$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa File: 10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa (raw, json) Hash identifier: 7hJTkZzbMztMFL12UuX4Jc2afRHPdvzFJ/74fC59CMk= Subject key identifier: 1D:72:8A:10:B7:06:F5:7F:02:57:46:74:5C:70:BB:2A:2B:26:63:89 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B663208B28685AE3099024F10 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396982 IP address blocks: 208.76.71.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:08:b2:86:85:ae:30:99:02:4f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=2bc5b93f-eccf-4f6d-b202-26db669bba10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:45:2b:53:3a:f7:29:85:90:04:c5:92:36:de: ac:82:e2:bc:ae:27:5f:34:ae:8b:2d:3b:11:46:c5: 4b:d9:57:43:54:92:2f:1e:c1:e7:83:3d:e0:5d:59: 42:fe:c5:e0:a0:15:d8:9b:99:5f:32:16:1e:e8:9d: a5:a2:68:b8:3d:c3:f0:c0:fe:7e:08:44:46:26:dc: 39:2f:6f:8f:aa:99:15:74:dd:c6:b6:45:bf:dc:f5: 09:a4:a4:dd:81:8c:a9:8b:1b:19:58:c9:00:bc:6a: cb:89:66:18:4e:77:d1:6e:19:ec:04:b0:fa:d0:d3: 88:be:2b:a7:ad:cd:ba:39:85:e4:85:10:99:25:3e: 35:f2:98:2e:b9:19:41:22:3c:50:b3:c3:52:af:55: 4c:c5:33:2d:da:6e:c7:fb:19:48:7a:34:4a:2a:23: b1:c7:6d:02:4e:f0:ca:f4:c8:b1:3d:a5:dc:71:eb: f2:32:b8:64:09:68:b8:20:8b:d4:88:0b:fc:48:e5: f5:3d:05:86:45:5d:30:3a:1d:c1:7c:df:fe:c8:15: 2c:f2:61:f7:24:0c:36:a8:2b:4a:91:65:87:83:95: cc:d3:ef:7c:0d:ee:d6:6e:68:ad:71:37:ab:9b:d7: ca:b6:28:32:83:0c:df:4f:b7:29:52:ae:8f:bc:82: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:72:8A:10:B7:06:F5:7F:02:57:46:74:5C:70:BB:2A:2B:26:63:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.128/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:fd:68:17:3b:85:5d:06:0d:5c:b3:0c:2c:55:06:60:1d:0c: b6:6c:25:64:51:ad:fc:d2:92:6d:c4:53:54:28:d7:31:94:23: 93:b5:82:a3:20:f2:4f:70:1a:8e:59:22:71:de:c2:cc:66:f1: 13:ee:04:32:1a:b2:e9:08:db:28:80:49:11:6e:6f:61:23:d5: 1d:17:ff:21:d2:e7:ce:6a:f4:56:e9:8b:e9:ba:27:be:96:79: d1:52:ad:2c:e2:bd:33:27:44:94:90:18:f9:cd:1c:5c:8e:90: d8:fe:0e:1b:88:2f:39:91:62:91:6f:fa:1b:b4:ed:73:d8:7b: 14:27:5b:ef:22:68:c0:d6:02:9a:6c:b6:29:c2:e4:db:b2:0c: 20:04:ff:c9:08:56:02:2b:6b:7a:a1:47:a1:e7:59:38:af:e0: 15:4e:ba:ba:a1:bc:a3:4e:8b:e5:d2:07:b9:5d:6c:be:83:96: 41:63:46:08:6d:1f:a7:83:e8:c9:78:e5:57:78:e6:fc:cb:ab: 46:3b:f7:95:d2:62:66:51:d6:e9:0f:fa:b3:e5:ab:7b:c2:88: 5e:bc:0b:f5:20:f1:00:9e:9b:fe:d7:c1:61:56:3c:b0:90:46: 72:d0:87:3a:1f:b1:cb:cb:52:47:56:43:0d:7a:b7:55:1a:fc: ec:30:a8:8f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtmMgiyhoWuMJkCTxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MmJjNWI5M2YtZWNjZi00ZjZkLWIyMDItMjZkYjY2OWJiYTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkUrUzr3KYWQBMWSNt6sguK8ridfNK6LLTsR RsVL2VdDVJIvHsHngz3gXVlC/sXgoBXYm5lfMhYe6J2lomi4PcPwwP5+CERGJtw5 L2+PqpkVdN3GtkW/3PUJpKTdgYypixsZWMkAvGrLiWYYTnfRbhnsBLD60NOIviun rc26OYXkhRCZJT418pguuRlBIjxQs8NSr1VMxTMt2m7H+xlIejRKKiOxx20CTvDK 9MixPaXccevyMrhkCWi4IIvUiAv8SOX1PQWGRV0wOh3BfN/+yBUs8mH3JAw2qCtK kWWHg5XM0+98De7WbmitcTerm9fKtigygwzfT7cpUq6PvIJPtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB1yihC3BvV/AldGdFxwuyorJmOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTBiODczYWItYWFiMy0z ZTc4LWJjNjMtZjIxZGEwZTVlZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCX/WgXO4VdBg1cswwsVQZgHQy2bCVkUa380pJtxFNUKNcxlCOTtYKj IPJPcBqOWSJx3sLMZvET7gQyGrLpCNsogEkRbm9hI9UdF/8h0ufOavRW6Yvpuie+ lnnRUq0s4r0zJ0SUkBj5zRxcjpDY/g4biC85kWKRb/obtO1z2HsUJ1vvImjA1gKa bLYpwuTbsgwgBP/JCFYCK2t6oUeh51k4r+AVTrq6obyjTovl0ge5XWy+g5ZBY0YI bR+ng+jJeOVXeOb8y6tGO/eV0mJmUdbpD/qz5at7wohevAv1IPEAnpv+18FhVjyw kEZy0Ic6H7HLy1JHVkMNerdVGvzsMKiP -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:11 2025 by rpki-client