$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa File: 6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa (raw, json) Hash identifier: xTGiLVop+2e/dQY5A8+azn/SlqIzPnFW6bAfofEeBmc= Subject key identifier: 7C:3C:AB:8F:4D:22:4C:D2:91:BE:B1:D1:71:D5:B0:72:EB:C5:DA:9D Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584ABA80C98E2049C99153C82290 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 29 IP address blocks: 192.31.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:c9:8e:20:49:c9:91:53:c8:22:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=2dfc6f44-f31f-474e-a87a-5c02408d33d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:ca:03:a8:d0:a3:ee:23:30:92:0e:26:92: 78:4f:94:e8:7a:98:e5:45:d6:0b:38:d6:97:e8:32: 54:d5:51:77:ad:99:98:6e:98:af:fa:a7:46:5a:4b: 9a:2a:aa:c5:82:87:b4:39:93:f4:40:10:53:6e:86: 96:90:1c:ae:7c:15:5a:49:eb:9a:d9:01:41:8b:22: 19:7d:f5:80:a6:02:73:fe:61:45:f0:b1:2a:25:e8: 07:9c:f8:18:d2:83:42:6a:0b:f6:27:77:f0:ba:16: 9b:73:22:da:64:d8:3c:90:02:01:75:6a:43:b4:aa: 15:3c:60:03:82:87:61:36:31:52:4f:65:6c:b9:c4: 56:6a:0d:a6:59:72:4b:c8:14:53:64:fb:20:f9:39: 7b:90:91:d6:79:62:96:17:39:3c:c6:86:aa:d2:36: ae:aa:59:38:b5:73:86:64:a2:be:80:b0:f7:16:10: ba:1a:b2:14:4a:38:3d:4c:e0:d7:80:7e:8c:8e:d0: 73:ed:f4:a9:90:a2:55:6d:5c:a7:33:1d:39:4a:19: 99:d6:69:d1:3a:c0:ae:68:7e:93:02:d3:42:80:42: a6:c0:be:6d:3a:33:1d:b3:b5:8c:b2:46:92:dc:4a: ed:93:27:5f:d8:41:9a:34:98:23:be:2b:22:ec:e3: 68:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3C:AB:8F:4D:22:4C:D2:91:BE:B1:D1:71:D5:B0:72:EB:C5:DA:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.31.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e4:5d:54:34:4e:11:b3:46:bd:08:d3:f4:66:90:f5:0d:03: ba:5b:f6:e5:71:37:68:48:d9:f7:69:5d:86:29:4d:55:ff:35: a3:50:74:3d:b7:fb:3b:e1:ae:2e:b6:f4:ff:f2:e2:47:d6:1f: a8:01:a4:fc:ef:57:4e:7c:7e:23:d9:b8:dc:28:40:2f:50:1b: c8:31:a2:a9:d7:a4:58:18:5e:b0:b8:6d:40:8f:e3:bc:2a:36: 78:51:5b:ed:b3:bd:c0:9b:64:f7:3a:58:fb:46:3f:d1:22:b8: 41:53:55:3a:11:6f:37:c3:9a:3c:b3:ad:f2:77:ee:24:18:b9: 58:ea:7a:aa:9e:93:31:a9:1e:aa:96:ce:42:bd:b2:53:90:c6: 72:11:5e:23:20:69:03:9a:d3:18:d7:89:81:1a:16:de:74:15: 1f:a5:49:05:96:4b:9e:d5:87:6a:e5:97:c6:f8:63:0d:28:52: 5a:35:07:d3:cc:d1:26:f7:5f:e7:f2:8d:66:92:eb:cc:60:bb: bc:7c:3c:66:94:58:07:fa:24:c4:f3:60:a9:4d:59:03:56:7b: ae:d3:6c:46:98:bd:ba:63:d4:d1:7b:0b:5e:5e:22:81:a2:9b: d9:f5:78:28:50:f0:e8:3a:0c:99:f4:f7:c1:10:5d:8f:38:a4: 70:fa:3a:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6gMmOIEnJkVPIIpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk MmRmYzZmNDQtZjMxZi00NzRlLWE4N2EtNWMwMjQwOGQzM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWXKA6jQo+4jMJIOJpJ4T5ToepjlRdYLONaX 6DJU1VF3rZmYbpiv+qdGWkuaKqrFgoe0OZP0QBBTboaWkByufBVaSeua2QFBiyIZ ffWApgJz/mFF8LEqJegHnPgY0oNCagv2J3fwuhabcyLaZNg8kAIBdWpDtKoVPGAD godhNjFST2VsucRWag2mWXJLyBRTZPsg+Tl7kJHWeWKWFzk8xoaq0jauqlk4tXOG ZKK+gLD3FhC6GrIUSjg9TODXgH6MjtBz7fSpkKJVbVynMx05ShmZ1mnROsCuaH6T AtNCgEKmwL5tOjMds7WMskaS3Ertkydf2EGaNJgjvisi7ONo4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHw8q49NIkzSkb6x0XHVsHLrxdqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvNmJlMWM2OGMtNjFhNS0z ZTFmLWFiYjYtYWE5ZjY0MzRmMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHkXVQ0ThGzRr0I0/RmkPUNA7pb9uVxN2hI2fdpXYYpTVX/NaNQdD23 +zvhri629P/y4kfWH6gBpPzvV058fiPZuNwoQC9QG8gxoqnXpFgYXrC4bUCP47wq NnhRW+2zvcCbZPc6WPtGP9EiuEFTVToRbzfDmjyzrfJ37iQYuVjqeqqekzGpHqqW zkK9slOQxnIRXiMgaQOa0xjXiYEaFt50FR+lSQWWS57Vh2rll8b4Yw0oUlo1B9PM 0Sb3X+fyjWaS68xgu7x8PGaUWAf6JMTzYKlNWQNWe67TbEaYvbpj1NF7C15eIoGi m9n1eChQ8Og6DJn098EQXY84pHD6Os8= -----END CERTIFICATE-----Generated at Mon Aug 4 18:27:58 2025 by rpki-client