$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8/b36e2428-bc21-3c86-b883-7607a3432e79.roa File: b36e2428-bc21-3c86-b883-7607a3432e79.roa (raw, json) Hash identifier: jRLfB5tR8H0Vjy6SuFP9BpHWhtpuWhS/R8obMen15kY= Subject key identifier: 02:03:32:1A:FA:50:B0:9E:84:28:1D:A5:68:37:4A:25:76:D2:1C:27 Certificate issuer: /CN=a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8 Certificate serial: 010D0C9F4328584AB91B91F0D01547DE9D424380 Authority key identifier: 56:D5:6B:93:23:FE:BC:C0:CB:4F:A4:94:52:CC:0F:AE:44:19:ED:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8/b36e2428-bc21-3c86-b883-7607a3432e79.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396982 IP address blocks: 144.86.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8/a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8/a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:91:f0:d0:15:47:de:9d:42:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=86d6b4ab-28a7-4852-a51b-2cdfab2fddca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f1:41:3d:08:db:af:49:e6:4a:00:24:1b:44: 9a:17:93:4c:f0:7b:b9:f4:8b:81:21:14:85:4c:fd: 79:f3:d8:77:b5:e7:4b:35:54:ce:77:c5:72:4e:d8: c7:c3:2a:63:2f:24:e0:46:81:e8:9a:c5:59:38:af: c2:82:83:af:d7:a6:a6:0a:63:a4:7b:9a:ad:ce:d6: 8b:71:14:59:d0:be:a8:bc:22:26:9a:91:30:8a:06: 4e:2c:61:b2:4f:d3:ec:95:83:9d:0a:79:d7:fa:80: 15:a5:a7:2e:37:34:03:b1:a7:14:8a:67:04:3d:10: 3b:f7:ea:aa:c6:aa:f3:45:5b:b6:57:77:fd:c6:6b: aa:2b:1b:a7:52:cb:90:5b:74:b2:f8:37:a9:b4:74: ed:68:01:2e:26:6d:f1:c1:69:dc:7f:de:7a:c4:81: ef:60:2e:89:e2:14:6d:cb:41:11:02:46:d8:a4:c7: e1:77:f6:ae:d5:e5:66:ca:cd:a8:ec:d7:b4:8b:a1: 66:33:b1:96:f3:0b:f5:13:b5:13:70:27:d9:71:96: 3c:16:77:80:9d:a2:31:f6:e6:4d:73:9a:03:da:65: 02:98:54:ed:02:f3:b5:5a:1b:eb:bf:4c:75:8e:c8: cb:66:d3:c3:33:a3:54:b2:03:7b:77:69:2c:5e:a9: 40:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:03:32:1A:FA:50:B0:9E:84:28:1D:A5:68:37:4A:25:76:D2:1C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8/b36e2428-bc21-3c86-b883-7607a3432e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8/a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8.crl X509v3 Authority Key Identifier: keyid:56:D5:6B:93:23:FE:BC:C0:CB:4F:A4:94:52:CC:0F:AE:44:19:ED:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a4a03ffa-3d5f-43fc-8837-0e8d759ab5e8.cer sbgp-ipAddrBlock: critical IPv4: 144.86.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:cc:f0:62:a3:fc:32:da:5c:c1:67:d5:1d:bd:94:64:91:7a: 0d:cb:4c:a3:92:a8:71:44:58:5f:35:2c:8b:5f:5b:d0:fd:ba: 9f:5e:f8:bd:1a:14:28:6d:e1:14:84:b1:62:9b:71:d2:b7:16: e4:66:e7:d0:ca:24:c7:91:b4:d5:3a:cc:af:87:70:7e:29:f0: aa:e7:f4:37:54:b9:26:f6:02:ae:86:e7:d4:37:76:9b:39:c1: ed:bd:5f:fa:11:a9:52:7d:e4:77:f3:ab:18:9f:d8:d7:37:a9: e0:f9:b5:85:36:47:6f:63:ca:f1:5e:2b:09:c7:fe:6f:0b:29: 43:6b:1c:c5:62:80:7b:d5:c8:19:d8:27:75:f3:6d:d6:ad:2a: 77:34:7e:26:2a:7c:5c:53:63:da:d1:d5:ad:6d:64:90:eb:44: 4c:c7:69:86:67:e9:93:39:83:23:87:60:a2:7f:28:92:62:77: f7:98:51:6d:e1:a7:e4:94:f9:38:e0:85:da:3f:da:7d:43:63: 51:1d:35:dd:aa:91:12:27:25:2c:8a:84:cd:8b:af:ba:2c:10: ed:ae:1f:5c:59:7a:0f:83:f2:ae:79:65:f0:3b:7d:f4:85:65: 01:c5:af:7d:b8:3f:a6:c7:12:fa:9c:08:64:58:03:80:cc:f2: 82:57:0c:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5Hw0BVH3p1CQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRhMDNmZmEtM2Q1Zi00M2ZjLTg4MzctMGU4ZDc1OWFi NWU4MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODZkNmI0YWItMjhhNy00ODUyLWE1MWItMmNkZmFiMmZkZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPFBPQjbr0nmSgAkG0SaF5NM8Hu59IuBIRSF TP1589h3tedLNVTOd8VyTtjHwypjLyTgRoHomsVZOK/CgoOv16amCmOke5qtztaL cRRZ0L6ovCImmpEwigZOLGGyT9PslYOdCnnX+oAVpacuNzQDsacUimcEPRA79+qq xqrzRVu2V3f9xmuqKxunUsuQW3Sy+DeptHTtaAEuJm3xwWncf956xIHvYC6J4hRt y0ERAkbYpMfhd/au1eVmys2o7Ne0i6FmM7GW8wv1E7UTcCfZcZY8FneAnaIx9uZN c5oD2mUCmFTtAvO1Whvrv0x1jsjLZtPDM6NUsgN7d2ksXqlAXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIDMhr6ULCehCgdpWg3SiV20hwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNGEw M2ZmYS0zZDVmLTQzZmMtODgzNy0wZThkNzU5YWI1ZTgvYjM2ZTI0MjgtYmMyMS0z Yzg2LWI4ODMtNzYwN2EzNDMyZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTRhMDNmZmEtM2Q1Zi00M2ZjLTg4 MzctMGU4ZDc1OWFiNWU4L2E0YTAzZmZhLTNkNWYtNDNmYy04ODM3LTBlOGQ3NTlh YjVlOC5jcmwwHwYDVR0jBBgwFoAUVtVrkyP+vMDLT6SUUswPrkQZ7c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNGEwM2ZmYS0zZDVmLTQzZmMtODgzNy0wZThk NzU5YWI1ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFatMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzM8GKj/DLaXMFn1R29lGSReg3LTKOSqHFEWF81LItfW9D9up9e+L0a FCht4RSEsWKbcdK3FuRm59DKJMeRtNU6zK+HcH4p8Krn9DdUuSb2Aq6G59Q3dps5 we29X/oRqVJ95Hfzqxif2Nc3qeD5tYU2R29jyvFeKwnH/m8LKUNrHMVigHvVyBnY J3XzbdatKnc0fiYqfFxTY9rR1a1tZJDrREzHaYZn6ZM5gyOHYKJ/KJJid/eYUW3h p+SU+Tjghdo/2n1DY1EdNd2qkRInJSyKhM2Lr7osEO2uH1xZeg+D8q55ZfA7ffSF ZQHFr324P6bHEvqcCGRYA4DM8oJXDIg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:01:10 2025 by rpki-client