$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/836ea4ce-858f-30f8-a6a2-0103c3000406.roa File: 836ea4ce-858f-30f8-a6a2-0103c3000406.roa (raw, json) Hash identifier: LpB2c9vJfirJPoWZx6hn373PH5v4rOWWhUA4N3GMByc= Subject key identifier: 2D:C0:3A:F8:42:8B:6F:E7:08:67:1E:0B:F5:5D:CA:E2:FD:D5:23:85 Certificate issuer: /CN=874f7cf0-cad4-4f53-86bd-48dca2b8186c Certificate serial: 010D0C9F4328584AECC1441EC730D391EFC2BA00 Authority key identifier: 7F:05:9A:C0:C8:9C:A6:1E:23:AD:EF:1D:19:66:B8:21:37:FB:92:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/836ea4ce-858f-30f8-a6a2-0103c3000406.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 22603 IP address blocks: 2607:4ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/874f7cf0-cad4-4f53-86bd-48dca2b8186c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/874f7cf0-cad4-4f53-86bd-48dca2b8186c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:44:1e:c7:30:d3:91:ef:c2:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874f7cf0-cad4-4f53-86bd-48dca2b8186c Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d734a13e-eb5e-4f96-a3a2-3b35973709e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:0e:aa:78:02:60:5e:f9:18:98:b9:35:a2: a8:e6:1d:3d:3c:20:43:33:2c:55:d9:c6:f9:ba:49: 66:50:31:62:5a:c3:df:4c:74:61:af:e2:ba:b8:42: d6:fc:c6:5f:5e:34:66:1b:ce:e6:a2:d9:94:93:3b: dc:d9:1c:b3:2a:f4:d7:e1:5c:46:8d:4c:3a:fd:2f: 41:ff:a9:0d:7f:c2:c8:bf:c7:c8:78:29:f2:84:7d: 9a:dd:b5:e0:22:cb:87:4d:9e:08:9a:5f:10:87:27: 73:a1:82:a3:40:05:95:83:ff:e7:c5:af:0c:ad:65: b3:e9:95:9a:a1:b6:4b:da:fc:2e:be:af:fa:79:87: 94:a7:24:cc:ee:72:d0:2e:55:25:94:9d:85:6e:c7: b7:46:1d:3c:c0:42:52:b2:30:34:9d:11:c3:6b:6b: 0d:e7:5f:d6:5f:3e:ff:fc:81:62:ae:9e:e5:a3:33: d1:81:a0:fd:bc:d6:bf:60:91:cd:dd:8b:af:94:13: 19:7f:05:13:1f:8a:26:ec:17:8a:06:b0:1c:f2:10: c8:d1:f4:a6:7c:38:2c:3e:65:04:65:e6:75:3a:be: 8d:47:f4:e1:95:1b:cf:d4:7a:0a:a9:e6:1e:45:4f: 9a:59:aa:c5:c5:48:7c:ad:c2:29:4a:0f:30:e7:2d: 48:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C0:3A:F8:42:8B:6F:E7:08:67:1E:0B:F5:5D:CA:E2:FD:D5:23:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/836ea4ce-858f-30f8-a6a2-0103c3000406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c/874f7cf0-cad4-4f53-86bd-48dca2b8186c.crl X509v3 Authority Key Identifier: keyid:7F:05:9A:C0:C8:9C:A6:1E:23:AD:EF:1D:19:66:B8:21:37:FB:92:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/874f7cf0-cad4-4f53-86bd-48dca2b8186c.cer sbgp-ipAddrBlock: critical IPv6: 2607:4ec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:8f:d5:c1:5f:fd:b8:b4:90:ab:e0:b9:f6:14:ab:f1:1b:37: 07:87:2e:64:1a:f4:07:27:bc:21:a1:4b:90:da:d9:88:0f:d9: 84:c4:20:21:74:bd:74:c1:09:53:e4:c0:c3:c6:6c:e0:a3:fb: 32:fb:21:60:38:08:6f:67:03:d4:79:21:03:17:48:fa:69:0f: 8a:2f:16:4d:8b:b5:93:d4:be:45:bc:b6:5e:06:54:b2:3a:0d: 68:f2:4e:0d:0d:41:68:bc:0b:b3:c3:7d:ec:10:30:fd:58:31: 6e:91:0d:6e:c7:56:50:5a:c3:ba:6a:52:b4:72:5f:61:ef:77: 85:7e:a4:47:ce:19:a8:aa:af:d2:3d:f0:db:6d:09:dd:57:0f: 85:98:6f:0b:bf:fe:0f:2b:19:eb:36:08:b8:4c:2c:7f:29:07: cb:36:db:9a:1a:0a:ec:2b:27:9d:72:3c:1a:98:b2:7e:32:b9: c9:93:3e:b6:23:d6:a5:f2:93:57:bb:58:6e:82:31:31:b8:ed: ec:7b:32:a8:37:29:e5:8f:1e:4c:3e:81:4e:4a:e3:e1:90:0e: 83:7a:3e:52:ae:60:77:c2:e6:08:47:9f:6e:78:c9:99:a8:b6: df:d8:f5:96:85:cc:98:20:9f:e0:79:31:b5:7a:49:53:78:54: e5:4b:07:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErswUQexzDTke/CugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc0ZjdjZjAtY2FkNC00ZjUzLTg2YmQtNDhkY2EyYjgx ODZjMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDczNGExM2UtZWI1ZS00Zjk2LWEzYTItM2IzNTk3MzcwOWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVwOqngCYF75GJi5NaKo5h09PCBDMyxV2cb5 uklmUDFiWsPfTHRhr+K6uELW/MZfXjRmG87motmUkzvc2RyzKvTX4VxGjUw6/S9B /6kNf8LIv8fIeCnyhH2a3bXgIsuHTZ4Iml8QhydzoYKjQAWVg//nxa8MrWWz6ZWa obZL2vwuvq/6eYeUpyTM7nLQLlUllJ2Fbse3Rh08wEJSsjA0nRHDa2sN51/WXz7/ /IFirp7lozPRgaD9vNa/YJHN3YuvlBMZfwUTH4om7BeKBrAc8hDI0fSmfDgsPmUE ZeZ1Or6NR/ThlRvP1HoKqeYeRU+aWarFxUh8rcIpSg8w5y1IgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC3AOvhCi2/nCGceC/VdyuL91SOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NzRm N2NmMC1jYWQ0LTRmNTMtODZiZC00OGRjYTJiODE4NmMvODM2ZWE0Y2UtODU4Zi0z MGY4LWE2YTItMDEwM2MzMDAwNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODc0ZjdjZjAtY2FkNC00ZjUzLTg2 YmQtNDhkY2EyYjgxODZjLzg3NGY3Y2YwLWNhZDQtNGY1My04NmJkLTQ4ZGNhMmI4 MTg2Yy5jcmwwHwYDVR0jBBgwFoAUfwWawMicph4jre8dGWa4ITf7kmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NzRmN2NmMC1jYWQ0LTRmNTMtODZiZC00OGRj YTJiODE4NmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdOwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCsj9XBX/24tJCr4Ln2FKvxGzcHhy5kGvQHJ7whoUuQ2tmID9mExCAh dL10wQlT5MDDxmzgo/sy+yFgOAhvZwPUeSEDF0j6aQ+KLxZNi7WT1L5FvLZeBlSy Og1o8k4NDUFovAuzw33sEDD9WDFukQ1ux1ZQWsO6alK0cl9h73eFfqRHzhmoqq/S PfDbbQndVw+FmG8Lv/4PKxnrNgi4TCx/KQfLNtuaGgrsKyedcjwamLJ+MrnJkz62 I9al8pNXu1hugjExuO3sezKoNynljx5MPoFOSuPhkA6Dej5SrmB3wuYIR59ueMmZ qLbf2PWWhcyYIJ/geTG1eklTeFTlSwcT -----END CERTIFICATE-----Generated at Sun Aug 24 00:05:35 2025 by rpki-client