$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa File: db977bdb-7775-35b2-83b4-688332a81542.roa (raw, json) Hash identifier: 80I7AdPrnSmW5637di71oVt0469e1QZmIa5RksNmsY8= Subject key identifier: 78:2F:81:1A:C2:DA:4E:DA:C1:44:8B:5F:36:60:BF:B1:B1:46:72:2A Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584ABA80C9FBAD0505869EDB3280 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 29 IP address blocks: 192.31.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:c9:fb:ad:05:05:86:9e:db:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=d77d17df-4024-4b8a-b9f7-8c0e08e0d27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:58:28:7d:8d:f5:ca:13:b1:fe:b8:24:a2: 71:c9:44:6f:94:f9:79:9b:4e:8d:28:47:2c:a3:34: 0d:8c:ed:75:3f:c5:17:a4:65:a0:69:6d:22:72:52: 99:5c:27:93:42:e2:d2:1d:34:0f:09:c3:93:5e:d1: 31:84:6f:62:54:52:6f:00:5a:04:20:d6:13:4e:fc: 23:36:d0:5e:b7:a0:8b:e6:c0:f7:69:a2:a3:c3:0e: e6:15:38:cc:32:7e:2f:2c:e6:28:e9:82:32:3f:44: 5f:c9:16:f6:1c:b2:fb:02:2c:4b:fe:61:be:a2:1e: c0:1a:5a:99:a1:57:4e:f5:cb:dc:88:4a:4c:50:7a: 13:dd:c1:18:50:5a:1a:8f:90:8d:a6:50:88:ca:13: d0:84:5e:ea:d2:95:18:5d:e3:a0:38:fe:fb:d9:38: 16:a2:c6:07:72:0c:ad:fb:55:3e:dd:2a:ff:64:7f: f2:85:0e:0a:b6:6d:15:20:db:d4:71:99:68:12:5d: 79:14:ba:24:22:77:1e:d5:b4:59:74:89:c7:36:32: 8c:dc:de:75:ca:30:5b:1e:1c:ad:00:5c:9b:6f:82: 43:7c:d2:15:14:65:f8:5b:d1:6f:e3:a9:45:2c:ea: 03:0f:57:d6:0b:21:a4:a5:65:e3:53:45:c5:54:9e: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2F:81:1A:C2:DA:4E:DA:C1:44:8B:5F:36:60:BF:B1:B1:46:72:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.31.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:ab:66:17:24:de:c2:a0:9b:07:3b:de:14:5e:aa:7e:01:34: 57:eb:10:49:cc:bf:93:42:bb:c3:ae:88:d1:b8:3b:bc:fb:8d: 7b:c8:f7:95:a2:32:fe:47:ac:08:22:b0:86:60:38:ae:4d:6f: ca:a3:e3:35:a2:cf:5e:4e:1c:c8:a5:9f:3b:00:f0:ba:c6:2f: ab:43:ba:37:fa:c0:c1:38:ef:6c:b2:3c:8d:77:ab:6e:40:27: 02:44:24:a3:a4:3d:a2:e6:1c:fb:24:6e:30:03:63:d7:0e:b5: 72:a1:1b:4a:76:c8:88:b1:b0:a2:c2:f6:df:37:b1:ac:d5:4d: 71:02:cc:a3:27:fc:1a:f1:99:e7:02:f9:2f:8f:b7:e9:e5:24: e9:0e:25:28:67:79:34:3b:74:18:0f:17:11:c4:89:ed:7a:6e: 67:48:05:49:ec:8f:94:66:cd:a0:d1:3e:48:90:d9:e7:f5:5e: 2f:b2:ec:f4:f8:da:07:d3:cf:64:4e:15:59:f1:48:18:56:8d: a5:77:cc:dd:b1:5e:d4:24:c4:21:9c:a1:63:c0:dc:e7:1f:16: 4a:41:0f:cf:c0:86:49:d3:4b:f8:76:8a:ee:8a:2f:1c:bb:2b: 92:b4:4b:b8:c4:3f:93:4c:ee:6b:38:29:34:7d:33:2d:93:18: f2:09:c3:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6gMn7rQUFhp7bMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZDc3ZDE3ZGYtNDAyNC00YjhhLWI5ZjctOGMwZTA4ZTBkMjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXBYKH2N9coTsf64JKJxyURvlPl5m06NKEcs ozQNjO11P8UXpGWgaW0iclKZXCeTQuLSHTQPCcOTXtExhG9iVFJvAFoEINYTTvwj NtBet6CL5sD3aaKjww7mFTjMMn4vLOYo6YIyP0RfyRb2HLL7AixL/mG+oh7AGlqZ oVdO9cvciEpMUHoT3cEYUFoaj5CNplCIyhPQhF7q0pUYXeOgOP772TgWosYHcgyt +1U+3Sr/ZH/yhQ4Ktm0VINvUcZloEl15FLokInce1bRZdInHNjKM3N51yjBbHhyt AFybb4JDfNIVFGX4W9Fv46lFLOoDD1fWCyGkpWXjU0XFVJ5GrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgvgRrC2k7awUSLXzZgv7GxRnIqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvZGI5NzdiZGItNzc3NS0z NWIyLTgzYjQtNjg4MzMyYTgxNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM6rZhck3sKgmwc73hReqn4BNFfrEEnMv5NCu8OuiNG4O7z7jXvI95Wi Mv5HrAgisIZgOK5Nb8qj4zWiz15OHMilnzsA8LrGL6tDujf6wME472yyPI13q25A JwJEJKOkPaLmHPskbjADY9cOtXKhG0p2yIixsKLC9t83sazVTXECzKMn/BrxmecC +S+Pt+nlJOkOJShneTQ7dBgPFxHEie16bmdIBUnsj5RmzaDRPkiQ2ef1Xi+y7PT4 2gfTz2ROFVnxSBhWjaV3zN2xXtQkxCGcoWPA3OcfFkpBD8/AhknTS/h2iu6KLxy7 K5K0S7jEP5NM7ms4KTR9My2TGPIJw4U= -----END CERTIFICATE-----Generated at Wed Aug 6 10:05:53 2025 by rpki-client