$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa File: 8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa (raw, json) Hash identifier: O5hlWd0dEniX1g64t4eBLSlBgBUjlzx+izzcRJReOTE= Subject key identifier: B9:3C:21:E2:F9:99:E3:06:00:B4:E3:C0:8E:7C:BD:7C:1F:B1:2E:26 Certificate issuer: /CN=e608a4ff-c170-41ea-a454-bf0ecd40f83d Certificate serial: 010D0C9F4328584B0CDC10B8CF82530D22E70600 Authority key identifier: 65:BB:53:74:68:07:8D:59:FD:64:C5:0A:81:82:B9:31:28:15:3A:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 11700 IP address blocks: 205.207.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:10:b8:cf:82:53:0d:22:e7:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e608a4ff-c170-41ea-a454-bf0ecd40f83d Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=f5a8b7e6-671a-4a16-9869-ad72a4db0065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8c:ba:21:a1:9c:fd:cb:90:91:33:f2:66:7b: a1:7c:c7:63:3f:05:81:bf:d0:a9:8b:7e:a8:1c:d6: 1d:c6:76:04:c8:64:c4:88:1b:f5:0e:fb:06:45:8c: d4:7c:a6:10:ba:87:06:e0:d8:86:fe:2d:f1:46:25: 97:a8:77:ea:a6:83:12:65:dc:50:67:7b:e9:75:4f: 1e:01:6a:21:f7:7d:2a:37:0d:fc:6f:4f:f2:fb:39: 58:86:78:42:18:e5:d9:91:b1:0c:e0:20:12:84:ae: d8:e5:46:c5:bd:c8:da:8b:a2:a1:ce:19:7a:ae:5e: 19:39:90:02:3d:be:4f:31:f8:a0:da:47:28:f2:f0: d2:dd:95:f6:09:19:ac:bb:66:0d:63:7b:ee:4f:83: 3e:73:dc:3e:42:8d:0d:1e:17:54:b2:54:af:8a:b8: 52:49:00:0d:dc:c9:ef:48:ac:89:6d:08:a4:b4:bf: 2a:d4:ae:c5:bb:f8:10:66:89:39:be:19:72:1e:65: 54:b9:72:fb:25:08:3c:af:22:06:a0:3f:14:33:07: e3:aa:1f:76:f9:e2:e2:77:57:8e:aa:80:ef:da:c6: a4:ff:c6:d3:e6:ce:f8:d7:e7:eb:45:d0:41:18:2d: df:6b:44:33:0e:df:a1:b4:0e:16:ef:28:ec:ea:d5: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3C:21:E2:F9:99:E3:06:00:B4:E3:C0:8E:7C:BD:7C:1F:B1:2E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.crl X509v3 Authority Key Identifier: keyid:65:BB:53:74:68:07:8D:59:FD:64:C5:0A:81:82:B9:31:28:15:3A:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer sbgp-ipAddrBlock: critical IPv4: 205.207.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:13:05:81:33:d2:79:7d:03:aa:7c:84:89:c5:fe:77:55:3f: bf:6d:19:86:4a:79:18:e2:32:5e:20:eb:c2:2a:66:1c:77:c6: 35:5a:7a:f5:56:eb:b8:d8:1c:5f:cb:e7:dd:7e:00:60:10:74: 2e:62:bc:84:53:ca:09:f7:e7:7d:e9:73:5e:f0:5f:a1:4a:77: ce:70:92:d3:ff:f6:bb:2f:ee:5d:fa:e1:cf:21:8d:06:1e:4d: a6:89:9a:55:8f:20:c8:a0:ea:e0:3c:6a:57:87:38:bb:72:43: 9f:67:54:10:3e:4a:97:6c:28:10:d4:e7:bf:bf:30:6c:f5:0f: 28:2b:2a:37:41:19:b8:45:77:28:3a:01:d3:0d:c0:17:23:97: dc:42:92:07:a1:49:fe:c2:0c:f4:9e:6b:3d:27:36:ca:cc:28: a9:5b:c3:1a:e9:8c:bb:d3:d7:4e:ef:8b:04:5a:12:66:d5:e3: 7e:c3:0f:67:eb:7b:f8:4a:53:60:7e:4c:11:63:dd:6d:26:ba: 8b:c1:99:7f:9f:f7:38:ce:4e:d9:15:d5:5b:d1:43:3c:20:c6: 76:70:f5:b0:3b:57:e2:bf:af:17:2e:ba:43:e9:f6:30:69:17: c4:86:f0:c4:b8:5d:37:25:a1:1b:33:5e:a8:a9:13:6a:9d:2d: d8:00:81:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BC4z4JTDSLnBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwOGE0ZmYtYzE3MC00MWVhLWE0NTQtYmYwZWNkNDBm ODNkMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZjVhOGI3ZTYtNjcxYS00YTE2LTk4NjktYWQ3MmE0ZGIwMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yy6IaGc/cuQkTPyZnuhfMdjPwWBv9Cpi36o HNYdxnYEyGTEiBv1DvsGRYzUfKYQuocG4NiG/i3xRiWXqHfqpoMSZdxQZ3vpdU8e AWoh930qNw38b0/y+zlYhnhCGOXZkbEM4CAShK7Y5UbFvcjai6Khzhl6rl4ZOZAC Pb5PMfig2kco8vDS3ZX2CRmsu2YNY3vuT4M+c9w+Qo0NHhdUslSvirhSSQAN3Mnv SKyJbQiktL8q1K7Fu/gQZok5vhlyHmVUuXL7JQg8ryIGoD8UMwfjqh92+eLid1eO qoDv2sak/8bT5s741+frRdBBGC3fa0QzDt+htA4W7yjs6tWvHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk8IeL5meMGALTjwI58vXwfsS4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNjA4 YTRmZi1jMTcwLTQxZWEtYTQ1NC1iZjBlY2Q0MGY4M2QvOGI3NmJiZmQtM2ZjYi0z NTAyLWI2ZmUtYzEwODBjZjc4MDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTYwOGE0ZmYtYzE3MC00MWVhLWE0 NTQtYmYwZWNkNDBmODNkL2U2MDhhNGZmLWMxNzAtNDFlYS1hNDU0LWJmMGVjZDQw ZjgzZC5jcmwwHwYDVR0jBBgwFoAUZbtTdGgHjVn9ZMUKgYK5MSgVOicwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNjA4YTRmZi1jMTcwLTQxZWEtYTQ1NC1iZjBl Y2Q0MGY4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzc/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABITBYEz0nl9A6p8hInF/ndVP79tGYZKeRjiMl4g68IqZhx3xjVaevVW 67jYHF/L591+AGAQdC5ivIRTygn3533pc17wX6FKd85wktP/9rsv7l364c8hjQYe TaaJmlWPIMig6uA8aleHOLtyQ59nVBA+SpdsKBDU57+/MGz1DygrKjdBGbhFdyg6 AdMNwBcjl9xCkgehSf7CDPSeaz0nNsrMKKlbwxrpjLvT107viwRaEmbV437DD2fr e/hKU2B+TBFj3W0muovBmX+f9zjOTtkV1VvRQzwgxnZw9bA7V+K/rxcuukPp9jBp F8SG8MS4XTcloRszXqipE2qdLdgAgWA= -----END CERTIFICATE-----Generated at Fri Oct 10 23:31:39 2025 by rpki-client