$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa File: 147822a5-c475-34ed-abbe-3e272f9028c9.roa (raw, json) Hash identifier: +rVyP2DlV8+6zPcdrAFvMuZChUXrAM1PNi2L0FOFizw= Subject key identifier: 67:77:4F:61:88:77:B5:EE:A0:F6:51:DD:14:07:DC:D3:1D:F9:80:64 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584ACE0B9F82FC51CD1D71E0F900 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 76.76.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:9f:82:fc:51:cd:1d:71:e0:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=23441cd1-4695-47f4-9a0c-982ea733499a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:52:52:b6:1f:82:ff:c4:d2:cf:24:53:c3: ce:ad:b7:23:07:b3:cb:34:fb:47:86:bb:11:1c:7c: 8d:71:37:dc:18:be:15:d1:f5:9b:2d:08:e8:b6:aa: 29:b3:98:c6:b6:0d:d2:12:a0:3a:de:3e:06:d9:30: 8a:a4:aa:44:f5:d1:d1:2b:84:1f:17:8b:eb:d9:5c: 9b:ba:44:4a:33:38:98:e1:02:24:2e:70:fd:0e:b2: 6d:b4:bd:66:c2:f3:f0:c8:b0:3a:a5:9c:62:58:a5: 2d:24:94:38:e8:55:7e:02:a6:2d:55:02:23:fb:8b: 3b:a7:f5:59:82:07:91:8a:3c:fc:d6:45:44:e6:2a: 74:ca:4f:fd:4a:1e:72:6c:47:9d:6c:07:51:c8:57: 59:f5:ed:78:ca:b4:e2:2d:87:04:28:ed:1b:e9:a5: f8:5c:63:f4:26:24:ca:84:74:45:d2:bf:73:c7:eb: 8c:2f:00:9b:57:9b:f9:fb:b4:77:9c:ae:a9:02:e7: 2b:ba:60:5a:ca:e9:c4:50:d3:d9:84:6d:bb:aa:d5: 68:cb:57:ac:f8:32:52:41:e1:c9:9a:8f:60:c6:21: fd:bb:49:c3:de:a0:c4:8c:d0:81:35:a1:98:bf:f8: 1c:ad:c1:37:55:33:dc:df:ec:4d:7c:3a:25:47:6d: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:77:4F:61:88:77:B5:EE:A0:F6:51:DD:14:07:DC:D3:1D:F9:80:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 76.76.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a3:90:d7:58:04:07:15:d4:9a:c7:b5:2b:97:a2:35:3e:41: f5:36:e8:c5:72:bf:40:d3:5a:b7:86:33:52:26:ef:6e:b9:e0: 6d:78:06:93:64:2e:a8:8c:67:aa:be:95:dd:a7:61:3c:b3:32: 59:51:83:d7:4f:78:9b:82:9c:c1:26:e0:87:1e:f0:1b:9d:36: 0d:50:40:eb:c6:88:87:8b:98:07:0c:7b:f5:ce:90:60:04:b0: 6f:d4:cb:19:f4:f4:b2:62:62:59:d5:96:1d:94:d2:b6:24:5a: 13:ba:e7:75:53:70:a2:24:80:be:4a:7c:0e:c8:40:da:dd:30: 66:5c:2c:7c:f0:e7:02:3c:e1:5a:a8:38:88:8f:51:7f:3b:04: 1c:42:ce:17:45:2f:6d:56:13:4b:e0:cd:cf:a9:cf:3e:48:24: 51:40:2a:87:b5:6c:94:d8:40:4d:4f:19:fd:22:f5:a3:a7:a7: 8f:5f:af:1c:67:3b:39:83:16:d6:27:57:41:4d:ad:1a:f4:d4: 90:9d:2e:a9:b7:1f:d7:50:0d:f1:9e:06:d5:d1:fa:18:24:50: e3:7b:20:7b:da:7f:74:c6:05:03:29:4b:cd:47:5e:cc:bd:a1: 7d:f9:f1:00:92:7b:5d:ba:a2:01:0a:ae:21:19:0f:27:6c:53: 06:ed:20:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5+C/FHNHXHg+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MjM0NDFjZDEtNDY5NS00N2Y0LTlhMGMtOTgyZWE3MzM0OTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4RSUrYfgv/E0s8kU8POrbcjB7PLNPtHhrsR HHyNcTfcGL4V0fWbLQjotqops5jGtg3SEqA63j4G2TCKpKpE9dHRK4QfF4vr2Vyb ukRKMziY4QIkLnD9DrJttL1mwvPwyLA6pZxiWKUtJJQ46FV+AqYtVQIj+4s7p/VZ ggeRijz81kVE5ip0yk/9Sh5ybEedbAdRyFdZ9e14yrTiLYcEKO0b6aX4XGP0JiTK hHRF0r9zx+uMLwCbV5v5+7R3nK6pAucrumBayunEUNPZhG27qtVoy1es+DJSQeHJ mo9gxiH9u0nD3qDEjNCBNaGYv/gcrcE3VTPc3+xNfDolR22eMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd3T2GId7XuoPZR3RQH3NMd+YBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvMTQ3ODIyYTUtYzQ3NS0z NGVkLWFiYmUtM2UyNzJmOTAyOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATEwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGjkNdYBAcV1JrHtSuXojU+QfU26MVyv0DTWreGM1Im72654G14BpNk LqiMZ6q+ld2nYTyzMllRg9dPeJuCnMEm4Ice8BudNg1QQOvGiIeLmAcMe/XOkGAE sG/Uyxn09LJiYlnVlh2U0rYkWhO653VTcKIkgL5KfA7IQNrdMGZcLHzw5wI84Vqo OIiPUX87BBxCzhdFL21WE0vgzc+pzz5IJFFAKoe1bJTYQE1PGf0i9aOnp49frxxn OzmDFtYnV0FNrRr01JCdLqm3H9dQDfGeBtXR+hgkUON7IHvaf3TGBQMpS81HXsy9 oX358QCSe126ogEKriEZDydsUwbtIH8= -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:06 2025 by rpki-client