$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa File: 890756c8-89bc-3860-9d7e-6e5218522bfe.roa (raw, json) Hash identifier: Tq0hD7YGZS28W1BEqiQ3YTyrFMYYo9RHIwK/EebgE7Q= Subject key identifier: 91:9C:65:90:35:BF:6F:37:0E:5B:1E:62:F6:E7:A2:3A:45:B6:C0:0F Certificate issuer: /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Certificate serial: 010D0C9F4328584AA85BAE38426A1076B4D3BE00 Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 397444 IP address blocks: 208.68.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:ae:38:42:6a:10:76:b4:d3:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=0b2d33b7-0e52-45c5-b3a5-993e16397ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:87:9f:43:b8:7b:0d:e3:d8:08:17:08:6b: 43:5e:5c:b9:d2:ee:9b:a5:73:c4:d0:71:4f:39:a2: 09:36:4f:59:91:01:ed:ee:2d:92:ee:ba:d2:a6:04: db:8b:4c:98:fa:10:2d:d6:f2:74:16:7b:ec:f7:e6: f2:c9:c1:3d:9a:37:dc:54:55:c4:13:6c:d0:cc:cc: 01:66:18:06:25:85:b7:c1:aa:e3:bd:5a:29:f7:70: 73:79:67:bf:2e:ed:7d:c2:eb:bb:52:2b:71:f6:66: c4:c6:2f:ff:42:a6:c7:cc:59:b5:c9:92:c8:64:82: f4:d7:b7:b5:25:6d:e4:a6:a8:d3:92:62:57:f8:fc: 9b:26:9d:24:0b:32:a9:d2:b3:fd:27:94:94:05:0a: 72:3d:98:21:f4:ea:e4:74:bb:2f:c9:1f:37:8f:59: 59:39:50:2d:55:03:af:14:64:e3:9c:91:4a:d4:c1: ca:84:40:37:c3:0d:c5:19:95:bb:6f:13:2d:28:58: bc:c1:3e:d9:7c:8a:20:fd:e8:3e:53:d9:ee:ef:6c: d8:37:41:ca:23:a4:b9:ec:c9:63:02:6e:33:a2:cd: e3:b4:c2:3f:cc:a7:bd:7f:06:dc:2c:a3:8e:e7:0b: 19:5d:2a:10:36:fe:88:e0:3f:b7:fe:9d:5a:99:6c: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9C:65:90:35:BF:6F:37:0E:5B:1E:62:F6:E7:A2:3A:45:B6:C0:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl X509v3 Authority Key Identifier: keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer sbgp-ipAddrBlock: critical IPv4: 208.68.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:07:be:45:88:53:ba:40:d5:a1:6e:13:ea:49:82:8c:6b:88: 8a:43:a4:4b:a0:a8:5e:41:2f:8e:82:71:0c:9d:da:d4:51:1c: e0:3a:85:08:c8:3d:d6:6e:a7:04:d1:db:8f:64:63:c8:43:e7: 13:c4:fc:11:b3:24:60:9f:be:66:93:a8:87:c0:99:82:fe:d6: 18:b5:19:10:69:ff:14:20:d5:32:f2:79:a7:2c:1f:54:a4:83: 96:7f:cf:cc:a6:ab:9f:d3:8e:6e:d1:e0:e3:76:8f:52:94:02: 71:03:e6:a9:f8:dd:bd:fc:5d:93:91:0e:ec:99:a3:e8:b7:52: 95:02:98:7a:24:1e:24:c2:89:6d:ea:3f:9d:2a:50:3e:2f:26: 99:29:09:90:99:7d:32:18:0f:7d:9d:f6:0b:19:78:7f:7b:32: 29:7d:2d:41:51:c7:19:b0:88:f1:29:13:85:3c:1d:c6:4a:d2: f7:d2:b6:0a:90:82:cf:ce:2c:2a:87:9f:21:78:d0:3d:e9:09: 40:fc:71:65:c9:50:3d:81:c5:08:66:27:1c:e2:9b:f6:32:8b: fc:74:a4:52:1a:ba:0f:d0:b1:db:dc:c9:f8:84:11:a2:b0:47: 69:3b:3d:55:2d:91:f7:52:d3:ae:ab:e5:d5:2a:c4:c0:93:6b: 71:3b:fa:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW644QmoQdrTTvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmMGI0ODQtOTRkMi00OTBmLThhNjgtZDc1ODhkMWYz NjgzMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MGIyZDMzYjctMGU1Mi00NWM1LWIzYTUtOTkzZTE2Mzk3YmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF6Hn0O4ew3j2AgXCGtDXly50u6bpXPE0HFP OaIJNk9ZkQHt7i2S7rrSpgTbi0yY+hAt1vJ0Fnvs9+byycE9mjfcVFXEE2zQzMwB ZhgGJYW3warjvVop93BzeWe/Lu19wuu7Uitx9mbExi//QqbHzFm1yZLIZIL017e1 JW3kpqjTkmJX+PybJp0kCzKp0rP9J5SUBQpyPZgh9OrkdLsvyR83j1lZOVAtVQOv FGTjnJFK1MHKhEA3ww3FGZW7bxMtKFi8wT7ZfIog/eg+U9nu72zYN0HKI6S57Mlj Am4zos3jtMI/zKe9fwbcLKOO5wsZXSoQNv6I4D+3/p1amWzx1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGcZZA1v283DlseYvbnojpFtsAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YmYw YjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4OGQxZjM2ODMvODkwNzU2YzgtODliYy0z ODYwLTlkN2UtNmU1MjE4NTIyYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmJmMGI0ODQtOTRkMi00OTBmLThh NjgtZDc1ODhkMWYzNjgzLzZiZjBiNDg0LTk0ZDItNDkwZi04YTY4LWQ3NTg4ZDFm MzY4My5jcmwwHwYDVR0jBBgwFoAULH8ekiqWuUwTXutcOEV3l0rGXlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YmYwYjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4 OGQxZjM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYHvkWIU7pA1aFuE+pJgoxriIpDpEugqF5BL46CcQyd2tRRHOA6hQjI PdZupwTR249kY8hD5xPE/BGzJGCfvmaTqIfAmYL+1hi1GRBp/xQg1TLyeacsH1Sk g5Z/z8ymq5/Tjm7R4ON2j1KUAnED5qn43b38XZORDuyZo+i3UpUCmHokHiTCiW3q P50qUD4vJpkpCZCZfTIYD32d9gsZeH97Mil9LUFRxxmwiPEpE4U8HcZK0vfStgqQ gs/OLCqHnyF40D3pCUD8cWXJUD2BxQhmJxzim/Yyi/x0pFIaug/QsdvcyfiEEaKw R2k7PVUtkfdS066r5dUqxMCTa3E7+k8= -----END CERTIFICATE-----Generated at Wed Aug 6 12:39:33 2025 by rpki-client