$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa File: f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa (raw, json) Hash identifier: e4uF90pP2cYfvNEG8N/3cEAQpOJIm53Bt+epfiisPgA= Subject key identifier: DA:66:21:79:FE:0A:35:7A:25:35:16:C9:88:79:A7:8E:47:C1:28:25 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE0DD05B9677504EFD6040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 208.68.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:0d:d0:5b:96:77:50:4e:fd:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c20d9eff-65ab-4295-b626-e3e1699d7577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:84:82:ae:eb:84:d0:25:53:87:71:29:af:1a: 4e:d8:36:34:6c:05:27:4f:09:19:41:85:10:18:71: ac:a5:bb:a0:f6:30:23:eb:91:83:69:86:9a:4a:87: e1:8c:81:f0:60:17:38:74:6e:ee:57:24:c2:94:04: 99:81:8f:c6:7f:58:0c:45:17:af:e5:d7:5b:59:33: c8:9c:5c:d5:ed:62:32:95:70:ad:db:0d:af:05:71: 19:60:ee:e2:45:3c:ae:e8:fd:9f:af:e2:81:ba:57: 78:3e:4b:1d:9c:0b:78:02:8f:ed:b4:a4:22:1e:39: 7e:b3:22:c5:69:7a:58:26:3e:1d:59:7c:16:69:ae: 41:5d:2a:48:33:83:09:ea:c0:37:d8:d7:56:bc:a3: 71:c4:d8:b1:64:3b:e3:e8:3f:63:1a:df:c9:8b:1e: e1:dd:9f:bf:17:04:bf:7a:c0:83:ae:e1:4c:45:75: 81:da:76:b2:3e:72:8c:71:9f:99:9a:9d:f1:7b:3d: ea:8a:66:17:52:d8:bf:0d:52:e8:84:a1:c5:95:16: 5f:e8:de:d0:bb:4f:02:48:b4:4e:f9:81:1f:7f:cb: d2:de:9d:29:08:b0:d7:89:4f:f4:75:67:da:29:c0: 75:ea:d8:1d:d3:83:fe:df:1a:d6:54:59:cc:ad:92: 2a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:66:21:79:FE:0A:35:7A:25:35:16:C9:88:79:A7:8E:47:C1:28:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:9c:0e:ca:75:57:4b:9c:78:b5:83:dc:f4:0a:08:c8:54:d5: 52:0c:59:34:af:bf:71:0b:31:9a:fa:44:f7:aa:5b:26:23:00: 5e:d2:30:03:70:25:5b:9b:c2:0a:27:71:46:22:6f:66:d2:bc: fc:d6:78:01:26:27:fc:20:b6:14:ae:4f:56:ac:d2:5e:3d:93: e3:47:2d:39:73:0c:54:da:e6:d6:d8:fd:09:00:c7:05:64:4c: b5:03:be:6b:60:f2:38:68:74:c2:de:a8:ca:ed:0f:30:cc:81: 43:b3:56:ab:99:93:8f:f2:b1:54:11:92:b1:6c:4c:6f:fb:53: 70:23:8b:5b:50:df:22:81:dc:ca:7c:8f:1b:c0:d1:cd:a4:da: 4a:99:44:2d:17:b6:89:4f:ae:0c:1b:cf:a2:9b:8d:c7:cb:09: 69:06:0e:f2:64:03:0a:5e:8e:fe:5a:f6:41:37:6b:2b:ae:ae: 02:71:f1:d9:3b:ae:f5:f3:7f:ea:60:bf:c9:eb:d7:ec:2e:a2: 8b:56:50:fe:c2:09:37:b3:77:ec:ea:d3:5e:6e:12:08:c3:5c: 2a:cc:72:ba:f7:69:79:49:08:f8:61:16:6b:1c:50:4d:7e:6f: bb:f8:8a:54:a5:a9:bd:38:75:d8:21:04:02:f6:07:31:a6:92: ca:61:69:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzg3QW5Z3UE79YEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzIwZDllZmYtNjVhYi00Mjk1LWI2MjYtZTNlMTY5OWQ3NTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4SCruuE0CVTh3EprxpO2DY0bAUnTwkZQYUQ GHGspbug9jAj65GDaYaaSofhjIHwYBc4dG7uVyTClASZgY/Gf1gMRRev5ddbWTPI nFzV7WIylXCt2w2vBXEZYO7iRTyu6P2fr+KBuld4PksdnAt4Ao/ttKQiHjl+syLF aXpYJj4dWXwWaa5BXSpIM4MJ6sA32NdWvKNxxNixZDvj6D9jGt/Jix7h3Z+/FwS/ esCDruFMRXWB2nayPnKMcZ+Zmp3xez3qimYXUti/DVLohKHFlRZf6N7Qu08CSLRO +YEff8vS3p0pCLDXiU/0dWfaKcB16tgd04P+3xrWVFnMrZIqpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpmIXn+CjV6JTUWyYh5p45HwSglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjRhNmI4NzgtMTRiNy0z M2RkLWIxZTAtZDNiMjM3OTg3ZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABicDsp1V0uceLWD3PQKCMhU1VIMWTSvv3ELMZr6RPeqWyYjAF7SMANw JVubwgoncUYib2bSvPzWeAEmJ/wgthSuT1as0l49k+NHLTlzDFTa5tbY/QkAxwVk TLUDvmtg8jhodMLeqMrtDzDMgUOzVquZk4/ysVQRkrFsTG/7U3Aji1tQ3yKB3Mp8 jxvA0c2k2kqZRC0XtolPrgwbz6KbjcfLCWkGDvJkAwpejv5a9kE3ayuurgJx8dk7 rvXzf+pgv8nr1+wuootWUP7CCTezd+zq015uEgjDXCrMcrr3aXlJCPhhFmscUE1+ b7v4ilSlqb04ddghBAL2BzGmksphaaI= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:24 2025 by rpki-client