$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/883c876d-ef5b-36a8-89e8-a48d417e3b67.roa File: 883c876d-ef5b-36a8-89e8-a48d417e3b67.roa (raw, json) Hash identifier: /xKjJ8UF0GDxxw0xRxqQmHQyln9TrHodL8NxH2xFs0Q= Subject key identifier: 18:5C:60:E2:E4:6B:26:20:C0:61:DB:19:D9:38:4D:41:2C:4B:7B:F5 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584ABD4B8121B42B94A9EB147400 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/883c876d-ef5b-36a8-89e8-a48d417e3b67.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 36445 IP address blocks: 52.124.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:81:21:b4:2b:94:a9:eb:14:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=a6d1a782-e45c-4551-90ac-6c4506d91986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8a:ae:f0:60:50:7d:01:cc:9c:86:bd:35:44: 20:43:2a:35:ac:47:e0:12:fe:88:f9:86:2e:ac:e0: 01:06:53:8d:b1:c0:b6:b2:e6:3d:93:ff:43:c6:97: 2b:03:59:8d:d8:34:ca:58:9d:72:00:fe:c8:34:12: 58:14:10:82:9c:23:83:cb:64:25:9f:97:67:63:62: 11:f9:96:46:2d:c5:48:72:43:8c:80:72:5b:2c:85: 53:0f:a6:4d:5d:fc:a4:33:5f:72:b7:92:b9:75:2e: af:4f:02:52:31:02:60:2b:b8:86:e8:e5:9d:44:7c: 72:3b:31:86:09:08:35:73:e9:92:df:42:79:b6:71: e9:88:2f:65:5f:54:04:83:52:24:ec:14:c5:4e:fe: ed:5a:15:29:99:86:2f:22:08:72:59:9e:b1:ec:a0: aa:fc:f7:39:05:97:4a:be:5d:f0:db:39:6e:6c:3a: f1:f9:92:d2:a5:e8:0b:d1:90:0f:a2:b6:d4:c7:ca: 40:02:15:7a:26:0a:df:a4:42:56:5b:99:38:e0:49: fd:1e:8c:56:e9:58:92:3d:2e:69:a8:72:87:bf:b3: 31:bd:94:10:53:fe:ba:50:57:ae:ec:dd:e3:76:95: d8:83:56:6e:a9:91:b9:5a:ee:24:bc:72:b8:4e:17: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5C:60:E2:E4:6B:26:20:C0:61:DB:19:D9:38:4D:41:2C:4B:7B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/883c876d-ef5b-36a8-89e8-a48d417e3b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 52.124.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f6:54:fa:c5:89:4a:d3:aa:09:30:e0:34:2d:4d:9f:7e:1b: f3:5b:41:c8:b1:1d:63:9a:1b:67:6b:63:62:5b:cf:a5:fe:2f: 01:59:59:46:3c:44:b0:68:cf:38:17:17:6e:93:fc:c8:c9:54: 6d:b6:f4:7d:96:6f:5d:36:29:ab:bf:fd:8c:a6:cc:a0:7f:95: b5:7f:6d:09:95:19:06:5d:79:f0:02:96:84:f8:2f:5d:56:68: e2:b9:0e:c4:ac:b9:a6:53:ec:b7:46:f6:0c:15:a5:29:11:d9: 74:f2:25:27:78:1b:4d:a9:a2:36:a5:53:e0:75:31:99:b4:e7: e8:47:84:5d:78:43:2e:f3:ab:6e:46:7a:32:9b:1f:03:46:cf: 88:15:ba:23:cb:82:16:cd:f0:7d:fe:f2:6f:ee:02:0f:36:76: ae:89:5a:8c:b5:2b:de:c0:3d:97:1f:10:66:32:1c:44:3a:8e: ee:40:c0:42:cc:6d:b7:47:56:23:22:eb:7d:68:50:10:24:fc: 63:23:b3:dd:57:1e:16:77:ad:a0:55:23:08:28:0b:79:b0:31: a8:b3:62:f4:dc:e6:9f:c5:7c:52:23:92:95:34:95:59:58:6c: a5:f0:46:fd:bb:a6:32:be:02:88:84:68:5c:60:08:0f:f8:36: 6d:94:0b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S4EhtCuUqesUdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk YTZkMWE3ODItZTQ1Yy00NTUxLTkwYWMtNmM0NTA2ZDkxOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIqu8GBQfQHMnIa9NUQgQyo1rEfgEv6I+YYu rOABBlONscC2suY9k/9DxpcrA1mN2DTKWJ1yAP7INBJYFBCCnCODy2Qln5dnY2IR +ZZGLcVIckOMgHJbLIVTD6ZNXfykM19yt5K5dS6vTwJSMQJgK7iG6OWdRHxyOzGG CQg1c+mS30J5tnHpiC9lX1QEg1Ik7BTFTv7tWhUpmYYvIghyWZ6x7KCq/Pc5BZdK vl3w2zlubDrx+ZLSpegL0ZAPorbUx8pAAhV6JgrfpEJWW5k44En9HoxW6ViSPS5p qHKHv7MxvZQQU/66UFeu7N3jdpXYg1ZuqZG5Wu4kvHK4ThfgeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhcYOLkayYgwGHbGdk4TUEsS3v1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvODgzYzg3NmQtZWY1Yi0z NmE4LTg5ZTgtYTQ4ZDQxN2UzYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNHweMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz2VPrFiUrTqgkw4DQtTZ9+G/NbQcixHWOaG2drY2Jbz6X+LwFZWUY8 RLBozzgXF26T/MjJVG229H2Wb102Kau//YymzKB/lbV/bQmVGQZdefACloT4L11W aOK5DsSsuaZT7LdG9gwVpSkR2XTyJSd4G02pojalU+B1MZm05+hHhF14Qy7zq25G ejKbHwNGz4gVuiPLghbN8H3+8m/uAg82dq6JWoy1K97APZcfEGYyHEQ6ju5AwELM bbdHViMi631oUBAk/GMjs91XHhZ3raBVIwgoC3mwMaizYvTc5p/FfFIjkpU0lVlY bKXwRv27pjK+AoiEaFxgCA/4Nm2UC/k= -----END CERTIFICATE-----Generated at Sun Aug 10 05:01:17 2025 by rpki-client