$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa File: 9a864864-8b89-3c24-892f-a08a1af18543.roa (raw, json) Hash identifier: i9tsf/HYCUfHT6OTAxY35ZoqdSyTvly7A0/AFrCucBQ= Subject key identifier: 7E:73:07:7A:D1:42:DC:AA:03:FB:0D:A6:AB:78:C3:99:D8:00:F3:C9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE0A6680B66015163CDD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 208.68.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:0a:66:80:b6:60:15:16:3c:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=9e2604cb-9937-4839-8205-4c5256c6a101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:7e:44:74:0e:96:fa:d8:cb:18:61:9e:6c: 25:8d:0a:88:f6:d8:7b:2d:6a:d6:e6:e4:12:83:50: 39:c2:31:db:d4:29:b8:f6:d9:5a:c3:15:7e:e5:2e: 72:ea:26:99:24:17:9c:f3:57:f1:ca:70:a4:b6:19: 83:42:16:4a:a5:b8:d6:7a:03:b3:aa:12:c9:15:39: 6f:13:f6:e3:7c:6d:58:14:52:66:aa:00:a9:f1:f2: c2:9b:9a:84:b0:27:07:28:ce:81:c2:25:6e:e5:83: 8b:c9:8c:f4:a0:3c:36:fb:4d:85:01:a9:05:85:60: 85:0c:5b:b5:bc:72:9c:be:56:0b:6e:f6:fd:20:8a: 14:b7:8f:ee:80:f2:c8:62:a7:24:6f:56:84:83:b8: 40:7c:e8:d2:46:03:e8:c9:45:e6:f9:34:e0:8e:8a: 67:a4:23:e3:3e:49:5a:48:7c:7a:24:7d:18:2f:00: 91:51:f6:75:3b:28:58:c5:ad:35:77:75:e7:b0:fd: dd:f9:25:f2:c7:a3:41:6f:5c:b4:11:f6:6e:a0:37: 09:dd:ad:07:28:e4:8d:6c:2f:a9:b6:f9:50:54:a9: 2f:eb:78:5c:ab:68:ad:f8:0a:89:7d:8e:1b:d1:b5: 80:7a:3e:a5:9c:74:62:16:6d:84:68:ab:21:cc:78: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:73:07:7A:D1:42:DC:AA:03:FB:0D:A6:AB:78:C3:99:D8:00:F3:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:5f:01:0d:dd:60:b1:1f:a1:68:fe:f0:80:c7:cc:2b:eb:5c: 7d:8a:55:c6:18:6e:f4:a2:b2:27:a3:12:30:24:09:e5:4a:62: c7:24:a8:9f:ba:cd:16:21:e0:c0:ec:c3:e6:ec:6e:25:d3:ba: 34:fc:dc:45:6f:30:cc:9b:8b:72:0f:b5:c1:c9:08:60:de:65: c2:24:e5:60:16:01:a5:f3:f1:d7:86:63:58:a9:68:09:e9:68: 82:06:e1:d4:57:12:09:fe:8f:0f:80:d5:15:14:92:6a:bd:a3: ec:d2:d5:5b:16:93:ea:3e:42:fb:c3:06:c4:e6:21:55:67:0f: 48:0d:28:02:85:51:76:7c:c0:1d:b2:a2:a9:ec:0e:e5:97:e6: be:dd:5e:5d:3f:91:90:3b:d2:c8:65:ee:70:6e:00:d3:aa:0b: 8b:73:df:3b:b0:2b:6c:05:7b:a0:2b:64:26:d0:45:50:0e:ec: 54:39:d9:52:4c:75:7b:40:22:df:ff:27:8e:fb:39:52:73:8d: 53:62:e6:16:64:b3:9b:d6:e9:98:ab:4b:8a:f1:35:dc:6d:f2: 03:b1:14:44:8f:16:89:83:83:d5:b0:ba:05:c6:76:d5:b2:c8: 86:d1:2a:77:87:13:e6:10:76:c8:57:26:9c:31:63:4f:6e:68: 9e:ba:70:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgpmgLZgFRY83QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OWUyNjA0Y2ItOTkzNy00ODM5LTgyMDUtNGM1MjU2YzZhMTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofl+RHQOlvrYyxhhnmwljQqI9th7LWrW5uQS g1A5wjHb1Cm49tlawxV+5S5y6iaZJBec81fxynCkthmDQhZKpbjWegOzqhLJFTlv E/bjfG1YFFJmqgCp8fLCm5qEsCcHKM6BwiVu5YOLyYz0oDw2+02FAakFhWCFDFu1 vHKcvlYLbvb9IIoUt4/ugPLIYqckb1aEg7hAfOjSRgPoyUXm+TTgjopnpCPjPkla SHx6JH0YLwCRUfZ1OyhYxa01d3XnsP3d+SXyx6NBb1y0EfZuoDcJ3a0HKOSNbC+p tvlQVKkv63hcq2it+AqJfY4b0bWAej6lnHRiFm2EaKshzHintwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5zB3rRQtyqA/sNpqt4w5nYAPPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWE4NjQ4NjQtOGI4OS0z YzI0LTg5MmYtYTA4YTFhZjE4NTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFfAQ3dYLEfoWj+8IDHzCvrXH2KVcYYbvSisiejEjAkCeVKYsckqJ+6 zRYh4MDsw+bsbiXTujT83EVvMMybi3IPtcHJCGDeZcIk5WAWAaXz8deGY1ipaAnp aIIG4dRXEgn+jw+A1RUUkmq9o+zS1VsWk+o+QvvDBsTmIVVnD0gNKAKFUXZ8wB2y oqnsDuWX5r7dXl0/kZA70shl7nBuANOqC4tz3zuwK2wFe6ArZCbQRVAO7FQ52VJM dXtAIt//J477OVJzjVNi5hZks5vW6ZirS4rxNdxt8gOxFESPFomDg9WwugXGdtWy yIbRKneHE+YQdshXJpwxY09uaJ66cEg= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:01 2025 by rpki-client