$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa File: 047692f9-4c45-3534-9455-58a8a7660d58.roa (raw, json) Hash identifier: XwpCrJpgf1Y1+kyCz6XpZDtgApDjn4o6Eima13NZfe4= Subject key identifier: 15:2D:29:4D:19:F8:91:51:02:EE:F0:56:1B:AE:2F:74:50:70:4C:E7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE147012A17A7C9F812F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 208.76.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:14:70:12:a1:7a:7c:9f:81:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c49dddfa-8e33-40cf-b971-3ed8e8c5ce41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d1:03:02:83:9e:55:b3:c2:9c:82:f7:09:3b: 65:e1:48:95:c1:ca:3c:e9:28:f2:89:4a:8c:3e:01: 68:02:db:d1:72:57:ea:f6:45:fc:76:5e:d0:2e:a3: fa:d7:d2:64:1f:a9:c9:49:e0:06:92:5f:21:35:f4: 56:47:f4:26:f9:41:09:c6:01:84:92:b9:5c:a4:83: 69:fd:fc:35:eb:a7:3f:3c:d9:3a:1a:84:ea:1c:02: c4:6f:23:cc:0b:39:0f:cb:4d:23:22:c1:f8:76:57: e3:5f:42:cd:1c:11:be:5b:e1:cb:72:8b:75:20:d3: 01:78:69:c5:31:dd:b3:c8:b3:fd:30:c1:8d:37:bf: 5b:a2:7e:63:6c:87:2e:b1:2d:57:1b:02:32:49:50: 13:b3:01:24:48:38:ed:65:85:9e:2f:78:2e:45:0f: 77:2b:c9:b9:5e:7f:08:2e:5a:7b:7d:86:7a:5f:a4: 1f:a1:d7:13:04:26:e9:b5:e0:4a:9b:81:d3:7d:c4: 00:3a:13:24:4f:93:c3:b0:81:6b:8d:de:65:09:dc: 9f:22:29:0a:b2:0c:09:c6:48:ab:b6:86:5c:12:f6: 5b:e2:6e:91:b3:67:46:24:ab:bf:e8:67:e4:42:e7: 57:12:0c:29:97:d8:eb:18:b8:bc:77:b2:5e:e6:2b: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2D:29:4D:19:F8:91:51:02:EE:F0:56:1B:AE:2F:74:50:70:4C:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c9:3b:a2:86:84:4c:84:23:01:21:bb:91:67:c3:f0:7e:fb: 5a:65:a2:69:d8:b1:c0:5c:f0:99:13:db:8e:0a:01:8e:46:91: 7f:c7:55:f9:f3:71:9c:67:aa:fe:81:70:30:ff:17:1c:82:2f: 30:a1:a2:04:07:aa:0c:cd:16:58:ac:fa:37:fc:a9:22:a5:a8: 48:90:13:dc:e2:12:55:80:40:76:8d:4b:2e:a1:06:c2:d3:5e: 1b:fa:06:bc:54:7a:de:da:93:2b:ed:ed:8b:dd:33:19:c5:eb: 71:78:6a:4d:76:76:33:73:0e:ce:f9:84:25:1c:3a:1a:2c:28: ee:c8:58:1c:af:36:99:1e:e7:13:e6:85:9f:65:60:85:41:b9: 5f:68:0a:55:72:3b:53:ed:09:f8:89:41:65:f9:d7:7a:1d:62: 19:11:87:03:b3:13:b2:2f:82:4c:02:78:af:e8:75:6f:ef:12: 40:09:9b:a6:9d:72:0f:2a:16:9e:b7:6c:9c:99:88:87:0b:43: 9a:3e:57:db:81:d8:a1:cd:53:b5:e2:f1:43:dc:32:c2:28:43: a0:50:64:d8:e5:fe:ac:3a:ee:f1:d3:4b:d7:78:e2:4a:c8:f5: 55:ae:eb:a5:6d:ed:ce:53:1d:cb:e5:00:cb:73:75:01:ca:c2: c7:7e:0b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhRwEqF6fJ+BLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzQ5ZGRkZmEtOGUzMy00MGNmLWI5NzEtM2VkOGU4YzVjZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9EDAoOeVbPCnIL3CTtl4UiVwco86SjyiUqM PgFoAtvRclfq9kX8dl7QLqP619JkH6nJSeAGkl8hNfRWR/Qm+UEJxgGEkrlcpINp /fw166c/PNk6GoTqHALEbyPMCzkPy00jIsH4dlfjX0LNHBG+W+HLcot1INMBeGnF Md2zyLP9MMGNN79bon5jbIcusS1XGwIySVATswEkSDjtZYWeL3guRQ93K8m5Xn8I Llp7fYZ6X6QfodcTBCbpteBKm4HTfcQAOhMkT5PDsIFrjd5lCdyfIikKsgwJxkir toZcEvZb4m6Rs2dGJKu/6GfkQudXEgwpl9jrGLi8d7Je5itW6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUtKU0Z+JFRAu7wVhuuL3RQcEznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDQ3NjkyZjktNGM0NS0z NTM0LTk0NTUtNThhOGE3NjYwZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTJO6KGhEyEIwEhu5Fnw/B++1plomnYscBc8JkT244KAY5GkX/HVfnz cZxnqv6BcDD/FxyCLzChogQHqgzNFlis+jf8qSKlqEiQE9ziElWAQHaNSy6hBsLT Xhv6BrxUet7akyvt7YvdMxnF63F4ak12djNzDs75hCUcOhosKO7IWByvNpke5xPm hZ9lYIVBuV9oClVyO1PtCfiJQWX513odYhkRhwOzE7IvgkwCeK/odW/vEkAJm6ad cg8qFp63bJyZiIcLQ5o+V9uB2KHNU7Xi8UPcMsIoQ6BQZNjl/qw67vHTS9d44krI 9VWu66Vt7c5THcvlAMtzdQHKwsd+C6M= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:20 2025 by rpki-client