$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/d9acac38-5ce9-3dff-885b-5b33c97768d5.roa File: d9acac38-5ce9-3dff-885b-5b33c97768d5.roa (raw, json) Hash identifier: +5rquLhQsEhpGGg8T/RlJu5wHr+0TU8pMVEMsSk2/EU= Subject key identifier: 3A:B3:21:D9:D6:F6:29:0A:59:F6:C3:4B:7D:4F:87:17:F7:FE:DC:EB Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584AE5C67C6FF34E0A5AF9132F00 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/d9acac38-5ce9-3dff-885b-5b33c97768d5.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 19054 IP address blocks: 208.78.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:7c:6f:f3:4e:0a:5a:f9:13:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=e6338cb4-0779-422c-82f0-8d27e5a476c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:91:82:3a:49:b3:9c:6c:a8:bc:c2:07:07: 17:01:6d:43:c3:ca:a2:0e:24:ef:97:4b:62:13:8a: 76:a0:82:34:38:73:29:65:dd:0e:ae:43:a3:1b:f3: 6b:bd:b9:e6:27:38:9c:27:b2:d1:8e:f2:e7:e8:a7: 7a:96:33:d6:6c:d6:10:4b:f6:e1:0f:e6:3c:32:3f: ae:4d:7e:94:67:ed:df:96:a1:17:88:bb:ed:a2:d1: c2:61:80:66:af:4c:d5:30:0a:b9:54:62:52:f8:cb: ac:49:9b:54:56:bb:21:b1:ba:18:43:ec:c2:46:f5: 0f:3d:06:50:42:77:0b:25:64:a4:fc:31:e5:42:9c: 97:de:44:5a:ef:93:b5:e2:fa:f9:05:89:2b:ef:91: 40:a3:d0:0a:ec:71:8c:51:bb:3b:f8:52:53:15:d4: d0:97:3a:73:2f:e8:ac:a3:b2:ac:29:ee:54:42:37: 20:a6:17:e5:a2:f8:73:5f:3a:1d:4f:6b:9b:58:7d: 07:6b:fa:9e:a7:a6:8a:25:bc:f3:6c:d6:43:8c:45: 47:79:e0:8e:b3:85:2a:4c:58:9f:c5:db:df:92:59: 2b:39:ce:7c:af:06:b0:da:f7:5b:8c:3e:c4:27:b9: 27:74:10:9b:2a:7b:6f:64:35:72:e8:5b:f8:f8:51: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B3:21:D9:D6:F6:29:0A:59:F6:C3:4B:7D:4F:87:17:F7:FE:DC:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/d9acac38-5ce9-3dff-885b-5b33c97768d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 208.78.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:09:b8:ef:ab:f2:70:2b:08:2f:07:e2:46:08:a2:fb:94:15: 16:ad:3b:18:d9:21:2e:b6:0d:d4:d4:f3:56:d0:2c:35:78:6e: 4a:f4:69:a4:ce:b5:33:80:82:9b:83:5b:9a:26:1c:d2:4d:90: 93:17:99:51:93:e5:31:eb:1a:ca:96:00:55:97:ca:10:a0:ef: 85:76:ce:f0:07:14:0f:31:11:a6:5c:4b:63:31:98:66:36:17: dc:10:76:d6:e9:ed:56:40:4a:46:21:76:26:db:28:9e:c4:1e: a4:35:7d:d4:f9:da:c8:5e:b3:92:7b:c4:3c:79:41:45:ef:d7: ef:f2:27:4b:c8:0c:71:22:4f:55:e0:b0:e2:56:34:77:22:c5: c6:42:e4:20:cc:a2:3f:23:20:bd:9c:49:0e:5e:40:b8:04:f7: 05:cc:1a:ef:57:a5:fe:67:ac:d6:23:3e:8b:35:ff:64:d9:12: 10:df:83:90:5b:e6:ed:40:de:46:a8:9a:c5:bd:84:b7:6c:60: 25:ee:a1:b0:1f:60:83:43:cf:b8:94:a3:01:41:a8:ff:b5:67: 22:bf:90:19:74:bf:41:c2:e8:4c:ab:84:49:9e:1e:cf:7a:33: d0:ee:21:48:e0:d8:b6:09:8e:bd:4a:97:70:43:3a:df:61:ba: d2:64:3f:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnxv804KWvkTLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTYzMzhjYjQtMDc3OS00MjJjLTgyZjAtOGQyN2U1YTQ3NmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss+RgjpJs5xsqLzCBwcXAW1Dw8qiDiTvl0ti E4p2oII0OHMpZd0OrkOjG/NrvbnmJzicJ7LRjvLn6Kd6ljPWbNYQS/bhD+Y8Mj+u TX6UZ+3flqEXiLvtotHCYYBmr0zVMAq5VGJS+MusSZtUVrshsboYQ+zCRvUPPQZQ QncLJWSk/DHlQpyX3kRa75O14vr5BYkr75FAo9AK7HGMUbs7+FJTFdTQlzpzL+is o7KsKe5UQjcgphflovhzXzodT2ubWH0Ha/qep6aKJbzzbNZDjEVHeeCOs4UqTFif xdvfklkrOc58rwaw2vdbjD7EJ7kndBCbKntvZDVy6Fv4+FE2fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqzIdnW9ikKWfbDS31Phxf3/tzrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvZDlhY2FjMzgtNWNlOS0z ZGZmLTg4NWItNWIzM2M5Nzc2OGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwJuO+r8nArCC8H4kYIovuUFRatOxjZIS62DdTU81bQLDV4bkr0aaTO tTOAgpuDW5omHNJNkJMXmVGT5THrGsqWAFWXyhCg74V2zvAHFA8xEaZcS2MxmGY2 F9wQdtbp7VZASkYhdibbKJ7EHqQ1fdT52shes5J7xDx5QUXv1+/yJ0vIDHEiT1Xg sOJWNHcixcZC5CDMoj8jIL2cSQ5eQLgE9wXMGu9Xpf5nrNYjPos1/2TZEhDfg5Bb 5u1A3kaomsW9hLdsYCXuobAfYINDz7iUowFBqP+1ZyK/kBl0v0HC6EyrhEmeHs96 M9DuIUjg2LYJjr1Kl3BDOt9hutJkPzk= -----END CERTIFICATE-----Generated at Sat Aug 23 21:19:37 2025 by rpki-client