$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/144c1b7a-63c2-3a05-8d5d-4d7724a6887f.roa File: 144c1b7a-63c2-3a05-8d5d-4d7724a6887f.roa (raw, json) Hash identifier: Xwuf+7oGWy/fi/imHtWxNgJo0R2iuMHKcO9h3Af96fg= Subject key identifier: 8C:6E:BD:40:0E:90:06:95:8F:15:A4:FE:10:0A:A0:67:20:30:7B:7F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6631E940593BC3E3A67AE440 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/144c1b7a-63c2-3a05-8d5d-4d7724a6887f.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396982 IP address blocks: 208.76.71.160/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:e9:40:59:3b:c3:e3:a6:7a:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=3d781f8c-d1df-4bb3-b6a7-8f9a1618b798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:08:a3:ba:79:80:2f:ef:26:67:24:a6:f5:e8: ac:58:05:cf:10:23:35:b9:99:a4:1a:10:8b:75:96: b4:be:2e:09:a7:7c:ef:31:b5:d7:42:29:5c:4b:b2: a3:10:c6:74:8f:13:0b:e2:4c:fd:13:a1:1d:bd:43: b6:09:9e:bc:83:1b:c4:11:33:30:82:b8:cd:c5:31: 47:82:68:37:aa:9b:be:8c:45:23:83:b6:b6:cd:c2: 05:66:c8:9d:92:71:5f:2f:c2:e4:f6:bc:43:6a:54: 60:09:ea:56:85:77:1a:c2:6d:20:51:b4:53:81:46: 9b:24:16:ef:3f:35:6c:f2:bb:c4:b9:a2:8c:e6:9f: 1e:7f:7e:3e:cb:ce:65:33:47:1a:ae:da:42:67:8c: 90:f5:a6:7e:b3:c8:02:e1:be:19:f7:29:98:87:45: 4d:45:c8:fd:f1:a3:dd:42:38:57:de:6a:2c:70:7a: 7e:0c:da:f0:41:b9:81:f0:cf:08:95:43:bf:ae:53: 3f:b2:27:81:a1:e4:af:e6:a6:f4:43:91:0b:00:25: 75:7e:4c:31:70:5d:aa:0f:29:e9:d7:c4:12:6d:b9: bc:74:9a:6c:2e:96:08:c0:6a:87:00:bd:2b:90:51: 9a:4c:c6:9e:b3:10:3a:b2:6e:b7:fa:de:e9:a1:70: d5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6E:BD:40:0E:90:06:95:8F:15:A4:FE:10:0A:A0:67:20:30:7B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/144c1b7a-63c2-3a05-8d5d-4d7724a6887f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.160/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b2:35:62:0c:77:59:74:91:97:8c:4c:3c:b8:c3:61:55:9f: a4:89:9f:47:fb:64:de:01:1e:b0:2a:b1:88:2c:f9:d3:18:ca: 9d:2c:b4:24:f8:5e:ab:b5:6b:1e:80:fa:20:da:6f:f4:e0:7f: 56:9c:17:3a:dd:7b:0f:b8:50:b2:f2:80:bd:1b:40:c7:bf:0b: 37:2e:6a:e1:53:c0:c2:4b:01:9d:90:1c:15:6c:f2:4d:ed:99: f3:4b:9a:e8:43:13:63:1a:04:d0:76:c2:25:40:c1:88:26:ad: 70:70:92:d7:3d:90:bf:4c:ef:8d:a3:bc:11:ec:88:a9:5b:3c: 43:46:2e:08:63:9a:f8:cf:15:87:3f:69:26:d2:12:9f:9f:b4: bc:4a:97:be:a8:29:b5:1a:68:96:70:9a:01:9e:10:03:5b:0d: 48:f5:42:82:e3:74:e4:5c:4e:33:fd:5a:a1:ed:52:1b:59:75: a3:da:2c:40:92:0b:31:8d:67:d2:81:5c:d7:e7:95:f0:df:f7: 4e:63:ef:8a:4c:82:3a:3b:2a:c1:11:36:ec:bb:2b:0c:1a:dc: 69:9e:87:f0:90:f1:9e:52:75:9d:26:25:83:ae:a7:4b:20:30: 6e:53:f1:ef:54:34:df:f0:23:8f:3b:8f:31:ad:d9:de:8e:f3: b5:7f:f3:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtmMelAWTvD46Z65EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk M2Q3ODFmOGMtZDFkZi00YmIzLWI2YTctOGY5YTE2MThiNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQijunmAL+8mZySm9eisWAXPECM1uZmkGhCL dZa0vi4Jp3zvMbXXQilcS7KjEMZ0jxML4kz9E6EdvUO2CZ68gxvEETMwgrjNxTFH gmg3qpu+jEUjg7a2zcIFZsidknFfL8Lk9rxDalRgCepWhXcawm0gUbRTgUabJBbv PzVs8rvEuaKM5p8ef34+y85lM0cartpCZ4yQ9aZ+s8gC4b4Z9ymYh0VNRcj98aPd QjhX3moscHp+DNrwQbmB8M8IlUO/rlM/sieBoeSv5qb0Q5ELACV1fkwxcF2qDynp 18QSbbm8dJpsLpYIwGqHAL0rkFGaTMaesxA6sm63+t7poXDVHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIxuvUAOkAaVjxWk/hAKoGcgMHt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTQ0YzFiN2EtNjNjMi0z YTA1LThkNWQtNGQ3NzI0YTY4ODdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFsjViDHdZdJGXjEw8uMNhVZ+kiZ9H+2TeAR6wKrGILPnTGMqdLLQk +F6rtWsegPog2m/04H9WnBc63XsPuFCy8oC9G0DHvws3LmrhU8DCSwGdkBwVbPJN 7ZnzS5roQxNjGgTQdsIlQMGIJq1wcJLXPZC/TO+No7wR7IipWzxDRi4IY5r4zxWH P2km0hKfn7S8Spe+qCm1GmiWcJoBnhADWw1I9UKC43TkXE4z/Vqh7VIbWXWj2ixA kgsxjWfSgVzX55Xw3/dOY++KTII6OyrBETbsuysMGtxpnofwkPGeUnWdJiWDrqdL IDBuU/HvVDTf8COPO48xrdnejvO1f/NY -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:26 2025 by rpki-client