$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e521e10-05f5-31f1-a49a-9a7a844cba26.roa File: 9e521e10-05f5-31f1-a49a-9a7a844cba26.roa (raw, json) Hash identifier: SNQvWnQxHs4JxxrrTosIGnKPfwfr0BJgs9W30rTkPFE= Subject key identifier: 87:A0:09:48:C4:F3:6B:8E:30:96:70:02:B9:73:9C:D5:2E:F4:83:2D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE1B0EA4CEAD48A2DAD040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e521e10-05f5-31f1-a49a-9a7a844cba26.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 208.76.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:1b:0e:a4:ce:ad:48:a2:da:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1ef2c25e-d6a9-459d-8d1d-245bdd7f53d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:49:36:16:8f:00:c2:08:10:db:d7:73:d2:37: 92:3a:fb:34:c1:af:78:52:89:26:22:ff:17:60:5b: 8e:f3:1d:57:d1:e5:43:41:cd:bf:18:bd:b5:c1:be: e4:61:58:93:cd:84:6c:73:1f:56:91:fa:f0:6c:cd: 39:b2:3b:c7:98:79:32:43:33:63:82:35:24:3b:ce: d4:57:be:d4:26:a8:96:67:ac:0d:02:2f:ac:fd:f6: 00:01:3a:18:9b:aa:f5:8d:c1:be:f4:15:79:43:a7: 04:f8:0f:c9:58:cb:7d:1d:cb:bb:38:e1:88:18:25: 1e:53:70:eb:df:a2:88:f4:ff:03:46:68:11:97:3a: 74:f9:9c:0b:6c:b5:38:9d:1f:8d:87:04:3a:98:af: a7:56:9d:39:62:6c:94:de:ae:0a:a1:0a:d8:23:17: 40:3c:ea:9d:15:3e:f9:a4:84:0b:d7:19:2e:c3:13: a1:96:1f:f5:87:60:7d:05:76:72:f7:47:0f:f4:95: 83:ae:25:48:a0:b5:00:e1:dd:eb:90:6b:ac:29:7b: 5f:70:3e:33:5b:da:20:97:78:58:0e:f7:77:fe:fb: 07:cd:eb:85:69:a3:75:5d:f7:ea:cc:45:2c:cf:68: 5d:f2:78:0e:48:8b:2b:b4:1b:47:78:b0:47:69:27: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A0:09:48:C4:F3:6B:8E:30:96:70:02:B9:73:9C:D5:2E:F4:83:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e521e10-05f5-31f1-a49a-9a7a844cba26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:98:fa:d9:59:f6:23:42:a3:e6:ae:32:29:74:13:17:2a:b8: 40:01:fe:cc:d6:56:2f:98:4d:f8:dd:9f:7f:c5:ee:d4:8c:9a: 1d:a6:68:f0:4e:74:01:a5:49:74:a5:a2:cf:ec:0b:cc:7e:4e: 49:69:e7:1a:62:10:39:61:e4:04:02:d4:8e:02:f5:14:8c:c9: 89:4d:3b:ba:81:49:38:df:90:e2:69:b8:ba:16:f3:71:e0:4f: 58:bc:7e:eb:38:1e:c5:44:66:ab:7b:02:1c:68:f0:ad:cc:a7: 55:62:54:c1:22:01:9c:bd:22:b5:4a:50:7b:b8:0b:ca:a5:f9: 77:7a:cb:09:cd:2d:e9:c1:23:c0:11:71:58:ee:8c:cc:2f:a0: 28:7b:44:38:c1:f0:9f:de:15:f4:05:69:1d:23:04:43:87:64: da:53:6f:99:f5:f0:43:48:73:d2:d8:3c:0c:91:3c:4d:fd:ba: 01:27:07:34:ae:9c:d0:cc:44:85:89:1e:81:28:27:74:59:b0: 47:96:ed:13:15:c4:50:92:9d:47:27:c9:63:08:fe:93:37:26: 0a:69:ff:7d:2c:b1:ce:b6:d7:7c:46:5b:88:b3:cb:f4:cf:7b: e9:d6:84:98:53:92:65:49:17:29:50:6e:0e:b8:63:66:97:0c: 24:cf:80:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhsOpM6tSKLa0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWVmMmMyNWUtZDZhOS00NTlkLThkMWQtMjQ1YmRkN2Y1M2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0k2Fo8AwggQ29dz0jeSOvs0wa94UokmIv8X YFuO8x1X0eVDQc2/GL21wb7kYViTzYRscx9WkfrwbM05sjvHmHkyQzNjgjUkO87U V77UJqiWZ6wNAi+s/fYAAToYm6r1jcG+9BV5Q6cE+A/JWMt9Hcu7OOGIGCUeU3Dr 36KI9P8DRmgRlzp0+ZwLbLU4nR+NhwQ6mK+nVp05YmyU3q4KoQrYIxdAPOqdFT75 pIQL1xkuwxOhlh/1h2B9BXZy90cP9JWDriVIoLUA4d3rkGusKXtfcD4zW9ogl3hY Dvd3/vsHzeuFaaN1XffqzEUsz2hd8ngOSIsrtBtHeLBHaSdfiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIegCUjE82uOMJZwArlznNUu9IMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWU1MjFlMTAtMDVmNS0z MWYxLWE0OWEtOWE3YTg0NGNiYTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaY+tlZ9iNCo+auMil0ExcquEAB/szWVi+YTfjdn3/F7tSMmh2maPBO dAGlSXSlos/sC8x+Tklp5xpiEDlh5AQC1I4C9RSMyYlNO7qBSTjfkOJpuLoW83Hg T1i8fus4HsVEZqt7Ahxo8K3Mp1ViVMEiAZy9IrVKUHu4C8ql+Xd6ywnNLenBI8AR cVjujMwvoCh7RDjB8J/eFfQFaR0jBEOHZNpTb5n18ENIc9LYPAyRPE39ugEnBzSu nNDMRIWJHoEoJ3RZsEeW7RMVxFCSnUcnyWMI/pM3Jgpp/30ssc6213xGW4izy/TP e+nWhJhTkmVJFylQbg64Y2aXDCTPgDM= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:35 2025 by rpki-client