$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/14a34af8-ae6d-3753-82ce-1fe7f78d1587.roa File: 14a34af8-ae6d-3753-82ce-1fe7f78d1587.roa (raw, json) Hash identifier: dD2a1SsNZu0K42t0EfQnD+hWvGVlHfFq9ki4VfHjkNA= Subject key identifier: E7:6C:40:58:33:35:45:62:64:B1:4F:67:D7:6C:76:2A:D8:24:E7:02 Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F4328584A841226969B482261FF20B580 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/14a34af8-ae6d-3753-82ce-1fe7f78d1587.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 136.23.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:26:96:9b:48:22:61:ff:20:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1ae1cf94-1675-4e9c-9f63-853780dd0d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:c9:6a:2e:17:91:43:de:35:95:8c:9f:33: ad:c3:ac:06:8b:e3:a7:b6:b7:44:d0:e9:cb:0f:af: a6:9b:9b:a9:5a:53:5b:62:57:e8:bf:78:f8:86:b7: 91:0d:1d:ba:a2:a2:d3:0a:87:22:0b:c6:0b:70:20: 38:b8:13:64:23:3b:0b:a6:e4:ac:69:0e:1b:ae:c0: ab:4b:83:86:b3:d4:cd:9a:81:c9:d4:a0:a6:18:2f: f1:19:59:d1:c5:e0:4f:36:8e:ae:f3:56:18:8b:7d: 50:af:29:af:e0:4a:b8:34:71:a9:5c:fb:ad:8e:11: c4:b2:93:29:cf:f6:04:55:a9:3e:13:1d:2a:9c:8e: 20:84:40:f1:64:c8:61:9e:7e:5e:d7:f6:0d:4c:72: 80:f3:92:94:ba:78:3e:94:12:46:f9:a4:bb:49:b5: fd:0d:2f:34:25:65:07:96:1e:1d:5d:02:ab:85:48: f9:57:69:34:29:d7:f2:d2:e6:13:61:d3:14:a7:23: a6:3b:17:98:94:5d:b8:61:c3:cc:6d:e5:36:b1:3f: f6:5a:28:b5:06:41:9b:d3:a6:7f:31:0a:24:4e:71: c7:0c:09:b7:11:6e:55:bc:ba:38:f4:4a:f5:e7:2b: c7:67:89:c7:8b:ac:52:5a:3c:7d:6d:76:19:b7:4f: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6C:40:58:33:35:45:62:64:B1:4F:67:D7:6C:76:2A:D8:24:E7:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/14a34af8-ae6d-3753-82ce-1fe7f78d1587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.23.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d0:e2:e1:af:0f:57:f5:a7:0b:2b:fa:2d:75:7a:d6:87:f8: 9e:41:3e:fc:d4:d0:fa:a0:0a:bb:05:e5:c0:e6:a2:30:b2:7a: fc:49:7e:07:16:ae:73:c2:02:65:7d:9a:f9:f4:cf:de:f3:1b: 20:1b:79:50:6e:37:89:8f:4a:b3:18:76:b0:c4:31:55:38:cf: e6:fd:56:ef:75:34:13:fb:1f:c1:92:7f:a0:b2:61:d5:95:8f: b9:04:27:06:d4:72:4a:a7:df:b7:a6:bd:a4:84:bc:4b:f3:34: 81:9d:76:04:30:08:3c:4b:d1:f4:a4:9c:09:c9:0e:f1:34:20: 77:47:0f:0c:55:20:5f:52:21:31:71:5d:ad:b6:3b:7d:a4:b2: c5:12:c9:e1:74:38:86:b0:b3:4f:fd:34:5e:39:f8:7b:ca:59: cd:d6:3f:c1:9f:1f:8c:58:94:46:1d:1b:75:ba:03:18:94:4d: 89:1a:cf:9c:b6:0a:c4:e2:e4:7c:8c:c3:1b:0a:3b:ca:1e:ca: 68:be:2e:79:4e:e8:c8:82:64:fc:6e:4f:0d:14:52:4a:34:2a: 4d:5a:20:36:8c:9f:c4:2a:79:ab:ad:44:19:de:01:09:6b:49: 8a:b5:38:a5:76:55:4f:a4:76:1c:78:04:47:44:cf:1d:27:cf: 79:3b:88:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiaWm0giYf8gtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWFlMWNmOTQtMTY3NS00ZTljLTlmNjMtODUzNzgwZGQwZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv/Jai4XkUPeNZWMnzOtw6wGi+OntrdE0OnL D6+mm5upWlNbYlfov3j4hreRDR26oqLTCociC8YLcCA4uBNkIzsLpuSsaQ4brsCr S4OGs9TNmoHJ1KCmGC/xGVnRxeBPNo6u81YYi31Qrymv4Eq4NHGpXPutjhHEspMp z/YEVak+Ex0qnI4ghEDxZMhhnn5e1/YNTHKA85KUung+lBJG+aS7SbX9DS80JWUH lh4dXQKrhUj5V2k0Kdfy0uYTYdMUpyOmOxeYlF24YcPMbeU2sT/2Wii1BkGb06Z/ MQokTnHHDAm3EW5VvLo49Er15yvHZ4nHi6xSWjx9bXYZt0+tNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdsQFgzNUViZLFPZ9dsdirYJOcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMTRhMzRhZjgtYWU2ZC0z NzUzLTgyY2UtMWZlN2Y3OGQxNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHQ4uGvD1f1pwsr+i11etaH+J5BPvzU0PqgCrsF5cDmojCyevxJfgcW rnPCAmV9mvn0z97zGyAbeVBuN4mPSrMYdrDEMVU4z+b9Vu91NBP7H8GSf6CyYdWV j7kEJwbUckqn37emvaSEvEvzNIGddgQwCDxL0fSknAnJDvE0IHdHDwxVIF9SITFx Xa22O32kssUSyeF0OIaws0/9NF45+HvKWc3WP8GfH4xYlEYdG3W6AxiUTYkaz5y2 CsTi5HyMwxsKO8oeymi+LnlO6MiCZPxuTw0UUko0Kk1aIDaMn8QqeautRBneAQlr SYq1OKV2VU+kdhx4BEdEzx0nz3k7iO0= -----END CERTIFICATE-----Generated at Mon Aug 4 18:38:25 2025 by rpki-client