$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa File: 32fd2aed-084b-34c3-ad42-8399607ba2b0.roa (raw, json) Hash identifier: V2/cGUc/11orb1oe1y5kXJf6BgD+YQ2zda6O3m2iU6o= Subject key identifier: 02:DF:01:F8:4A:44:0E:DE:43:85:50:BB:94:99:04:68:59:BA:50:DF Certificate issuer: /CN=8b973e20-42b5-497e-831b-66d353f928d7 Certificate serial: 010D0C9F4328584A8A398DBFDB5205A8D6626300 Authority key identifier: 0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa Signing time: Tue 03 Jun 2025 22:14:54 +0000 ROA not before: Tue 03 Jun 2025 22:14:54 +0000 ROA not after: Mon 01 Sep 2025 22:14:54 +0000 asID: 6341 IP address blocks: 156.76.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8a:39:8d:bf:db:52:05:a8:d6:62:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b973e20-42b5-497e-831b-66d353f928d7 Validity Not Before: Jun 3 22:14:54 2025 GMT Not After : Sep 1 22:14:54 2025 GMT Subject: CN=85343e1e-ea5f-4d8c-89f5-25aeaba9dba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:57:9e:d0:ce:80:b0:09:05:4f:fa:dc:49:6a: 75:6d:9e:3c:88:26:65:4c:49:48:b6:f1:50:94:74: 52:df:87:22:df:c2:71:b7:94:f7:5a:50:20:08:5c: 29:b7:92:81:85:9e:32:17:d1:64:1c:34:83:a4:fe: e3:b8:59:34:74:82:c2:eb:16:79:03:25:50:57:23: 35:5a:01:0a:39:74:b3:1c:86:d1:54:1f:55:50:4b: a4:04:52:81:6b:0b:6e:e9:33:1d:2f:05:e2:8a:e1: 25:71:a2:0b:ea:ab:e0:7f:12:d3:24:0c:23:06:46: bf:b6:dc:f1:4a:79:3f:6f:38:c5:ca:20:ea:a0:bc: af:28:45:b6:1d:99:19:66:f7:e6:de:87:01:0d:63: 60:91:b7:8f:0f:49:4c:5a:9e:fb:79:42:92:3a:09: 7c:8f:c5:be:a7:5a:89:89:21:a5:8e:4c:87:35:32: d5:ff:96:7c:46:c1:68:c6:e7:c1:87:5e:7b:2f:3f: 7d:e8:c6:e9:46:49:18:c1:fd:57:93:71:ea:60:37: c9:84:2c:b5:1a:e2:0b:b0:e0:87:5e:f4:ff:49:c2: 83:8b:b8:cf:e0:6e:41:43:6e:02:35:06:13:ce:97: 6d:e1:f4:c4:ed:39:61:9f:36:5b:9a:7f:88:e2:ff: 94:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DF:01:F8:4A:44:0E:DE:43:85:50:BB:94:99:04:68:59:BA:50:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl X509v3 Authority Key Identifier: keyid:0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer sbgp-ipAddrBlock: critical IPv4: 156.76.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:72:77:49:a3:6e:99:51:3d:97:3a:6b:51:dd:2b:5c:f4:3f: d3:5d:95:fe:0c:aa:ed:ae:48:cb:3a:dc:35:49:38:38:e1:b5: b4:04:06:e6:48:1c:7e:1e:19:b1:49:7b:54:ec:af:81:66:3e: e2:7d:e3:5a:e1:38:1a:e6:9e:4d:1b:3c:56:9e:34:26:e3:b2: 65:8d:2b:ab:42:a7:80:5e:8d:63:9c:a7:af:6c:0b:42:dd:08: 5a:c6:2e:05:f1:6b:3d:b9:0c:cc:e7:dd:3e:43:7b:e6:d2:8c: 0b:51:0c:85:e4:f0:a7:58:af:ad:5b:9e:0d:37:ee:ec:f8:46: 3c:75:42:65:34:d8:54:8d:ed:22:07:71:90:55:84:18:83:5e: 62:7c:eb:f9:7d:7d:c6:3d:1e:62:a4:54:2f:21:51:8e:1f:32: 5e:d1:2f:9a:8a:c8:da:a3:ad:97:50:67:73:43:f0:74:ef:b7: 9b:6a:2f:56:76:ea:11:7f:af:77:64:21:57:d1:08:23:a8:35: fb:7a:81:1a:c1:31:43:bc:66:dd:02:19:fc:8c:80:1d:be:7c: b1:d7:a9:41:81:77:55:12:30:17:a0:7e:32:69:47:7d:d0:b0: ed:b6:73:99:02:dc:88:23:f3:a5:d8:c0:ef:83:e6:95:a5:0b: 99:34:c1:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqKOY2/21IFqNZiYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI5NzNlMjAtNDJiNS00OTdlLTgzMWItNjZkMzUzZjky OGQ3MB4XDTI1MDYwMzIyMTQ1NFoXDTI1MDkwMTIyMTQ1NFowLzEtMCsGA1UEAxMk ODUzNDNlMWUtZWE1Zi00ZDhjLTg5ZjUtMjVhZWFiYTlkYmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFee0M6AsAkFT/rcSWp1bZ48iCZlTElItvFQ lHRS34ci38Jxt5T3WlAgCFwpt5KBhZ4yF9FkHDSDpP7juFk0dILC6xZ5AyVQVyM1 WgEKOXSzHIbRVB9VUEukBFKBawtu6TMdLwXiiuElcaIL6qvgfxLTJAwjBka/ttzx Snk/bzjFyiDqoLyvKEW2HZkZZvfm3ocBDWNgkbePD0lMWp77eUKSOgl8j8W+p1qJ iSGljkyHNTLV/5Z8RsFoxufBh157Lz996MbpRkkYwf1Xk3HqYDfJhCy1GuILsOCH XvT/ScKDi7jP4G5BQ24CNQYTzpdt4fTE7TlhnzZbmn+I4v+UwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALfAfhKRA7eQ4VQu5SZBGhZulDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84Yjk3 M2UyMC00MmI1LTQ5N2UtODMxYi02NmQzNTNmOTI4ZDcvMzJmZDJhZWQtMDg0Yi0z NGMzLWFkNDItODM5OTYwN2JhMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGI5NzNlMjAtNDJiNS00OTdlLTgz MWItNjZkMzUzZjkyOGQ3LzhiOTczZTIwLTQyYjUtNDk3ZS04MzFiLTY2ZDM1M2Y5 MjhkNy5jcmwwHwYDVR0jBBgwFoAUDKLrkz+M3NmIkVq9lGUWMncCGXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84Yjk3M2UyMC00MmI1LTQ5N2UtODMxYi02NmQz NTNmOTI4ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnEwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlyd0mjbplRPZc6a1HdK1z0P9Ndlf4Mqu2uSMs63DVJODjhtbQEBuZI HH4eGbFJe1Tsr4FmPuJ941rhOBrmnk0bPFaeNCbjsmWNK6tCp4BejWOcp69sC0Ld CFrGLgXxaz25DMzn3T5De+bSjAtRDIXk8KdYr61bng037uz4Rjx1QmU02FSN7SIH cZBVhBiDXmJ86/l9fcY9HmKkVC8hUY4fMl7RL5qKyNqjrZdQZ3ND8HTvt5tqL1Z2 6hF/r3dkIVfRCCOoNft6gRrBMUO8Zt0CGfyMgB2+fLHXqUGBd1USMBegfjJpR33Q sO22c5kC3Igj86XYwO+D5pWlC5k0wRU= -----END CERTIFICATE-----Generated at Wed Aug 6 19:30:57 2025 by rpki-client