$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b54fd014-e39f-3ef6-9507-17c43f40e70e.roa File: b54fd014-e39f-3ef6-9507-17c43f40e70e.roa (raw, json) Hash identifier: parI0PvGa9Q0rjj7xvStFszF4sNypqPLrzfC1Tl3pas= Subject key identifier: 43:1A:B6:7E:1C:7C:CC:DC:CC:09:81:3D:D2:79:3B:F1:9F:E8:63:15 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD51E27E0A24CDA3937FA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b54fd014-e39f-3ef6-9507-17c43f40e70e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 208.76.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:51:e2:7e:0a:24:cd:a3:93:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=5c28ae9d-9c14-4586-9791-0f31a3117c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:92:eb:ce:79:97:36:f6:4a:d2:5a:02:91: d8:72:4b:1c:44:9b:70:96:ec:94:65:46:91:f5:64: c3:f5:75:e1:55:9f:33:d2:6a:7c:4e:dc:c1:0f:9d: ab:7e:6e:56:83:49:f1:56:d9:df:60:84:ce:55:67: fc:52:e4:b4:0e:16:87:72:f1:6d:1a:4a:a7:99:10: a3:f0:1f:56:62:76:5f:da:93:de:f9:e1:a7:be:f4: 01:36:5d:c7:fa:ed:c6:a8:39:d8:0e:53:e3:f3:23: 79:c0:0e:ab:26:dc:5a:26:6f:3c:53:e6:84:91:3c: 1f:59:47:a3:09:46:bf:3b:a3:51:4a:bb:ad:a3:24: 72:83:b0:f9:ec:8f:c1:1c:d6:5f:ca:2b:16:74:58: 2b:af:34:2f:68:3f:60:ac:73:6a:1c:80:82:5c:82: b7:ad:61:68:96:4a:ae:60:99:39:d0:55:10:2e:fa: 3d:f0:d2:ae:2c:e0:0e:d7:23:8f:fb:5a:9d:4d:7f: b8:a7:be:03:88:17:4c:46:80:ee:88:3a:57:96:26: 58:f1:92:7b:03:60:f0:47:d3:97:0a:38:96:c6:e7: 87:c4:ca:87:df:b2:a4:80:a4:22:d9:aa:8c:12:48: 1a:cd:c0:50:be:90:26:66:a1:c4:8f:11:71:fe:5a: 85:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1A:B6:7E:1C:7C:CC:DC:CC:09:81:3D:D2:79:3B:F1:9F:E8:63:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b54fd014-e39f-3ef6-9507-17c43f40e70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d8:98:9f:c1:8b:9a:2a:63:23:15:13:21:fe:f9:7f:8e:42: d9:c6:58:92:10:60:bd:41:ea:0f:5e:3b:4d:5f:a1:4b:19:41: 5e:18:9a:95:f7:9a:2d:20:cd:ac:42:8b:83:82:29:11:e1:7e: 35:78:7f:63:2c:21:5e:e4:f4:08:dc:d2:6f:e6:2b:b1:aa:1f: ce:8d:35:ad:b8:bc:9c:6e:be:30:b9:2d:2e:7f:4a:6a:96:74: ad:d7:e5:fb:e9:44:ee:d7:e0:24:25:7f:17:68:6e:4d:d3:7b: 15:4e:9c:b0:66:fe:21:86:bb:05:3e:fc:8d:2e:2c:ae:3d:5f: 84:6b:48:a0:4e:dd:b7:53:69:fc:94:b9:6e:42:51:71:ce:f2: 13:01:d8:9c:cc:b7:af:ee:59:4e:72:8b:53:dc:f3:99:12:3f: f7:e6:69:44:56:fa:7e:ff:cf:62:c5:3c:df:12:61:42:25:ee: 61:42:cc:5a:95:ff:37:0b:40:12:57:59:cb:89:da:52:3d:f5: 2c:2a:52:4c:99:d1:33:c6:37:89:0a:a3:b4:92:e9:6b:3e:02: b8:b7:bf:a0:62:d6:e7:41:44:a2:55:f7:70:2b:e2:06:1b:96: c2:30:56:a0:3b:88:59:71:bb:28:4f:9c:f4:a0:5d:3b:42:f3: f7:90:bf:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVHifgokzaOTf6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NWMyOGFlOWQtOWMxNC00NTg2LTk3OTEtMGYzMWEzMTE3YzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1+S6855lzb2StJaApHYckscRJtwluyUZUaR 9WTD9XXhVZ8z0mp8TtzBD52rfm5Wg0nxVtnfYITOVWf8UuS0DhaHcvFtGkqnmRCj 8B9WYnZf2pPe+eGnvvQBNl3H+u3GqDnYDlPj8yN5wA6rJtxaJm88U+aEkTwfWUej CUa/O6NRSrutoyRyg7D57I/BHNZfyisWdFgrrzQvaD9grHNqHICCXIK3rWFolkqu YJk50FUQLvo98NKuLOAO1yOP+1qdTX+4p74DiBdMRoDuiDpXliZY8ZJ7A2DwR9OX CjiWxueHxMqH37KkgKQi2aqMEkgazcBQvpAmZqHEjxFx/lqFBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMatn4cfMzczAmBPdJ5O/Gf6GMVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjU0ZmQwMTQtZTM5Zi0z ZWY2LTk1MDctMTdjNDNmNDBlNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfYmJ/Bi5oqYyMVEyH++X+OQtnGWJIQYL1B6g9eO01foUsZQV4YmpX3 mi0gzaxCi4OCKRHhfjV4f2MsIV7k9Ajc0m/mK7GqH86NNa24vJxuvjC5LS5/SmqW dK3X5fvpRO7X4CQlfxdobk3TexVOnLBm/iGGuwU+/I0uLK49X4RrSKBO3bdTafyU uW5CUXHO8hMB2JzMt6/uWU5yi1Pc85kSP/fmaURW+n7/z2LFPN8SYUIl7mFCzFqV /zcLQBJXWcuJ2lI99SwqUkyZ0TPGN4kKo7SS6Ws+Ari3v6Bi1udBRKJV93Ar4gYb lsIwVqA7iFlxuyhPnPSgXTtC8/eQv3U= -----END CERTIFICATE-----Generated at Fri Oct 17 10:51:11 2025 by rpki-client