$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd170ce2-205d-35fa-ba03-d2acdd3ce2dd.roa File: dd170ce2-205d-35fa-ba03-d2acdd3ce2dd.roa (raw, json) Hash identifier: W8cvBdF17r0m+TBPpOqiyIM0py72ikrcaYGupuwE/58= Subject key identifier: CD:1A:BD:AA:C9:F2:60:C8:CE:B7:5B:A6:E2:BE:3A:31:15:F2:E8:78 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8575FAB03916FBD1FAFBB840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd170ce2-205d-35fa-ba03-d2acdd3ce2dd.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 396982 IP address blocks: 208.76.71.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:fa:b0:39:16:fb:d1:fa:fb:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=56fb7871-c2c2-485c-88fa-3a861a93e554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:e6:b2:0e:99:6e:74:61:43:25:94:c6:24: 4c:97:3f:32:41:ab:3f:4c:2a:dd:62:dd:23:2a:3f: c1:60:c5:1b:19:1c:d7:36:d7:5f:e1:9a:84:80:28: 9d:73:9a:28:37:f2:65:91:c7:d3:a9:a1:b8:20:8a: c7:67:66:61:02:2e:e7:87:59:ba:f9:3f:ac:3d:5d: ea:8a:6d:0f:42:03:8b:91:a3:9c:27:3d:d7:3b:19: 43:a6:01:60:48:c2:ab:ac:2b:b6:46:48:a1:b7:e5: f9:84:71:52:1e:10:84:13:88:f4:2b:f8:fd:98:4a: cb:2d:7d:9f:53:8e:8e:47:be:1e:29:2c:27:d8:f1: b3:70:91:8d:c3:f5:01:95:2f:45:90:5a:81:69:0e: a8:73:4a:3f:a6:ca:47:3a:f6:20:85:05:b1:c3:6d: d8:9a:45:1c:db:e4:1c:4e:6d:fd:e7:f0:44:43:a6: c6:77:40:df:c5:8d:9b:ca:44:3c:a3:31:9e:a0:8e: 54:86:5d:42:74:9d:c1:14:33:4e:da:6b:24:55:e2: 19:43:67:b9:58:3d:01:85:4e:52:a3:76:20:43:0e: 55:ea:a9:80:ef:f5:00:f6:6b:55:c3:85:c3:07:60: 90:4b:57:3e:db:77:48:0d:f7:ef:d4:f3:d0:88:73: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1A:BD:AA:C9:F2:60:C8:CE:B7:5B:A6:E2:BE:3A:31:15:F2:E8:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd170ce2-205d-35fa-ba03-d2acdd3ce2dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:33:af:45:72:7d:7a:50:44:58:28:cd:00:b9:7b:11:ef:b6: cc:3c:f8:c4:fe:3a:4c:d3:fd:a6:bc:42:0c:57:2b:ee:d2:67: 8b:b0:79:ae:66:f5:29:b2:c2:8f:04:a5:b6:3d:ad:d1:69:28: e4:ee:ac:be:39:c6:82:a6:3f:22:69:1e:ea:78:dd:38:85:15: 73:cc:53:7a:af:c3:0c:e1:87:d2:51:76:8e:b9:f6:d2:fb:f4: 51:02:ab:96:46:f4:61:e5:d6:2e:47:ea:14:49:98:24:71:ca: 87:89:3f:0a:b2:0a:a1:5a:a3:ce:9a:43:a0:d2:2d:69:4a:1c: f3:af:9b:21:02:d0:40:e2:05:94:f3:32:2f:90:4a:a5:97:a2: 03:dc:ac:18:db:86:dc:b9:cd:70:d1:60:ba:93:6b:34:97:83: f1:4b:24:76:4d:77:d0:65:66:3b:c1:fe:16:76:fc:55:ee:c0: c4:dd:25:66:cf:3d:eb:a6:9f:f5:c5:b9:6b:09:df:bc:fe:01: c5:1f:e0:f4:dd:6d:de:81:3a:b4:11:32:8a:e0:08:ef:07:96: db:39:de:1d:d1:68:65:cd:86:a1:f9:86:ba:e1:cb:f8:ca:14: bc:19:09:14:0d:56:2a:bb:2e:ac:0b:ce:36:d8:0b:b5:68:00: 3f:2d:0c:23 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqFdfqwORb70fr7uEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk NTZmYjc4NzEtYzJjMi00ODVjLTg4ZmEtM2E4NjFhOTNlNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMTmsg6ZbnRhQyWUxiRMlz8yQas/TCrdYt0j Kj/BYMUbGRzXNtdf4ZqEgCidc5ooN/JlkcfTqaG4IIrHZ2ZhAi7nh1m6+T+sPV3q im0PQgOLkaOcJz3XOxlDpgFgSMKrrCu2Rkiht+X5hHFSHhCEE4j0K/j9mErLLX2f U46OR74eKSwn2PGzcJGNw/UBlS9FkFqBaQ6oc0o/pspHOvYghQWxw23YmkUc2+Qc Tm395/BEQ6bGd0DfxY2bykQ8ozGeoI5Uhl1CdJ3BFDNO2mskVeIZQ2e5WD0BhU5S o3YgQw5V6qmA7/UA9mtVw4XDB2CQS1c+23dIDffv1PPQiHOTWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM0avarJ8mDIzrdbpuK+OjEV8uh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQxNzBjZTItMjA1ZC0z NWZhLWJhMDMtZDJhY2RkM2NlMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6M69Fcn16UERYKM0AuXsR77bMPPjE/jpM0/2mvEIMVyvu0meLsHmu ZvUpssKPBKW2Pa3RaSjk7qy+OcaCpj8iaR7qeN04hRVzzFN6r8MM4YfSUXaOufbS +/RRAquWRvRh5dYuR+oUSZgkccqHiT8KsgqhWqPOmkOg0i1pShzzr5shAtBA4gWU 8zIvkEqll6ID3KwY24bcuc1w0WC6k2s0l4PxSyR2TXfQZWY7wf4WdvxV7sDE3SVm zz3rpp/1xblrCd+8/gHFH+D03W3egTq0ETKK4AjvB5bbOd4d0WhlzYah+Ya64cv4 yhS8GQkUDVYquy6sC8422Au1aAA/LQwj -----END CERTIFICATE-----Generated at Tue Aug 5 20:14:46 2025 by rpki-client