$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cadf68c1-d1bb-3466-972a-0de815519a7f.roa File: cadf68c1-d1bb-3466-972a-0de815519a7f.roa (raw, json) Hash identifier: sUQsiHp27DqC2ic6v//r9ezFfzcJP3H22wCT9qjS0G8= Subject key identifier: 58:DE:71:18:A4:64:20:AF:A4:76:13:36:FA:EC:C3:09:44:F4:FC:A7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD4410BCBCFB5D9438897C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cadf68c1-d1bb-3466-972a-0de815519a7f.roa Signing time: Tue 26 Aug 2025 22:57:25 +0000 ROA not before: Tue 26 Aug 2025 22:57:25 +0000 ROA not after: Mon 24 Nov 2025 23:57:25 +0000 asID: 31898 IP address blocks: 208.76.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:10:bc:bc:fb:5d:94:38:89:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:57:25 2025 GMT Not After : Nov 24 23:57:25 2025 GMT Subject: CN=b2c6c0c5-390d-4bed-a38c-30a7c05611b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fc:67:2c:0c:8c:bb:a3:73:61:bd:2a:3a:9d: 4f:76:2b:29:55:63:af:a0:b2:aa:52:3d:13:37:5b: 68:94:55:eb:ce:21:7d:72:d3:98:03:aa:b6:b8:f5: 39:b5:8c:79:6d:da:7e:e9:ac:c7:c1:0d:d3:b0:4c: 6d:1c:f4:61:9a:0c:9f:48:69:fa:f4:b6:04:5d:29: db:a2:6a:ed:02:34:92:40:49:2a:ec:6a:ad:2e:9e: c4:ea:98:7c:4c:45:b9:3b:4c:ce:90:4e:ab:c2:d6: 9f:08:cd:8e:5e:0a:dd:2e:e6:fd:e9:53:2d:ea:d1: ff:d2:ce:36:25:98:ac:1e:62:48:64:32:d1:27:93: 68:07:de:3e:50:06:ad:b1:20:5c:28:b0:55:4f:ce: 7d:d8:82:81:72:cb:cb:37:c2:b8:20:eb:75:7e:db: bf:9f:53:1f:87:f8:85:5d:4c:65:e9:96:f5:77:bd: 51:0c:1f:74:5c:cb:99:c7:6f:33:80:bc:c7:08:83: 69:3b:0c:20:6d:af:80:3b:e3:45:37:68:62:c6:e3: da:72:df:7c:8a:77:57:83:b3:e0:16:15:9c:73:c3: d3:48:c6:fa:17:e2:7e:05:21:60:14:df:ac:10:d5: a5:8f:7a:ec:7a:11:1f:cd:61:ed:3c:fe:25:74:c7: d0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DE:71:18:A4:64:20:AF:A4:76:13:36:FA:EC:C3:09:44:F4:FC:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cadf68c1-d1bb-3466-972a-0de815519a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 208.76.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:17:9d:bf:1d:c3:54:73:2d:e7:f7:84:31:aa:ce:c1:cb:1d: 56:54:e0:19:9a:55:0c:8d:9e:da:d5:08:24:cf:b9:37:e6:39: ad:6a:26:e6:83:b8:ce:f1:b0:d0:09:f5:d5:51:b1:d0:9f:ab: 92:2d:51:96:60:45:67:e8:83:2a:b8:59:20:48:d0:e6:8d:10: cb:b0:39:f6:5f:b3:e0:38:b1:83:20:1b:ab:f3:97:78:bc:74: b6:b9:16:87:8c:fa:9e:5c:61:7e:43:78:58:f3:6d:fd:b6:93: b3:6e:27:c0:82:5c:61:06:7c:61:56:fe:be:dd:d1:b5:e0:bf: fb:41:41:02:e9:cf:d2:9e:63:c3:43:2c:c7:73:0a:dd:b7:bf: 0c:61:fd:ed:a3:c4:3d:5a:51:b7:dc:c0:08:cb:df:5b:74:be: 9e:5b:4e:c4:87:10:2c:e8:0d:0e:27:8c:19:78:d8:84:0b:40: 5e:d3:45:f0:ba:df:6d:47:c6:66:76:7b:fd:13:8f:f4:cc:14: f8:c5:64:4e:c5:aa:46:21:d0:ac:87:e4:50:7c:f7:52:2e:a8: 31:2e:28:70:46:eb:2d:a6:1d:07:08:9c:1e:fe:fc:cf:23:5c: 8e:99:62:90:11:26:ba:e0:b6:4a:28:54:d6:82:64:fb:e2:d5: 17:f5:f5:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9RBC8vPtdlDiJfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTcyNVoXDTI1MTEyNDIzNTcyNVowLzEtMCsGA1UEAxMk YjJjNmMwYzUtMzkwZC00YmVkLWEzOGMtMzBhN2MwNTYxMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PxnLAyMu6NzYb0qOp1PdispVWOvoLKqUj0T N1tolFXrziF9ctOYA6q2uPU5tYx5bdp+6azHwQ3TsExtHPRhmgyfSGn69LYEXSnb omrtAjSSQEkq7GqtLp7E6ph8TEW5O0zOkE6rwtafCM2OXgrdLub96VMt6tH/0s42 JZisHmJIZDLRJ5NoB94+UAatsSBcKLBVT8592IKBcsvLN8K4IOt1ftu/n1Mfh/iF XUxl6Zb1d71RDB90XMuZx28zgLzHCINpOwwgba+AO+NFN2hixuPact98indXg7Pg FhWcc8PTSMb6F+J+BSFgFN+sENWlj3rsehEfzWHtPP4ldMfQmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjecRikZCCvpHYTNvrswwlE9PynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2FkZjY4YzEtZDFiYi0z NDY2LTk3MmEtMGRlODE1NTE5YTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ew+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcXnb8dw1RzLef3hDGqzsHLHVZU4BmaVQyNntrVCCTPuTfmOa1qJuaD uM7xsNAJ9dVRsdCfq5ItUZZgRWfogyq4WSBI0OaNEMuwOfZfs+A4sYMgG6vzl3i8 dLa5FoeM+p5cYX5DeFjzbf22k7NuJ8CCXGEGfGFW/r7d0bXgv/tBQQLpz9KeY8ND LMdzCt23vwxh/e2jxD1aUbfcwAjL31t0vp5bTsSHECzoDQ4njBl42IQLQF7TRfC6 321HxmZ2e/0Tj/TMFPjFZE7FqkYh0KyH5FB891IuqDEuKHBG6y2mHQcInB7+/M8j XI6ZYpARJrrgtkooVNaCZPvi1Rf19fU= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:19 2025 by rpki-client