$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d87e36f-8b7d-3ba6-80db-6624533414f3.roa File: 7d87e36f-8b7d-3ba6-80db-6624533414f3.roa (raw, json) Hash identifier: 1EQhNCVVitY3VHPCi9bJAk2H2H6DDwCp3kAItA3dTPE= Subject key identifier: E6:E3:0F:1B:1B:A1:6C:2D:AA:FD:07:14:C5:64:AF:ED:50:58:ED:66 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D32AE6AFF939772DA100 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d87e36f-8b7d-3ba6-80db-6624533414f3.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 208.53.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d3:2a:e6:af:f9:39:77:2d:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=cf9f7c70-2298-4353-bd54-61a76b990566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c7:1b:72:ea:28:d4:fe:ee:00:66:6f:64:bb: ac:ac:73:02:be:e9:5b:f8:91:60:35:60:bb:f0:2d: 05:be:bd:a3:11:53:7e:d9:df:73:26:19:62:de:cc: 22:23:cc:06:2b:c6:7c:65:38:91:d3:14:d4:ee:ea: d2:db:6e:4e:1b:1a:82:5b:03:7d:39:69:97:cc:9f: de:fb:c6:ed:71:a6:ff:61:7d:47:b1:ea:5e:fa:2f: 24:4d:0a:68:88:4a:29:4b:ee:ad:ea:df:ef:6b:49: 1d:c4:1a:da:c2:1f:9c:d8:ce:bd:c2:84:67:a9:83: be:48:af:dd:55:af:b6:68:96:4b:1b:44:14:28:ad: 1f:59:b5:6d:dc:88:03:5b:c6:19:61:78:05:ca:c9: 6b:69:5e:86:e6:52:f0:d2:8e:57:1b:d9:6a:f2:55: a6:bb:fa:06:ec:27:56:a4:d4:ee:0e:5a:a7:cf:55: b7:7e:dc:8f:7b:65:36:8d:78:dd:01:fb:64:f2:3d: 35:01:8f:1e:27:a4:bc:3d:8a:2c:0a:9d:2e:86:d3: cf:2b:30:ff:cf:f1:06:28:26:26:f4:f5:54:d6:72: 9f:d1:e1:88:42:13:62:1d:44:23:90:f0:16:df:b1: be:5e:cf:c9:89:13:ca:f5:b6:e1:09:eb:73:1b:3d: e6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E3:0F:1B:1B:A1:6C:2D:AA:FD:07:14:C5:64:AF:ED:50:58:ED:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d87e36f-8b7d-3ba6-80db-6624533414f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.53.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d4:d9:2b:c0:05:e8:3b:61:51:9d:17:9a:65:eb:63:e5:46: 94:74:46:26:70:c3:dd:e8:09:6c:83:53:e8:99:fd:d5:dd:ea: 0c:6c:de:5e:1a:71:32:81:9b:a9:a6:7d:65:7b:5c:f3:a5:b0: c7:ad:93:16:2f:47:5c:9a:9f:11:99:d7:43:d8:71:9d:4e:e2: f6:8c:4f:ef:54:c2:2d:de:15:8b:78:65:48:cd:4f:e2:a4:aa: 67:e1:70:fc:b2:35:83:b7:b8:6b:4c:2f:99:8f:13:d0:74:f8: 89:99:df:77:56:a6:b2:23:31:0d:8c:a0:f7:73:71:31:11:d2: d7:cf:08:9e:bb:cc:cd:c8:17:86:dd:d6:ba:14:e0:39:c2:02: 9a:eb:1f:77:f6:c8:ad:84:c6:55:97:f2:9c:39:f0:1e:69:f7: 9e:87:94:a7:02:f8:73:cc:66:df:0e:e1:b9:e3:87:11:dc:18: 5a:45:bc:fe:51:f3:f0:34:2d:fe:8d:30:ce:2e:93:60:41:93: dd:32:ce:e1:40:7b:95:31:2a:a9:60:ae:c0:ce:63:7a:3f:a6: 80:13:47:34:3c:75:30:c9:1e:91:0c:63:6d:65:ea:73:91:de: 8c:76:d9:53:86:c2:f5:f0:48:23:f3:f4:ee:59:fb:08:8f:27: 8a:c1:1b:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtMq5q/5OXctoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk Y2Y5ZjdjNzAtMjI5OC00MzUzLWJkNTQtNjFhNzZiOTkwNTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgccbcuoo1P7uAGZvZLusrHMCvulb+JFgNWC7 8C0Fvr2jEVN+2d9zJhli3swiI8wGK8Z8ZTiR0xTU7urS225OGxqCWwN9OWmXzJ/e +8btcab/YX1Hsepe+i8kTQpoiEopS+6t6t/va0kdxBrawh+c2M69woRnqYO+SK/d Va+2aJZLG0QUKK0fWbVt3IgDW8YZYXgFyslraV6G5lLw0o5XG9lq8lWmu/oG7CdW pNTuDlqnz1W3ftyPe2U2jXjdAftk8j01AY8eJ6S8PYosCp0uhtPPKzD/z/EGKCYm 9PVU1nKf0eGIQhNiHUQjkPAW37G+Xs/JiRPK9bbhCetzGz3mNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObjDxsboWwtqv0HFMVkr+1QWO1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2Q4N2UzNmYtOGI3ZC0z YmE2LTgwZGItNjYyNDUzMzQxNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0DVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzU2SvABeg7YVGdF5pl62PlRpR0RiZww93oCWyDU+iZ/dXd6gxs3l4a cTKBm6mmfWV7XPOlsMetkxYvR1yanxGZ10PYcZ1O4vaMT+9Uwi3eFYt4ZUjNT+Kk qmfhcPyyNYO3uGtML5mPE9B0+ImZ33dWprIjMQ2MoPdzcTER0tfPCJ67zM3IF4bd 1roU4DnCAprrH3f2yK2ExlWX8pw58B5p956HlKcC+HPMZt8O4bnjhxHcGFpFvP5R 8/A0Lf6NMM4uk2BBk90yzuFAe5UxKqlgrsDOY3o/poATRzQ8dTDJHpEMY21l6nOR 3ox22VOGwvXwSCPz9O5Z+wiPJ4rBG0I= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:07 2025 by rpki-client