$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0994ff44-b5e8-34eb-af1d-240a9e07d382.roa File: 0994ff44-b5e8-34eb-af1d-240a9e07d382.roa (raw, json) Hash identifier: jv7pmUpma3lt1+otpa9XPp8UjySm/rsC/I9pHRYWkGg= Subject key identifier: A1:60:32:0D:74:06:5B:8E:71:99:A9:8B:D8:83:1B:63:88:75:E1:7F Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584ABD4BB3A1B9557F3997234900 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0994ff44-b5e8-34eb-af1d-240a9e07d382.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 29 IP address blocks: 128.36.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:b3:a1:b9:55:7f:39:97:23:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=04c81864-9064-4e4a-a6a9-1deb4b2b7b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:4c:07:0e:46:ef:f8:af:a3:90:30:0d:ce: e6:d4:1c:e3:f3:b0:42:37:09:2a:f7:22:0b:a5:12: 03:5e:b5:1d:47:45:3e:55:87:f6:dc:f4:06:8b:02: 86:e0:4a:15:13:0b:41:a0:0f:bf:63:8a:2b:d8:19: 06:84:21:74:e7:cb:fa:45:05:6c:a7:63:86:4a:a1: b9:98:29:c4:10:95:77:2e:c1:b3:1d:5e:07:1e:e5: ba:30:e0:25:33:fe:3d:36:db:a6:34:30:84:fe:a6: 41:c7:25:c1:cd:a7:bc:88:39:64:69:47:85:0e:c1: e9:c2:da:52:50:6c:8e:07:c4:4f:23:17:0b:4a:f7: fe:2d:f7:75:c0:cf:bc:c5:5c:1a:5d:1e:8b:bf:25: 1c:4e:fc:d4:cc:61:09:3b:11:5b:13:a4:74:f4:11: b4:69:15:44:cb:64:1c:43:ab:e7:d4:51:bb:d6:f6: 2a:be:a1:16:f4:23:19:56:a4:07:21:3b:db:8f:6f: b4:72:92:4c:ae:d4:f2:07:35:9b:51:e8:10:01:f6: 77:4d:bf:f9:70:88:58:e6:4b:96:3c:17:d7:44:f0: 3e:85:e9:ec:9f:85:43:e1:e3:c3:b0:48:fe:ea:be: b3:62:61:7a:61:06:f8:39:bc:b4:cb:0b:53:2d:35: 71:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:60:32:0D:74:06:5B:8E:71:99:A9:8B:D8:83:1B:63:88:75:E1:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0994ff44-b5e8-34eb-af1d-240a9e07d382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 128.36.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:61:1b:22:4f:ae:d9:b4:ec:e7:48:1b:a8:ac:68:fa:a7:2c: 06:6c:30:5a:9f:1b:47:e5:91:ec:de:ad:11:c5:6b:57:f1:f8: b5:08:74:76:6e:c7:76:f4:43:cb:34:dc:67:db:2f:2d:78:ad: ed:10:ad:a9:09:a1:40:41:38:ea:cf:82:ca:a9:6e:91:b9:42: f1:8d:89:58:e9:a7:51:43:11:7a:51:ff:81:9e:9a:3f:40:43: d7:05:f1:21:94:63:80:f2:7e:cc:2e:78:7e:50:0c:59:28:c1: 5d:b3:76:e9:08:b4:f1:94:f1:7c:12:1d:37:30:04:25:64:78: a8:46:55:cf:06:6b:2e:0d:d8:a3:4c:73:ea:4f:f8:90:72:56: 2e:9b:db:c7:af:09:28:59:06:4d:8b:a9:49:10:48:01:dc:57: 57:0a:f2:e9:f2:e9:76:be:64:07:87:51:c4:1a:c4:92:d1:23: e9:01:06:8e:24:b4:5f:ed:fc:6e:0e:df:d7:f9:08:51:e6:bf: f9:e8:48:52:f3:94:7e:d4:25:c3:be:5a:22:5a:51:1c:95:bc: 68:af:84:89:e8:01:e7:52:3b:31:21:62:7a:f8:cb:05:d7:26: 79:9f:32:17:17:dc:5a:56:a3:74:cc:60:1a:0d:a5:b4:1c:0a: c7:84:5f:0a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEq9S7OhuVV/OZcjSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MDRjODE4NjQtOTA2NC00ZTRhLWE2YTktMWRlYjRiMmI3YjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4ZMBw5G7/ivo5AwDc7m1Bzj87BCNwkq9yIL pRIDXrUdR0U+VYf23PQGiwKG4EoVEwtBoA+/Y4or2BkGhCF058v6RQVsp2OGSqG5 mCnEEJV3LsGzHV4HHuW6MOAlM/49NtumNDCE/qZBxyXBzae8iDlkaUeFDsHpwtpS UGyOB8RPIxcLSvf+Lfd1wM+8xVwaXR6LvyUcTvzUzGEJOxFbE6R09BG0aRVEy2Qc Q6vn1FG71vYqvqEW9CMZVqQHITvbj2+0cpJMrtTyBzWbUegQAfZ3Tb/5cIhY5kuW PBfXRPA+hensn4VD4ePDsEj+6r6zYmF6YQb4Oby0ywtTLTVxxQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKFgMg10BluOcZmpi9iDG2OIdeF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvMDk5NGZmNDQtYjVlOC0z NGViLWFmMWQtMjQwYTllMDdkMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgCQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjWEbIk+u2bTs50gbqKxo+qcsBmwwWp8bR+WR7N6tEcVrV/H4tQh0dm7H dvRDyzTcZ9svLXit7RCtqQmhQEE46s+CyqlukblC8Y2JWOmnUUMRelH/gZ6aP0BD 1wXxIZRjgPJ+zC54flAMWSjBXbN26Qi08ZTxfBIdNzAEJWR4qEZVzwZrLg3Yo0xz 6k/4kHJWLpvbx68JKFkGTYupSRBIAdxXVwry6fLpdr5kB4dRxBrEktEj6QEGjiS0 X+38bg7f1/kIUea/+ehIUvOUftQlw75aIlpRHJW8aK+EiegB51I7MSFievjLBdcm eZ8yFxfcWlajdMxgGg2ltBwKx4RfCg== -----END CERTIFICATE-----Generated at Wed Aug 6 00:38:08 2025 by rpki-client