMBZ7RuNbWzKz/KJnmzkMuZ8k6NEgjMmnc+Uf 1hC/YH42BFzCIkgH7SPwc7cxYHwdOk6Y2yWAJjU76up6S7yMO7T+RpGDCb5eJKLp CdXh/tbmjahqiHHUeUy4LKK6f6lDJhFxZ4Yo6HMTSlFfFYtBuer4/SmncPdP4Z07 LBd80Q+ygqWXLb4H1EEQcGbYr3TFr5+vSuEimXF1YmYT1L8MZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNswDBnr6gKvDsWIGraU5ZYjPOZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGI4NmQwMGEtOTE1Ni0z OGZhLWEyZWMtYTUwMTlhYmIyYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx2S3klzaxF94EoqSLPxTnqwcYMqYLymy9vglGaMFAWv+lN7FyvIjy2 w46wcZ4supPIKwP0bzCspOSl9b5EolWWYyCd52+Lu9cWhb9dp7Kcqfw3htAAcyFQ lHSs+0gZmXqid7si1mYO4rT5QY/1pfM1ZKaZuez84e8iaLrwg72/a6lTvNgVpnMb F6Tz4Bciy7ZTAhvOHHlXzQf7MlAIF+Qg4fPKGjnhocTC0iHYiT5qLkrW/qevb10h jGNtC6fiJ/Ank3BqjYWp976dTGBPQi9gMEETTQMLGNttfspmoGYvRd6XpLKglEgn FTpy3pUnylGSlX28mE0MD7YR85IRyWU= -----END CERTIFICATE-----Generated at Wed Nov 5 06:57:49 2025 by rpki-client