$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc86d96c-59f6-3c1b-ab97-718d7d6b463b.roa File: bc86d96c-59f6-3c1b-ab97-718d7d6b463b.roa (raw, json) Hash identifier: WdUQRt3+XuYBngff8UcTw4Bwy19pgeZ73JoICNcwFEU= Subject key identifier: AA:98:93:58:65:BE:AD:34:CD:28:CC:46:0C:2A:2D:D1:40:08:BC:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD44138509AC91A673AFBC00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc86d96c-59f6-3c1b-ab97-718d7d6b463b.roa Signing time: Tue 26 Aug 2025 22:57:26 +0000 ROA not before: Tue 26 Aug 2025 22:57:26 +0000 ROA not after: Mon 24 Nov 2025 23:57:26 +0000 asID: 31898 IP address blocks: 208.76.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:13:85:09:ac:91:a6:73:af:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:57:26 2025 GMT Not After : Nov 24 23:57:26 2025 GMT Subject: CN=15f51268-b187-4a14-80dc-ab3e444063a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:11:d3:ca:6e:25:95:ee:2d:c3:26:df:ea: 58:9b:12:3c:da:99:d0:fb:22:55:31:0b:8f:fd:41: 4a:55:e3:0d:c4:aa:b8:f3:dc:c8:28:db:86:ad:51: d8:be:17:8d:80:26:98:ef:9c:ac:e7:8f:08:3a:45: 65:18:30:6a:be:c3:43:ab:28:4e:d9:89:ec:2b:77: 39:36:85:5e:15:61:1f:f8:c6:69:9d:9d:ef:0d:0d: dd:85:f1:eb:3e:e1:bb:11:41:f0:42:42:81:5c:e9: 2b:2d:fc:fe:72:e7:8a:45:91:d6:a2:93:df:d1:fe: 58:09:d5:f8:3c:56:e5:b4:d9:c2:6a:28:63:f6:53: 15:3d:ff:84:36:99:a9:0b:21:37:ee:02:a2:5e:97: 10:2e:bc:ee:c4:c1:f3:49:53:36:1c:16:ad:26:69: ee:16:8c:05:d5:95:47:2e:0f:2a:1e:e0:81:06:75: 58:e3:62:8b:80:78:7f:14:a6:a7:05:7f:19:2c:39: 07:b2:ff:9d:46:5e:ea:e0:a1:15:8b:50:c7:d8:7f: 4f:5a:8f:c1:bb:ae:a1:3e:8c:22:69:4c:85:15:33: 2a:2c:7e:e7:f6:eb:d1:43:9c:b0:a7:5c:8f:9c:06: fd:40:0b:02:24:e6:b2:b9:b8:e9:8e:a2:d2:64:59: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:98:93:58:65:BE:AD:34:CD:28:CC:46:0C:2A:2D:D1:40:08:BC:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bc86d96c-59f6-3c1b-ab97-718d7d6b463b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 208.76.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:79:12:b1:36:56:41:b8:87:90:7b:e7:26:5a:54:46:cd:97: f0:0c:e5:db:24:4c:f6:d0:e4:d7:9b:db:a3:dc:0c:0d:50:55: 5b:cc:83:08:ee:84:1f:c0:2c:9c:e7:c2:f9:8c:61:c6:ea:c4: 13:53:0b:eb:4c:9e:a7:6e:d3:a1:1c:14:55:a2:90:f7:5f:13: 07:51:02:41:ba:7f:2c:1f:d9:24:c8:df:27:9f:55:fc:4c:49: fb:d0:2d:9b:d3:7d:5f:be:00:87:86:2c:86:06:dc:0a:8e:f1: 98:ab:ed:0a:5a:04:9d:76:d4:db:e3:95:4c:22:6b:ad:df:f8: e6:e6:e5:64:0c:b4:5a:c9:da:3a:0a:0e:2b:c5:1d:22:89:b7: cc:1c:69:35:07:8a:35:26:b6:40:f7:71:e9:de:bc:85:10:40: 44:1d:00:97:f8:a0:a5:38:e4:b7:86:56:36:77:2c:80:3f:20: 37:a3:7b:79:ee:be:54:7e:3a:4d:8e:66:e4:0d:e3:08:e7:e8: 28:3c:d3:e8:97:58:73:da:07:41:6b:e9:b1:1e:56:9c:3d:a8: 0d:4e:a3:d3:ab:41:3e:26:e9:c0:28:fb:7b:d4:ab:da:3d:51: 56:39:95:a2:35:6c:e0:db:a6:42:9d:0a:14:d5:fa:14:5e:f5: 05:c6:73:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9RBOFCayRpnOvvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTcyNloXDTI1MTEyNDIzNTcyNlowLzEtMCsGA1UEAxMk MTVmNTEyNjgtYjE4Ny00YTE0LTgwZGMtYWIzZTQ0NDA2M2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDsR08puJZXuLcMm3+pYmxI82pnQ+yJVMQuP /UFKVeMNxKq489zIKNuGrVHYvheNgCaY75ys548IOkVlGDBqvsNDqyhO2YnsK3c5 NoVeFWEf+MZpnZ3vDQ3dhfHrPuG7EUHwQkKBXOkrLfz+cueKRZHWopPf0f5YCdX4 PFbltNnCaihj9lMVPf+ENpmpCyE37gKiXpcQLrzuxMHzSVM2HBatJmnuFowF1ZVH Lg8qHuCBBnVY42KLgHh/FKanBX8ZLDkHsv+dRl7q4KEVi1DH2H9PWo/Bu66hPowi aUyFFTMqLH7n9uvRQ5ywp1yPnAb9QAsCJOayubjpjqLSZFkIUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqYk1hlvq00zSjMRgwqLdFACLyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmM4NmQ5NmMtNTlmNi0z YzFiLWFiOTctNzE4ZDdkNmI0NjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ew/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV5ErE2VkG4h5B75yZaVEbNl/AM5dskTPbQ5Neb26PcDA1QVVvMgwju hB/ALJznwvmMYcbqxBNTC+tMnqdu06EcFFWikPdfEwdRAkG6fywf2STI3yefVfxM SfvQLZvTfV++AIeGLIYG3AqO8Zir7QpaBJ121NvjlUwia63f+Obm5WQMtFrJ2joK DivFHSKJt8wcaTUHijUmtkD3cenevIUQQEQdAJf4oKU45LeGVjZ3LIA/IDeje3nu vlR+Ok2OZuQN4wjn6Cg80+iXWHPaB0Fr6bEeVpw9qA1Oo9OrQT4m6cAo+3vUq9o9 UVY5laI1bODbpkKdChTV+hRe9QXGc5g= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:20 2025 by rpki-client