$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa File: f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa (raw, json) Hash identifier: ezlCaqN2VfeWPdmbEHtozKAG1bRg/Lar4sRbyzR/JIg= Subject key identifier: 0C:5C:AA:8B:B7:D3:23:C5:20:66:70:E5:25:A0:C5:47:07:EB:E3:23 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8412240E40F2562D284C4F20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 208.68.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:24:0e:40:f2:56:2d:28:4c:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=47b42b1a-a5c5-48f2-8066-277eb05278ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:31:66:e9:34:48:ef:c3:c1:50:2c:27:ab:b0: 55:9c:5d:4a:58:1a:4d:70:4c:b8:d8:4a:78:38:fb: 3e:a0:9b:54:b0:6a:16:e7:74:9a:0c:45:2a:ca:6a: 7a:aa:08:03:ed:f7:83:89:41:38:ad:1a:0b:8a:49: 5a:75:35:20:1c:45:c8:ca:fa:2f:d1:af:a6:35:ca: 67:79:6f:37:f1:9d:04:54:10:06:07:ca:4f:25:35: c1:4c:35:81:86:22:61:73:3c:87:29:06:79:76:50: 45:bf:d0:eb:17:72:25:a9:23:e2:05:f8:d2:8e:6d: 4d:e7:33:db:3a:74:c1:0d:2f:43:90:33:a6:47:eb: 3c:9d:79:62:89:3b:8d:53:e9:f1:5e:bc:96:6f:04: ee:4a:0f:06:02:92:eb:14:b7:14:a6:f4:d1:c1:b9: d0:95:8d:60:0e:19:01:27:aa:4c:07:39:65:c3:7b: 56:09:09:f9:ae:c1:37:b0:e4:ab:9d:14:0f:e2:96: c5:e9:a3:06:29:17:21:91:14:b9:98:69:99:8d:6d: a7:da:22:5e:7f:6b:46:99:21:c8:a4:67:98:ee:2c: c7:8d:02:4e:26:5b:74:4a:73:a9:f8:1c:33:09:88: 24:e9:a5:dc:74:f8:60:67:3e:b5:84:c2:b5:e4:15: 80:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5C:AA:8B:B7:D3:23:C5:20:66:70:E5:25:A0:C5:47:07:EB:E3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:be:59:f3:f3:df:3a:e1:84:ad:64:98:22:a6:36:de:a6:a6: 0a:c2:fb:9f:8e:76:9e:3d:af:05:4d:b0:e6:ba:cc:c1:69:64: 24:fc:d0:11:85:1d:9f:11:6c:48:e5:1c:af:08:13:aa:c3:ac: b5:45:ec:a4:1e:24:f1:3b:58:dc:4e:6b:f9:08:13:2e:73:14: 7b:fe:4f:e5:eb:92:94:0d:31:ee:d4:77:69:36:44:3e:44:20: be:af:c3:b3:e1:6d:4a:42:f7:c8:0f:13:86:2c:f4:92:f0:e0: 0c:e2:31:70:a9:08:c4:e3:e7:75:d7:31:7e:b0:04:e0:a6:19: 00:20:fa:c6:70:66:93:c1:3d:48:a8:86:3a:ed:d2:50:31:cc: 8b:e7:09:dd:89:c1:38:34:2d:47:bd:4b:2f:8e:5f:bd:a8:9d: 0c:7d:46:60:5a:e1:ea:38:47:ab:fc:19:11:48:16:b7:42:46: 67:50:f1:e8:47:a7:df:00:36:99:92:11:41:cc:f6:89:98:17: 4e:21:b9:6a:54:33:83:be:5f:f5:3f:b2:0a:a3:02:32:e1:66: 9f:6c:ac:35:6e:99:3f:cf:38:cd:ae:59:04:ca:5f:c3:6f:87: fc:d8:4c:26:ab:9f:73:b9:70:7d:ac:96:56:2e:f2:59:7d:0d: 50:5a:fc:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiQOQPJWLShMTyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDdiNDJiMWEtYTVjNS00OGYyLTgwNjYtMjc3ZWIwNTI3OGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DFm6TRI78PBUCwnq7BVnF1KWBpNcEy42Ep4 OPs+oJtUsGoW53SaDEUqymp6qggD7feDiUE4rRoLikladTUgHEXIyvov0a+mNcpn eW838Z0EVBAGB8pPJTXBTDWBhiJhczyHKQZ5dlBFv9DrF3IlqSPiBfjSjm1N5zPb OnTBDS9DkDOmR+s8nXliiTuNU+nxXryWbwTuSg8GApLrFLcUpvTRwbnQlY1gDhkB J6pMBzllw3tWCQn5rsE3sOSrnRQP4pbF6aMGKRchkRS5mGmZjW2n2iJef2tGmSHI pGeY7izHjQJOJlt0SnOp+BwzCYgk6aXcdPhgZz61hMK15BWAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxcqou30yPFIGZw5SWgxUcH6+MjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjRhNmI4NzgtMTRiNy0z M2RkLWIxZTAtZDNiMjM3OTg3ZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO+WfPz3zrhhK1kmCKmNt6mpgrC+5+Odp49rwVNsOa6zMFpZCT80BGF HZ8RbEjlHK8IE6rDrLVF7KQeJPE7WNxOa/kIEy5zFHv+T+XrkpQNMe7Ud2k2RD5E IL6vw7PhbUpC98gPE4Ys9JLw4AziMXCpCMTj53XXMX6wBOCmGQAg+sZwZpPBPUio hjrt0lAxzIvnCd2JwTg0LUe9Sy+OX72onQx9RmBa4eo4R6v8GRFIFrdCRmdQ8ehH p98ANpmSEUHM9omYF04huWpUM4O+X/U/sgqjAjLhZp9srDVumT/POM2uWQTKX8Nv h/zYTCarn3O5cH2sllYu8ll9DVBa/J0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:02:55 2025 by rpki-client