$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0f75539d-a169-31a2-95e9-67cd7b334953.roa File: 0f75539d-a169-31a2-95e9-67cd7b334953.roa (raw, json) Hash identifier: KVeSz/dfZfo0iPfSGvkYiSQnkOb3NzPDuZtC+nG9T3U= Subject key identifier: 32:E6:34:1C:71:FC:63:5D:82:C5:17:73:B5:64:44:D6:3C:15:59:85 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFFE72DAD2E1012C0491C4480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0f75539d-a169-31a2-95e9-67cd7b334953.roa Signing time: Wed 27 Aug 2025 21:37:41 +0000 ROA not before: Wed 27 Aug 2025 21:37:41 +0000 ROA not after: Tue 25 Nov 2025 22:37:41 +0000 asID: 31898 IP address blocks: 208.78.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:e7:2d:ad:2e:10:12:c0:49:1c:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 21:37:41 2025 GMT Not After : Nov 25 22:37:41 2025 GMT Subject: CN=01ba90bb-fe6b-43cc-9b2d-fc7b44e2800e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:ad:67:8f:27:5c:10:78:d1:df:fb:36:c9: 85:10:3e:7e:44:1f:2d:9c:e2:55:32:21:84:12:4f: 0d:d9:90:27:1b:b4:fc:51:af:30:88:06:0c:09:fe: 2d:cd:c2:49:8b:a8:51:49:8a:38:06:03:d9:bf:41: 29:ae:b7:2b:36:fd:2b:36:31:a4:c8:4a:af:ee:62: 87:3f:fa:ce:9c:e0:e9:51:8f:ff:9a:dc:f3:18:e8: 2b:8a:98:e5:c6:9e:4b:da:1f:9d:4f:d9:4b:02:b7: ee:6e:26:fd:7b:f8:43:60:a0:62:6e:73:50:3b:d7: f9:0d:58:39:e2:ce:86:ca:b6:b7:23:c7:62:e2:79: 26:b8:6b:e1:87:4d:31:62:5a:7a:aa:9e:05:e3:ed: 42:10:11:4d:e5:99:51:0d:29:2f:a1:26:91:6a:8f: 8f:79:a7:b2:b2:67:93:bc:ab:3c:4a:70:7d:eb:d7: a1:23:74:01:f1:a7:4b:15:97:ed:33:6c:98:a0:3a: 72:2b:a7:85:10:94:ca:74:30:2a:0c:af:16:c3:ae: 27:b6:c3:75:69:ef:39:58:ca:e7:1b:99:cc:cb:1e: 3c:60:35:b3:5c:a6:99:d5:49:2c:97:f1:8c:70:db: 37:7d:03:99:7a:eb:27:7d:20:2f:2f:7a:fc:88:dd: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E6:34:1C:71:FC:63:5D:82:C5:17:73:B5:64:44:D6:3C:15:59:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0f75539d-a169-31a2-95e9-67cd7b334953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 208.78.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b6:87:7f:f2:5b:df:ba:bd:b5:b8:62:de:bb:a9:59:7b:cf: 7f:ab:c9:6f:b3:ef:5b:d3:fe:78:dd:c8:46:b5:54:8f:72:3a: 10:cf:45:0c:fd:b1:d1:59:d1:5d:b5:e1:74:9c:bd:61:ee:7d: 34:20:d4:e3:ea:64:e0:17:bf:35:dd:f1:eb:44:7b:ae:d5:c1: a7:86:87:f2:eb:27:bb:bf:95:79:07:d2:1c:1a:02:eb:e8:9b: 53:31:05:8b:6f:a1:0b:4f:80:7e:85:62:81:ab:00:e0:ab:be: 25:3a:2f:b7:99:be:4e:f8:3c:71:43:0a:82:97:34:24:ea:03: 04:06:3f:9b:59:dd:50:d5:bd:99:7b:28:33:6c:0e:95:89:93: 35:de:7c:b0:96:f5:7b:24:fe:33:50:e3:1f:78:dc:41:c4:c2: 5a:b4:57:77:cc:2b:25:3c:a9:b0:4b:00:09:ff:f2:1e:4f:93: 00:47:2d:84:25:ad:c3:01:6d:c5:e4:b6:2b:f3:36:8f:e8:28: c7:76:e2:ea:0f:2c:b3:54:28:a4:cf:fa:5f:b4:c8:4c:77:34: 05:5e:b4:43:ae:66:90:a5:31:8d:b6:eb:d9:f5:db:ee:80:27: a3:22:d7:fc:23:6c:63:33:1e:34:df:52:47:f7:c5:30:8a:17: 35:c1:eb:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/5y2tLhASwEkcRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNzIxMzc0MVoXDTI1MTEyNTIyMzc0MVowLzEtMCsGA1UEAxMk MDFiYTkwYmItZmU2Yi00M2NjLTliMmQtZmM3YjQ0ZTI4MDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfqtZ48nXBB40d/7NsmFED5+RB8tnOJVMiGE Ek8N2ZAnG7T8Ua8wiAYMCf4tzcJJi6hRSYo4BgPZv0EprrcrNv0rNjGkyEqv7mKH P/rOnODpUY//mtzzGOgripjlxp5L2h+dT9lLArfubib9e/hDYKBibnNQO9f5DVg5 4s6Gyra3I8di4nkmuGvhh00xYlp6qp4F4+1CEBFN5ZlRDSkvoSaRao+PeaeysmeT vKs8SnB969ehI3QB8adLFZftM2yYoDpyK6eFEJTKdDAqDK8Ww64ntsN1ae85WMrn G5nMyx48YDWzXKaZ1Uksl/GMcNs3fQOZeusnfSAvL3r8iN11swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLmNBxx/GNdgsUXc7VkRNY8FVmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGY3NTUzOWQtYTE2OS0z MWEyLTk1ZTktNjdjZDdiMzM0OTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS2h3/yW9+6vbW4Yt67qVl7z3+ryW+z71vT/njdyEa1VI9yOhDPRQz9 sdFZ0V214XScvWHufTQg1OPqZOAXvzXd8etEe67VwaeGh/LrJ7u/lXkH0hwaAuvo m1MxBYtvoQtPgH6FYoGrAOCrviU6L7eZvk74PHFDCoKXNCTqAwQGP5tZ3VDVvZl7 KDNsDpWJkzXefLCW9Xsk/jNQ4x943EHEwlq0V3fMKyU8qbBLAAn/8h5PkwBHLYQl rcMBbcXktivzNo/oKMd24uoPLLNUKKTP+l+0yEx3NAVetEOuZpClMY2269n12+6A J6Mi1/wjbGMzHjTfUkf3xTCKFzXB67s= -----END CERTIFICATE-----Generated at Wed Oct 8 23:07:21 2025 by rpki-client