$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa File: 63db3ed2-26ed-3f99-9a9b-2878649952c7.roa (raw, json) Hash identifier: rSsEfHoBnhyWHiSYVzUPhrP5KocgpY/qdRIyfseR6js= Subject key identifier: 39:02:6C:4D:71:4E:34:4B:25:6C:CE:C4:2C:CB:6A:4D:0A:FE:DD:CD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE2404CF415C1D1E1736E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 208.76.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:24:04:cf:41:5c:1d:1e:17:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=105093dc-169e-40fa-8187-a0244aeda1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:a5:de:74:3a:16:a8:d8:a4:d0:00:ad:ab: f7:cc:34:d4:18:db:49:93:1a:19:cc:7d:bd:f5:c8: d0:b4:a2:e7:c4:41:ad:07:72:0b:31:6d:26:c4:bd: db:c8:7a:7e:dc:67:c9:6c:40:b3:6f:ab:dd:65:78: 5a:26:c1:13:6f:df:c7:02:be:ee:7f:74:4f:59:dc: 69:ec:c9:a4:8e:95:ff:25:f7:0a:38:61:9c:9a:30: a2:2b:45:61:d1:f9:3b:e6:11:b2:44:a4:bc:ff:9e: db:52:58:ef:02:e3:93:49:bb:73:af:8b:22:b5:b6: 00:de:b2:48:3f:28:ba:d9:f6:a9:15:63:82:59:fe: d2:5a:bc:68:2a:fd:24:8d:ee:8e:b1:ac:60:f8:82: 13:84:04:84:7a:64:57:54:1a:b8:27:26:93:9a:bf: 02:a8:0a:f1:0f:9e:2d:85:8e:df:b1:89:17:86:93: 52:7c:e0:50:99:d3:c1:1a:b5:24:b5:7e:b2:18:44: 5e:b7:0b:6a:6f:45:76:21:84:32:72:91:1f:36:22: 84:92:36:af:3b:fe:0a:2d:7a:75:e1:da:39:4c:60: 9c:1e:24:ce:47:a2:1a:1b:a2:21:c4:2b:31:44:c1: a1:35:20:fd:ad:02:ab:ce:e3:9f:59:a7:2e:80:21: 54:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:02:6C:4D:71:4E:34:4B:25:6C:CE:C4:2C:CB:6A:4D:0A:FE:DD:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:90:3f:51:72:aa:27:cd:19:6e:1b:bf:05:60:a6:11:97:7b: c6:a3:67:69:e9:4a:be:ec:73:f7:1b:dd:28:55:7b:4d:05:cf: 2d:d3:62:8e:98:b0:7c:bc:e6:7a:29:3d:55:d8:d6:98:d1:20: e6:7c:c4:c5:14:69:7a:8c:0a:10:99:df:c2:31:0f:ea:a3:c1: 85:b6:75:86:44:bf:45:2e:49:05:ee:4d:a8:9d:0b:00:f1:69: 30:5d:16:61:7a:c8:99:38:ac:e9:08:8e:0a:cc:1e:0a:df:0e: d3:86:6a:26:be:af:07:b1:62:0f:44:d5:5c:a8:b5:17:1e:b3: 01:7c:ec:89:eb:d5:91:95:5b:83:80:05:07:b5:91:d2:4f:65: 1f:51:da:74:a1:74:94:25:b3:6a:3f:ab:1e:9d:37:f0:f8:b0: b7:01:35:61:d4:d6:fc:d4:1d:77:e4:5f:73:06:0a:12:b4:7d: 8f:c2:07:04:15:9d:b6:92:3d:f8:19:e0:c4:37:68:60:23:ea: cd:4a:38:86:b7:06:ca:d5:ea:63:35:ae:44:e8:88:ad:ef:9f: 68:ac:5d:00:57:68:25:c7:2b:f5:86:2d:74:25:83:2e:e2:73: 08:f7:86:8f:a1:e1:8f:48:e1:07:39:5f:92:ea:29:75:91:16: 72:4f:22:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziQEz0FcHR4XNuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTA1MDkzZGMtMTY5ZS00MGZhLTgxODctYTAyNDRhZWRhMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/yl3nQ6FqjYpNAArav3zDTUGNtJkxoZzH29 9cjQtKLnxEGtB3ILMW0mxL3byHp+3GfJbECzb6vdZXhaJsETb9/HAr7uf3RPWdxp 7MmkjpX/JfcKOGGcmjCiK0Vh0fk75hGyRKS8/57bUljvAuOTSbtzr4sitbYA3rJI Pyi62fapFWOCWf7SWrxoKv0kje6Osaxg+IIThASEemRXVBq4JyaTmr8CqArxD54t hY7fsYkXhpNSfOBQmdPBGrUktX6yGERetwtqb0V2IYQycpEfNiKEkjavO/4KLXp1 4do5TGCcHiTOR6IaG6IhxCsxRMGhNSD9rQKrzuOfWacugCFUYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkCbE1xTjRLJWzOxCzLak0K/t3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjNkYjNlZDItMjZlZC0z Zjk5LTlhOWItMjg3ODY0OTk1MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSQP1FyqifNGW4bvwVgphGXe8ajZ2npSr7sc/cb3ShVe00Fzy3TYo6Y sHy85nopPVXY1pjRIOZ8xMUUaXqMChCZ38IxD+qjwYW2dYZEv0UuSQXuTaidCwDx aTBdFmF6yJk4rOkIjgrMHgrfDtOGaia+rwexYg9E1VyotRceswF87Inr1ZGVW4OA BQe1kdJPZR9R2nShdJQls2o/qx6dN/D4sLcBNWHU1vzUHXfkX3MGChK0fY/CBwQV nbaSPfgZ4MQ3aGAj6s1KOIa3BsrV6mM1rkToiK3vn2isXQBXaCXHK/WGLXQlgy7i cwj3ho+h4Y9I4Qc5X5LqKXWRFnJPIvI= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:59 2025 by rpki-client