$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/36f08754-6d7e-3d01-9dbb-aa438925ebae.roa File: 36f08754-6d7e-3d01-9dbb-aa438925ebae.roa (raw, json) Hash identifier: c7tCoLe3Pa17F0S7Tj6vnxgHbtJMb5vm+yvrTD+HU9s= Subject key identifier: 4B:8B:4B:B7:97:13:F7:AD:5E:AC:E2:A0:26:26:1B:8E:79:2B:6F:29 Certificate issuer: /CN=414cb704-0d20-4248-bc5a-2b33ce66329d Certificate serial: 010D0C9F4328584A7C14985FB5B937F417521D00 Authority key identifier: 05:D3:B2:0E:01:77:B3:F0:76:0F:60:53:A5:55:70:7E:68:70:2F:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/36f08754-6d7e-3d01-9dbb-aa438925ebae.roa Signing time: Fri 11 Jul 2025 16:22:30 +0000 ROA not before: Fri 11 Jul 2025 16:22:30 +0000 ROA not after: Thu 09 Oct 2025 16:22:30 +0000 asID: 32181 IP address blocks: 2607:adc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7c:14:98:5f:b5:b9:37:f4:17:52:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=414cb704-0d20-4248-bc5a-2b33ce66329d Validity Not Before: Jul 11 16:22:30 2025 GMT Not After : Oct 9 16:22:30 2025 GMT Subject: CN=b25c6549-7ee4-4668-ac68-4d4d99a499d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:63:78:23:38:99:7a:2a:9c:6e:51:06:b6:3c: 0b:c7:04:3a:59:d2:e8:fb:a0:38:90:df:15:77:e3: 3c:4b:31:c2:06:f5:4d:5a:bd:32:4b:84:37:27:e5: d5:ff:6e:9e:81:3d:62:d0:20:63:d6:52:49:dd:34: 35:a6:60:fb:6f:d1:08:6e:d9:7d:a1:6a:ce:ab:61: a3:76:8b:16:d8:11:1a:0f:a0:09:ea:90:6e:5a:29: 77:b3:4d:15:08:fb:6c:3c:6a:9f:e1:a1:46:4d:aa: ca:41:b1:45:91:a4:51:4a:09:d1:cc:f5:50:a7:25: 65:c3:7d:f4:6d:9c:54:60:3c:b2:b6:c4:36:56:b5: 19:65:35:de:b3:46:88:b2:cb:1d:a2:c5:d4:fd:d6: 32:6b:00:26:6f:86:51:fc:71:42:5d:ac:b3:47:b2: d6:59:5f:8b:8e:df:0f:0e:fd:26:14:c7:51:93:5a: 74:9e:7b:64:6d:24:64:02:da:e2:33:45:a1:40:1d: d3:b3:b3:f1:61:0e:43:73:d1:3f:68:4b:c8:91:49: bd:32:6a:e0:11:f6:6d:7d:11:38:ec:b7:6c:be:74: cc:ca:2f:fa:38:d6:c4:18:80:76:f0:4c:75:ff:46: d7:6f:e0:eb:a7:91:8d:83:a9:9e:9d:73:ac:7b:14: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8B:4B:B7:97:13:F7:AD:5E:AC:E2:A0:26:26:1B:8E:79:2B:6F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/36f08754-6d7e-3d01-9dbb-aa438925ebae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.crl X509v3 Authority Key Identifier: keyid:05:D3:B2:0E:01:77:B3:F0:76:0F:60:53:A5:55:70:7E:68:70:2F:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer sbgp-ipAddrBlock: critical IPv6: 2607:adc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:02:88:ee:c2:2a:03:96:52:cd:c5:2d:35:32:63:04:18:81: c1:6f:69:f4:fa:7e:8b:38:32:3a:17:7c:b7:c1:b6:04:97:68: 45:46:f7:eb:c1:6d:55:92:2a:8a:09:82:71:4d:71:af:cd:44: ef:dd:f1:79:28:aa:b6:49:08:a0:34:6b:64:3e:fa:78:fa:c0: f7:5f:da:00:3c:8b:ae:40:ad:e9:17:80:4f:43:12:d5:0e:58: 5d:ac:cb:7a:46:c4:a0:10:93:70:51:38:99:f9:10:8d:5c:03: 8d:5c:a9:19:8a:ed:6e:ed:e5:57:1b:cc:b0:19:2c:a4:6c:1d: 5d:9a:c6:be:b3:b2:d9:2f:23:76:bc:da:95:3e:1c:84:22:04: 28:82:ad:c2:89:61:f8:75:01:99:b6:bd:3a:94:59:fe:b0:ab: c1:2e:99:49:03:48:8b:ef:eb:ea:b8:59:d5:35:bc:5d:06:ed: e8:cd:48:93:da:1f:c0:ea:81:d8:95:de:4c:7a:54:f1:5f:e5: fd:71:37:09:3a:a0:f8:f5:69:5f:c6:ab:2d:d0:24:75:f6:7b: 43:12:33:e0:f5:e2:66:b1:b0:e3:d9:40:42:3d:1e:b5:59:58: 61:79:52:06:0f:65:e1:5e:13:75:9b:f8:3d:29:ee:a0:4e:fd: a8:f1:24:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp8FJhftbk39BdSHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE0Y2I3MDQtMGQyMC00MjQ4LWJjNWEtMmIzM2NlNjYz MjlkMB4XDTI1MDcxMTE2MjIzMFoXDTI1MTAwOTE2MjIzMFowLzEtMCsGA1UEAxMk YjI1YzY1NDktN2VlNC00NjY4LWFjNjgtNGQ0ZDk5YTQ5OWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2N4IziZeiqcblEGtjwLxwQ6WdLo+6A4kN8V d+M8SzHCBvVNWr0yS4Q3J+XV/26egT1i0CBj1lJJ3TQ1pmD7b9EIbtl9oWrOq2Gj dosW2BEaD6AJ6pBuWil3s00VCPtsPGqf4aFGTarKQbFFkaRRSgnRzPVQpyVlw330 bZxUYDyytsQ2VrUZZTXes0aIsssdosXU/dYyawAmb4ZR/HFCXayzR7LWWV+Ljt8P Dv0mFMdRk1p0nntkbSRkAtriM0WhQB3Ts7PxYQ5Dc9E/aEvIkUm9MmrgEfZtfRE4 7LdsvnTMyi/6ONbEGIB28Ex1/0bXb+Drp5GNg6menXOsexQW8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEuLS7eXE/etXqzioCYmG455K28pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRj YjcwNC0wZDIwLTQyNDgtYmM1YS0yYjMzY2U2NjMyOWQvMzZmMDg3NTQtNmQ3ZS0z ZDAxLTlkYmItYWE0Mzg5MjVlYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDE0Y2I3MDQtMGQyMC00MjQ4LWJj NWEtMmIzM2NlNjYzMjlkLzQxNGNiNzA0LTBkMjAtNDI0OC1iYzVhLTJiMzNjZTY2 MzI5ZC5jcmwwHwYDVR0jBBgwFoAUBdOyDgF3s/B2D2BTpVVwfmhwL0MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRjYjcwNC0wZDIwLTQyNDgtYmM1YS0yYjMz Y2U2NjMyOWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgetwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkAojuwioDllLNxS01MmMEGIHBb2n0+n6LODI6F3y3wbYEl2hFRvfr wW1VkiqKCYJxTXGvzUTv3fF5KKq2SQigNGtkPvp4+sD3X9oAPIuuQK3pF4BPQxLV DlhdrMt6RsSgEJNwUTiZ+RCNXAONXKkZiu1u7eVXG8ywGSykbB1dmsa+s7LZLyN2 vNqVPhyEIgQogq3CiWH4dQGZtr06lFn+sKvBLplJA0iL7+vquFnVNbxdBu3ozUiT 2h/A6oHYld5MelTxX+X9cTcJOqD49Wlfxqst0CR19ntDEjPg9eJmsbDj2UBCPR61 WVhheVIGD2XhXhN1m/g9Ke6gTv2o8SRM -----END CERTIFICATE-----Generated at Sun Jul 20 17:41:12 2025 by rpki-client