$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cf4d7e17-7766-395c-ac11-948fea074f37.roa File: cf4d7e17-7766-395c-ac11-948fea074f37.roa (raw, json) Hash identifier: EytE8l0EGS6SlcTiDAiJwmVGWuMDsPe7AdU4HXT/5JA= Subject key identifier: 21:22:06:A7:FF:23:28:D3:37:BE:E7:77:E2:67:36:F8:A8:5B:76:BF Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F4328584A841237B1B96BF7489DB1F600 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cf4d7e17-7766-395c-ac11-948fea074f37.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 136.23.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:37:b1:b9:6b:f7:48:9d:b1:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5de6636f-66c7-47bb-9efc-40d8416fdce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:bc:6b:d5:bb:b3:3b:03:73:f1:a3:39:36: 70:d4:aa:15:13:a2:7a:c6:0b:c5:59:cd:45:e2:c4: 6a:00:d0:49:df:e2:8e:1b:88:a2:4f:7d:d6:01:de: 44:3d:27:af:d4:6a:f3:9f:b5:39:e7:00:53:02:d5: c8:52:81:be:36:0a:e9:bb:94:e9:35:d5:b3:61:62: 95:89:5c:d8:dc:ba:00:8b:2a:fe:f1:64:c2:61:3b: 04:a8:12:8e:7e:32:bd:82:1b:72:c3:8c:56:af:34: 15:53:17:b6:cd:bc:e8:b1:06:aa:db:75:9f:4c:52: 90:17:d0:38:49:2d:6f:a4:9b:94:b0:07:c0:e2:c4: 47:a4:c3:07:3b:cc:4b:d8:79:32:63:2e:68:81:77: ea:a9:fa:92:ff:17:2a:85:63:80:2b:23:7d:c7:9b: e0:34:d7:1b:48:5a:f3:ae:ea:51:0c:15:96:aa:be: 01:59:89:6f:29:76:88:9c:45:47:c3:10:36:0c:8b: 92:03:bb:29:35:7c:42:89:21:68:38:1a:f6:ce:52: 93:69:89:9d:0d:42:eb:42:20:af:57:db:6f:86:67: 9d:6d:1b:6f:81:79:1f:c1:a5:92:84:e7:d7:aa:f5: 42:0e:a3:62:cf:bf:45:a9:34:f3:4f:df:57:a1:f5: 66:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:22:06:A7:FF:23:28:D3:37:BE:E7:77:E2:67:36:F8:A8:5B:76:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cf4d7e17-7766-395c-ac11-948fea074f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.23.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:9b:32:be:71:d4:50:39:1e:12:a7:e2:7a:76:2d:7c:5f:a5: 76:ee:17:33:ac:6a:b3:5f:32:53:7d:5a:ee:92:2f:8d:c0:32: 64:ca:90:23:e6:5f:53:67:2c:81:a4:0c:06:c1:d8:9b:e5:dc: 26:81:19:be:66:ea:77:1f:ed:0c:b5:b8:41:e1:5e:8a:1e:00: 48:2a:bc:32:26:11:28:c0:98:6b:8e:8f:19:21:8a:d2:88:66: b5:b4:6e:11:bc:ba:c5:38:ed:37:68:57:32:1e:57:03:19:69: 64:46:ea:5e:83:fb:bb:cd:2a:b9:45:15:c6:c5:d4:28:df:8b: 41:3e:b9:d6:cb:81:49:bf:14:5d:9d:d0:27:6e:c0:8e:21:10: 5a:4e:55:99:1a:87:d2:24:06:9e:c3:a9:17:ab:e3:0d:ac:57: 0d:a0:0a:db:90:b5:55:82:69:97:71:46:03:c0:8e:c0:45:b0: 19:58:5a:1a:27:1d:1a:36:3c:87:9b:10:3a:5f:f9:e0:3e:a1: 9c:09:ab:fa:f4:7c:1f:4f:b8:a1:c7:db:97:84:eb:57:8a:a7: 3f:ff:70:6e:68:a8:09:f8:b4:56:07:38:18:6b:ac:74:a2:00: 6d:21:35:83:35:6d:c7:32:21:01:bd:6b:ea:79:fd:a1:d4:3c: ad:cc:4d:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjexuWv3SJ2x9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NWRlNjYzNmYtNjZjNy00N2JiLTllZmMtNDBkODQxNmZkY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz28a9W7szsDc/GjOTZw1KoVE6J6xgvFWc1F 4sRqANBJ3+KOG4iiT33WAd5EPSev1Grzn7U55wBTAtXIUoG+Ngrpu5TpNdWzYWKV iVzY3LoAiyr+8WTCYTsEqBKOfjK9ghtyw4xWrzQVUxe2zbzosQaq23WfTFKQF9A4 SS1vpJuUsAfA4sRHpMMHO8xL2HkyYy5ogXfqqfqS/xcqhWOAKyN9x5vgNNcbSFrz rupRDBWWqr4BWYlvKXaInEVHwxA2DIuSA7spNXxCiSFoOBr2zlKTaYmdDULrQiCv V9tvhmedbRtvgXkfwaWShOfXqvVCDqNiz79FqTTzT99XofVmXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEiBqf/IyjTN77nd+JnNvioW3a/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvY2Y0ZDdlMTctNzc2Ni0z OTVjLWFjMTEtOTQ4ZmVhMDc0ZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAibMr5x1FA5HhKn4np2LXxfpXbuFzOsarNfMlN9Wu6SL43AMmTKkCPm X1NnLIGkDAbB2Jvl3CaBGb5m6ncf7Qy1uEHhXooeAEgqvDImESjAmGuOjxkhitKI ZrW0bhG8usU47TdoVzIeVwMZaWRG6l6D+7vNKrlFFcbF1Cjfi0E+udbLgUm/FF2d 0CduwI4hEFpOVZkah9IkBp7DqRer4w2sVw2gCtuQtVWCaZdxRgPAjsBFsBlYWhon HRo2PIebEDpf+eA+oZwJq/r0fB9PuKHH25eE61eKpz//cG5oqAn4tFYHOBhrrHSi AG0hNYM1bccyIQG9a+p5/aHUPK3MTV0= -----END CERTIFICATE-----Generated at Mon Aug 4 18:36:02 2025 by rpki-client