$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13148eef-4aa6-3c89-b7e5-4a05427f013f.roa File: 13148eef-4aa6-3c89-b7e5-4a05427f013f.roa (raw, json) Hash identifier: rxGX2awW7YvKL5eW5CZTqNxwFGcaLvEsLn8bf7TDMe4= Subject key identifier: 1B:B6:6C:C0:C7:45:9E:68:03:07:E1:D9:F7:B3:11:56:1C:19:9E:9D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D02AC0F99E60FDCA3C00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13148eef-4aa6-3c89-b7e5-4a05427f013f.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 208.76.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d0:2a:c0:f9:9e:60:fd:ca:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=5fd759ab-7eb6-4604-acaa-13c43f16b30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:ed:42:14:94:db:ef:99:ac:c9:54:cb:08: 38:da:ec:ca:b3:bd:e6:37:73:1f:00:a7:fd:a4:8d: 24:cf:8b:b4:e3:4d:02:36:9b:73:97:71:b2:4b:12: 4c:92:31:ad:db:83:83:5d:5a:2e:d7:00:d4:a5:f0: af:ac:18:b4:4a:05:ff:be:7b:de:60:37:8d:1b:2f: e2:ef:4f:00:84:e3:3e:08:a2:f5:20:f8:e3:29:a7: e1:66:a0:97:c3:5b:c6:2c:c2:ed:38:2b:8a:d1:11: 8c:49:54:f1:1e:ca:9c:f5:b2:41:b6:f9:98:9d:ff: ca:f7:5f:e7:2c:6d:35:a0:d6:2b:2a:a2:bf:7b:c0: 73:53:cb:28:0b:83:a7:05:c5:dc:42:65:03:e1:f4: ca:2e:0e:13:17:53:92:9d:0d:ef:26:86:86:79:eb: 2a:07:5f:26:b4:ac:12:aa:3e:24:00:67:a3:19:bd: 0a:9c:ee:6f:10:45:a7:cb:72:8f:95:fb:9f:9e:8b: 19:93:1f:dc:46:07:1e:33:5f:22:99:75:bc:1b:91: d4:bd:24:1e:81:ce:60:d0:e6:c0:ff:b7:57:60:db: 31:72:d2:b8:97:6e:6a:81:f0:33:83:d2:16:77:d0: 4b:64:db:24:b2:4c:b3:73:95:d3:d0:12:8e:e9:28: 1e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B6:6C:C0:C7:45:9E:68:03:07:E1:D9:F7:B3:11:56:1C:19:9E:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13148eef-4aa6-3c89-b7e5-4a05427f013f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.76.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8b:38:dd:f1:b2:ca:b1:5d:4c:55:41:d8:8e:54:48:c9:ab: 3c:8b:9e:97:4b:af:fa:36:af:e0:fe:36:af:46:81:53:b5:f8: 0d:5f:36:10:50:53:0f:a0:88:7d:a3:86:b7:a3:75:f5:b3:29: 10:ea:b9:b9:70:e1:87:be:05:e1:f2:d3:d6:9d:2f:bb:30:ef: de:77:25:e0:ff:40:84:22:e5:f9:4a:02:c4:13:f9:4b:a7:c4: e7:66:8f:1a:b3:55:26:83:7b:f2:64:72:33:a8:3e:71:e8:f9: e1:ee:d4:b3:7f:c6:f9:15:26:ad:33:bd:65:c7:27:2b:3f:ea: 12:dc:d6:94:dd:ee:47:da:3f:73:f9:af:34:49:f7:df:3e:78: 5f:37:c7:c5:6e:3e:1e:30:2b:f3:60:24:a7:52:96:5f:8d:66: 25:55:6a:bc:09:1f:02:d2:12:73:35:b6:03:24:44:34:9d:32: e8:5c:bb:a4:ae:c9:fe:a1:58:3f:3a:58:50:c6:53:dd:72:61: d7:7f:14:bc:27:c6:09:01:70:09:f4:68:5d:1d:64:fd:67:a5: 54:a8:23:0e:31:59:bb:8b:45:87:9f:c8:d9:7f:61:77:6f:eb: 82:69:a9:52:c3:9c:74:10:d5:d8:9f:10:f7:63:53:51:89:68: bc:00:df:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtAqwPmeYP3KPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NWZkNzU5YWItN2ViNi00NjA0LWFjYWEtMTNjNDNmMTZiMzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYntQhSU2++ZrMlUywg42uzKs73mN3MfAKf9 pI0kz4u0400CNptzl3GySxJMkjGt24ODXVou1wDUpfCvrBi0SgX/vnveYDeNGy/i 708AhOM+CKL1IPjjKafhZqCXw1vGLMLtOCuK0RGMSVTxHsqc9bJBtvmYnf/K91/n LG01oNYrKqK/e8BzU8soC4OnBcXcQmUD4fTKLg4TF1OSnQ3vJoaGeesqB18mtKwS qj4kAGejGb0KnO5vEEWny3KPlfufnosZkx/cRgceM18imXW8G5HUvSQegc5g0ObA /7dXYNsxctK4l25qgfAzg9IWd9BLZNskskyzc5XT0BKO6Sge6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBu2bMDHRZ5oAwfh2fezEVYcGZ6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTMxNDhlZWYtNGFhNi0z Yzg5LWI3ZTUtNGEwNTQyN2YwMTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaLON3xssqxXUxVQdiOVEjJqzyLnpdLr/o2r+D+Nq9GgVO1+A1fNhBQ Uw+giH2jhrejdfWzKRDqublw4Ye+BeHy09adL7sw7953JeD/QIQi5flKAsQT+Uun xOdmjxqzVSaDe/JkcjOoPnHo+eHu1LN/xvkVJq0zvWXHJys/6hLc1pTd7kfaP3P5 rzRJ998+eF83x8VuPh4wK/NgJKdSll+NZiVVarwJHwLSEnM1tgMkRDSdMuhcu6Su yf6hWD86WFDGU91yYdd/FLwnxgkBcAn0aF0dZP1npVSoIw4xWbuLRYefyNl/YXdv 64JpqVLDnHQQ1difEPdjU1GJaLwA3+E= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:39 2025 by rpki-client