$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/067b6d01-10cf-3749-9b9c-e9aacbbacd17.roa File: 067b6d01-10cf-3749-9b9c-e9aacbbacd17.roa (raw, json) Hash identifier: YpmnCjCxJJQ+MkOpIxlS/Myt9MO0vLwti1LTh0UNbQQ= Subject key identifier: D7:49:0F:D1:D7:D5:8D:7A:E9:4B:6F:AD:C1:A3:C8:24:C8:F8:01:B3 Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584AE5C67C980E4A3902A30B2780 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/067b6d01-10cf-3749-9b9c-e9aacbbacd17.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 19054 IP address blocks: 208.78.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:7c:98:0e:4a:39:02:a3:0b:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=3072e6b4-c9e3-4fe9-8a00-2517aac89f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ad:86:76:09:6d:1f:29:a2:04:3a:af:9c:c2: 86:78:b6:0f:6b:71:7f:e2:b4:4d:69:0c:2e:6f:5f: 05:1d:57:7e:5c:74:f6:a8:3e:c3:af:48:89:d0:de: fc:4b:27:e7:bf:df:5b:8a:9b:48:08:60:d9:f5:9f: d4:bc:46:5d:fe:b5:09:5e:d1:7e:f1:67:98:d3:de: 18:95:6c:a0:ec:59:25:43:68:57:f8:44:78:9e:4e: 9c:66:6f:26:eb:da:e3:10:69:96:43:10:01:60:d3: 0d:83:0e:dd:95:f8:53:df:f1:6c:56:e7:e8:c3:e3: ae:c2:ad:fb:f7:25:8b:c7:d9:d2:a7:03:32:94:f4: 70:58:30:23:b9:da:30:a9:cc:bd:20:2a:b6:3e:60: 44:c5:ea:c3:36:9f:43:d3:a7:fe:a7:be:ec:53:2c: eb:07:30:cb:bb:bc:1d:bd:19:b3:db:6b:57:c5:04: 29:7b:b2:f0:b2:53:d0:d1:52:05:fc:16:69:61:67: 35:8d:14:c8:80:00:0e:08:6f:43:6a:44:dc:d6:1f: a9:8c:42:5e:da:8e:d0:dc:64:55:b2:ca:9d:22:db: b3:58:17:1a:16:da:9b:78:65:91:b8:c6:35:5b:d6: df:4d:4a:43:12:e5:f8:58:fe:bd:ef:20:86:56:e6: eb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:49:0F:D1:D7:D5:8D:7A:E9:4B:6F:AD:C1:A3:C8:24:C8:F8:01:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/067b6d01-10cf-3749-9b9c-e9aacbbacd17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 208.78.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:2f:f0:cc:9a:3c:70:ff:c8:31:39:cc:ed:ae:54:b6:d3:82: 0d:d8:f1:c6:2e:7d:a7:55:49:87:f2:8d:f2:e9:73:b0:8a:c5: c5:a1:95:74:4d:cc:fa:b9:8d:1b:ac:47:7c:4e:21:37:6a:cd: d9:bc:f8:6f:6b:7d:1a:7f:38:1c:5a:a1:89:1c:2b:eb:40:88: 90:05:8a:70:de:39:6f:c0:31:eb:ea:0d:0a:a4:57:e1:ab:da: 93:39:c3:82:3a:50:96:8e:d2:73:35:e6:81:ab:3a:b5:21:40: d6:9f:72:63:26:17:ff:68:a4:5e:c0:3d:02:f4:30:a9:3b:21: 9f:ad:47:b4:80:9c:7d:4c:4a:a8:59:cc:3c:49:1b:7d:34:a3: f8:08:c8:0a:cf:fb:65:9c:04:60:3e:ad:da:c6:fd:cc:2e:57: ea:fe:dd:e3:5d:1f:07:8a:e3:b5:b6:22:35:29:32:a4:20:50: 10:7c:f0:4a:d4:c0:17:0f:e5:7f:ff:b6:c7:45:e8:34:5c:da: 3e:4b:86:1a:bb:65:e9:7d:15:d5:45:78:6e:b5:c1:7b:e2:25: 20:4a:68:f3:02:31:30:20:a3:6c:39:d9:ab:2b:f2:fe:05:95: 8a:21:5f:54:b6:1e:41:4d:62:51:10:2b:57:17:89:31:43:bb: fe:c8:43:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnyYDko5AqMLJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk MzA3MmU2YjQtYzllMy00ZmU5LThhMDAtMjUxN2FhYzg5ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj62GdgltHymiBDqvnMKGeLYPa3F/4rRNaQwu b18FHVd+XHT2qD7Dr0iJ0N78Syfnv99biptICGDZ9Z/UvEZd/rUJXtF+8WeY094Y lWyg7FklQ2hX+ER4nk6cZm8m69rjEGmWQxABYNMNgw7dlfhT3/FsVufow+Ouwq37 9yWLx9nSpwMylPRwWDAjudowqcy9ICq2PmBExerDNp9D06f+p77sUyzrBzDLu7wd vRmz22tXxQQpe7LwslPQ0VIF/BZpYWc1jRTIgAAOCG9DakTc1h+pjEJe2o7Q3GRV ssqdItuzWBcaFtqbeGWRuMY1W9bfTUpDEuX4WP697yCGVubrnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdJD9HX1Y166UtvrcGjyCTI+AGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvMDY3YjZkMDEtMTBjZi0z NzQ5LTliOWMtZTlhYWNiYmFjZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E5OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUv8MyaPHD/yDE5zO2uVLbTgg3Y8cYufadVSYfyjfLpc7CKxcWhlXRN zPq5jRusR3xOITdqzdm8+G9rfRp/OBxaoYkcK+tAiJAFinDeOW/AMevqDQqkV+Gr 2pM5w4I6UJaO0nM15oGrOrUhQNafcmMmF/9opF7APQL0MKk7IZ+tR7SAnH1MSqhZ zDxJG300o/gIyArP+2WcBGA+rdrG/cwuV+r+3eNdHweK47W2IjUpMqQgUBB88ErU wBcP5X//tsdF6DRc2j5Lhhq7Zel9FdVFeG61wXviJSBKaPMCMTAgo2w52asr8v4F lYohX1S2HkFNYlEQK1cXiTFDu/7IQ+4= -----END CERTIFICATE-----Generated at Sat Aug 23 21:16:25 2025 by rpki-client