$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/62543e6b-079e-3a0f-afa0-639713811644.roa File: 62543e6b-079e-3a0f-afa0-639713811644.roa (raw, json) Hash identifier: BkA0DlBrnznKpCjYxr1cm/zdgGZa7Io2TbkYUYSTWFI= Subject key identifier: DF:54:B1:0E:AD:EB:B9:34:9A:C7:64:EE:F0:E0:FA:64:CB:E6:E0:93 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D34D93A9DD0A8AB746C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/62543e6b-079e-3a0f-afa0-639713811644.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 208.76.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d3:4d:93:a9:dd:0a:8a:b7:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=1b0d50c3-253e-4332-9db4-0eec5333afb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:d1:db:c9:fc:5d:25:de:9b:76:8a:e2:30: e9:a0:a2:a2:fe:41:47:73:c5:2f:1d:76:df:f4:0a: aa:c9:e1:63:55:ea:fe:9d:85:f7:6c:d8:08:46:1a: 78:8a:6b:11:cb:6b:f5:0e:0f:1f:cd:e7:cc:4d:06: 3d:d2:ba:3d:a9:c6:2e:29:22:f8:a7:ee:50:ff:76: 34:77:1f:3e:68:b7:d3:ba:6a:68:1c:60:bf:c1:c6: b6:9e:b1:eb:28:90:4d:93:82:8b:b9:45:37:9b:12: 3a:b3:11:e4:f2:53:9a:a3:9f:79:22:fe:ef:28:b5: a5:9d:74:08:c3:17:14:db:84:c7:50:e3:f7:39:c2: b1:a8:98:3a:9b:41:fd:3f:39:ce:72:ea:8a:9c:1f: ec:23:db:2c:a9:92:ac:00:dd:51:16:12:a5:5b:50: 77:7d:1c:ad:91:4b:c8:c1:c7:83:9b:cd:55:23:23: 53:b7:2c:a0:50:36:b3:3f:3a:fd:b1:1f:b1:18:39: 12:da:0e:2a:5a:60:25:5e:fa:34:32:3d:0b:e6:ad: 11:28:dd:bf:ec:08:52:a9:71:92:97:ab:64:33:3b: d2:e0:e6:67:9a:50:b9:21:32:5d:5c:77:9b:5f:fd: bf:5f:48:aa:f7:67:ef:ae:4f:fc:95:c1:6a:d7:46: 96:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:54:B1:0E:AD:EB:B9:34:9A:C7:64:EE:F0:E0:FA:64:CB:E6:E0:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/62543e6b-079e-3a0f-afa0-639713811644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.76.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e1:c4:ed:12:59:d4:dc:d8:eb:46:1f:f6:f2:a4:e7:34:91: 39:86:80:5b:c5:5d:ec:b2:77:68:0f:3f:78:3e:e9:8f:dc:4b: 68:8b:ca:f7:cf:d7:0b:e7:17:54:c6:0e:0f:2e:4d:1e:2e:12: 44:b6:23:f1:74:21:28:5a:15:ba:17:7e:50:91:24:34:4c:18: b0:56:94:68:b8:e3:6a:70:24:9d:40:96:2e:a4:8c:34:4b:3a: f0:6b:99:87:12:7c:28:ba:25:ee:de:1a:4c:22:a1:1c:00:49: 18:6e:4c:82:33:a4:64:16:58:ae:9e:6d:83:02:a3:ef:e2:77: 01:13:a6:2b:c8:b4:1a:26:b3:58:fd:fd:eb:03:7c:24:4b:98: bf:bf:3e:72:09:08:de:4c:1e:5b:7b:36:4c:02:10:8c:4c:5a: 08:9a:5f:cb:ee:a2:44:96:86:07:d6:15:4c:19:d4:0d:5c:81: 7c:2e:8b:03:26:ac:17:88:da:4a:4b:cd:66:0b:00:4a:4a:ad: 5c:84:d0:8f:77:b1:16:d9:cd:50:7e:34:09:a4:b4:c2:38:2c: 1a:37:b3:42:a0:5b:c4:87:0e:89:5a:7e:9f:6e:aa:e7:a3:60: 19:09:88:a7:a2:d5:ad:d9:0c:3b:4d:6e:fd:67:a3:39:01:8a: 00:aa:45:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtNNk6ndCoq3RsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MWIwZDUwYzMtMjUzZS00MzMyLTlkYjQtMGVlYzUzMzNhZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskPR28n8XSXem3aK4jDpoKKi/kFHc8UvHXbf 9AqqyeFjVer+nYX3bNgIRhp4imsRy2v1Dg8fzefMTQY90ro9qcYuKSL4p+5Q/3Y0 dx8+aLfTumpoHGC/wca2nrHrKJBNk4KLuUU3mxI6sxHk8lOao595Iv7vKLWlnXQI wxcU24THUOP3OcKxqJg6m0H9PznOcuqKnB/sI9ssqZKsAN1RFhKlW1B3fRytkUvI wceDm81VIyNTtyygUDazPzr9sR+xGDkS2g4qWmAlXvo0Mj0L5q0RKN2/7AhSqXGS l6tkMzvS4OZnmlC5ITJdXHebX/2/X0iq92fvrk/8lcFq10aWOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9UsQ6t67k0msdk7vDg+mTL5uCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNjI1NDNlNmItMDc5ZS0z YTBmLWFmYTAtNjM5NzEzODExNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILhxO0SWdTc2OtGH/bypOc0kTmGgFvFXeyyd2gPP3g+6Y/cS2iLyvfP 1wvnF1TGDg8uTR4uEkS2I/F0IShaFboXflCRJDRMGLBWlGi442pwJJ1Ali6kjDRL OvBrmYcSfCi6Je7eGkwioRwASRhuTIIzpGQWWK6ebYMCo+/idwETpivItBoms1j9 /esDfCRLmL+/PnIJCN5MHlt7NkwCEIxMWgiaX8vuokSWhgfWFUwZ1A1cgXwuiwMm rBeI2kpLzWYLAEpKrVyE0I93sRbZzVB+NAmktMI4LBo3s0KgW8SHDolafp9uquej YBkJiKei1a3ZDDtNbv1nozkBigCqRf0= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:35 2025 by rpki-client