$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c796bd5-f5b7-3903-b7ea-c1d01686a752.roa File: 8c796bd5-f5b7-3903-b7ea-c1d01686a752.roa (raw, json) Hash identifier: 44bFPIoDjBbelRFPp2Et8ERrv3JHDpFnbfD5eM9xbLQ= Subject key identifier: BB:7D:48:F0:68:22:74:26:FB:16:C2:C0:23:17:81:09:A5:85:27:61 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD66F0A140D567D673BE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c796bd5-f5b7-3903-b7ea-c1d01686a752.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 208.68.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:66:f0:a1:40:d5:67:d6:73:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c2a7b33d-e706-4bbc-aebb-b67f77331769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:43:02:dc:fe:8e:9d:c9:ee:5a:ca:10:95:37: 62:e3:65:7b:b0:18:05:36:e8:58:e5:ad:43:47:70: de:e1:41:70:e3:35:37:85:86:a9:cf:be:e2:96:04: 62:a4:06:3d:44:18:0a:f9:e6:57:86:24:a8:6f:62: 38:a8:c7:fd:48:23:07:60:2d:6e:cc:9c:a2:fb:f8: c0:84:59:44:f7:21:88:5b:bd:d1:96:69:a6:3b:33: 75:39:5b:92:2e:a3:ae:8b:05:a4:c2:8f:eb:1a:bb: ce:67:d6:45:35:49:db:a8:21:e7:5f:47:a8:23:7a: b2:cd:77:47:78:e4:f2:fd:b9:ed:bd:3c:7a:34:fe: 95:d8:31:a2:2a:c2:9b:c6:4c:78:7d:08:d4:ed:e3: af:d4:b5:d1:35:06:62:f1:1b:d0:b8:5d:44:40:ed: d9:80:29:11:57:5a:9c:90:13:7b:6c:c7:89:9d:e3: 97:95:19:08:c7:d6:8c:a0:95:25:d3:12:1b:e9:11: e6:55:7b:fd:cf:e0:c8:39:16:f1:e0:76:53:af:87: c1:c4:da:38:5e:a9:02:d1:11:c7:59:4a:76:6b:8c: f3:50:69:48:55:8b:da:86:70:ca:da:15:8f:09:7d: 26:8f:1b:b3:ee:cc:4c:b3:7c:57:ca:12:7e:db:c4: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7D:48:F0:68:22:74:26:FB:16:C2:C0:23:17:81:09:A5:85:27:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c796bd5-f5b7-3903-b7ea-c1d01686a752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:13:9c:5c:3d:8d:aa:34:9f:94:8f:36:38:d8:8e:06:eb:51: dd:35:af:8e:27:26:3f:ab:46:94:01:e4:50:45:93:af:10:b8: ad:be:e8:1b:55:33:35:4a:3c:c0:8c:d4:39:13:68:f2:a3:a6: 5d:58:af:8a:2e:66:d3:c3:12:c8:99:9a:4a:e7:10:04:68:e6: 6b:ec:47:e7:b4:49:c3:d4:b4:9a:55:13:f2:42:d7:ff:05:1b: 0d:e6:c9:d6:1b:a1:e7:25:52:7d:be:e6:53:09:b5:ac:4e:53: 99:54:97:81:a0:5f:d5:82:2a:7c:96:9f:96:87:b7:91:29:02: 15:35:e9:94:ad:2b:df:71:b2:fe:52:fb:3d:d8:d0:5d:a9:8f: f9:0a:50:88:d2:3e:2d:c7:5d:a4:8f:83:33:87:15:1a:16:04: f2:72:f4:f3:0c:b2:a6:f7:ad:c9:2d:59:1b:12:d7:a2:ee:30: 9b:30:53:32:12:2e:13:0e:67:57:46:44:e7:db:e4:3f:5a:54: b6:4d:d5:63:c6:e2:36:f7:ee:e9:3d:05:24:49:07:89:ea:4e: 73:11:af:07:e1:eb:d7:85:b5:33:f4:7b:68:a1:28:64:2c:7d: 67:3b:a0:6f:38:9b:d7:23:88:0a:f2:3b:52:b9:f8:8a:41:b5: 58:37:5e:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWbwoUDVZ9ZzvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzJhN2IzM2QtZTcwNi00YmJjLWFlYmItYjY3Zjc3MzMxNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUMC3P6OncnuWsoQlTdi42V7sBgFNuhY5a1D R3De4UFw4zU3hYapz77ilgRipAY9RBgK+eZXhiSob2I4qMf9SCMHYC1uzJyi+/jA hFlE9yGIW73RlmmmOzN1OVuSLqOuiwWkwo/rGrvOZ9ZFNUnbqCHnX0eoI3qyzXdH eOTy/bntvTx6NP6V2DGiKsKbxkx4fQjU7eOv1LXRNQZi8RvQuF1EQO3ZgCkRV1qc kBN7bMeJneOXlRkIx9aMoJUl0xIb6RHmVXv9z+DIORbx4HZTr4fBxNo4XqkC0RHH WUp2a4zzUGlIVYvahnDK2hWPCX0mjxuz7sxMs3xXyhJ+28S8LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt9SPBoInQm+xbCwCMXgQmlhSdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGM3OTZiZDUtZjViNy0z OTAzLWI3ZWEtYzFkMDE2ODZhNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ERuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkTnFw9jao0n5SPNjjYjgbrUd01r44nJj+rRpQB5FBFk68QuK2+6BtV MzVKPMCM1DkTaPKjpl1Yr4ouZtPDEsiZmkrnEARo5mvsR+e0ScPUtJpVE/JC1/8F Gw3mydYboeclUn2+5lMJtaxOU5lUl4GgX9WCKnyWn5aHt5EpAhU16ZStK99xsv5S +z3Y0F2pj/kKUIjSPi3HXaSPgzOHFRoWBPJy9PMMsqb3rcktWRsS16LuMJswUzIS LhMOZ1dGROfb5D9aVLZN1WPG4jb37uk9BSRJB4nqTnMRrwfh69eFtTP0e2ihKGQs fWc7oG84m9cjiAryO1K5+IpBtVg3Xi8= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:41 2025 by rpki-client