$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/232197a3-ae46-3995-9e63-d41aa97f6f15.roa File: 232197a3-ae46-3995-9e63-d41aa97f6f15.roa (raw, json) Hash identifier: r/Y96uxDO66e2xpG6HF5DWjPV2FqYkHYJushIPvnfpc= Subject key identifier: B6:A5:A9:99:BF:88:DA:B6:E9:4C:89:88:1C:32:07:C8:26:90:10:1E Certificate issuer: /CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187 Certificate serial: 010D0C9F4328584ACB40E20670DBA0F914005200 Authority key identifier: 8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/232197a3-ae46-3995-9e63-d41aa97f6f15.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 5065 IP address blocks: 2606:58c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:e2:06:70:db:a0:f9:14:00:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=2db2f6fc-df2e-4b55-9ff7-2f2e842b04b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0a:f3:66:2d:5d:57:aa:cb:39:12:55:74:23: 2a:48:bb:fb:75:e5:46:cc:99:5b:40:f6:d9:5f:ce: 27:9c:8d:d0:43:8f:2b:90:68:30:2c:39:5a:63:a6: 1b:cc:56:f8:88:da:af:48:ea:1b:a3:11:8c:c5:be: 1a:35:4a:13:88:90:90:66:28:f8:c8:e6:50:61:b5: 85:97:25:02:43:61:f6:4e:7b:65:af:77:ed:b8:93: fc:ad:68:31:7d:14:cc:f4:c7:14:56:12:2c:da:27: 8f:1f:f6:ee:21:13:11:50:95:e1:66:55:59:52:af: 0d:85:06:a0:6a:9a:9e:94:4e:74:c9:5f:52:54:60: 39:82:cd:e0:96:58:b8:b7:3d:44:63:ac:62:0e:6e: b9:6e:a3:5c:13:a4:c2:c6:7d:49:de:b9:46:9a:74: b0:cb:07:8c:27:09:f3:4a:c7:7c:1b:6c:32:74:33: e8:ac:cd:5b:2d:17:80:c5:2e:68:d3:0a:22:56:37: 24:f1:3d:6f:1d:23:1c:42:6d:6a:de:fa:38:d9:8a: c0:fe:5c:3b:df:90:fd:81:f1:1d:27:dd:28:1d:81: 89:de:c6:31:02:e2:61:02:c8:4c:13:9e:73:6d:3f: 23:be:aa:45:f8:d6:46:b8:d1:d5:bb:32:ff:29:2d: 4d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A5:A9:99:BF:88:DA:B6:E9:4C:89:88:1C:32:07:C8:26:90:10:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/232197a3-ae46-3995-9e63-d41aa97f6f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl X509v3 Authority Key Identifier: keyid:8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer sbgp-ipAddrBlock: critical IPv6: 2606:58c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:16:e4:7e:56:1d:af:76:82:93:9e:0a:f9:78:81:13:df:c9: 3f:d5:02:18:f0:4f:4f:97:53:29:5f:54:ca:b0:54:10:07:c2: 7f:fe:5f:2a:83:c2:8c:e9:22:52:e7:9a:9e:2e:21:22:29:5e: 12:41:be:bd:3d:6f:b3:80:4d:7e:e0:d1:d5:d6:c2:83:fb:89: 37:45:78:ad:f4:8a:2a:98:45:77:88:73:75:75:4f:32:91:50: bb:79:1c:11:16:de:ec:ec:85:14:61:70:0f:07:f3:da:6c:42: 12:e4:c6:35:41:fc:fe:57:44:64:7a:ad:de:c4:3b:9f:ec:61: c7:8d:8c:7f:17:13:1c:c8:14:76:30:ae:97:50:59:10:a0:4e: 93:6e:7b:e3:63:06:ca:ea:6a:cf:66:09:25:9d:7b:74:26:37: 4d:09:26:0c:8b:81:50:bb:bb:f2:79:87:94:a0:ad:56:87:e6: 68:88:93:6d:0b:1b:da:7e:74:04:bc:b0:d6:a3:fc:07:a5:b0: e9:72:4f:0a:91:78:e6:10:5a:50:f9:07:58:44:7e:2b:9e:db: d1:0a:a1:15:0f:b6:36:05:52:af:c5:3a:f3:78:de:e0:97:f2: 3a:bc:6c:c6:ec:a5:44:5f:1d:92:b5:12:6e:6b:ea:0d:3b:f7: 3b:d9:dd:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErLQOIGcNug+RQAUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzYyYzQ1ZmQtNjFmOS00M2E2LThhZDUtZmVhNWVmMjdi MTg3MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MmRiMmY2ZmMtZGYyZS00YjU1LTlmZjctMmYyZTg0MmIwNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQrzZi1dV6rLORJVdCMqSLv7deVGzJlbQPbZ X84nnI3QQ48rkGgwLDlaY6YbzFb4iNqvSOoboxGMxb4aNUoTiJCQZij4yOZQYbWF lyUCQ2H2Tntlr3ftuJP8rWgxfRTM9McUVhIs2iePH/buIRMRUJXhZlVZUq8NhQag apqelE50yV9SVGA5gs3glli4tz1EY6xiDm65bqNcE6TCxn1J3rlGmnSwyweMJwnz Ssd8G2wydDPorM1bLReAxS5o0woiVjck8T1vHSMcQm1q3vo42YrA/lw735D9gfEd J90oHYGJ3sYxAuJhAshME55zbT8jvqpF+NZGuNHVuzL/KS1N0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLalqZm/iNq26UyJiBwyB8gmkBAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NjJj NDVmZC02MWY5LTQzYTYtOGFkNS1mZWE1ZWYyN2IxODcvMjMyMTk3YTMtYWU0Ni0z OTk1LTllNjMtZDQxYWE5N2Y2ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzYyYzQ1ZmQtNjFmOS00M2E2LThh ZDUtZmVhNWVmMjdiMTg3Lzc2MmM0NWZkLTYxZjktNDNhNi04YWQ1LWZlYTVlZjI3 YjE4Ny5jcmwwHwYDVR0jBBgwFoAUjcMwoj3iAcsZMOdo8hMOqD42+bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjJjNDVmZC02MWY5LTQzYTYtOGFkNS1mZWE1 ZWYyN2IxODcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZYwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCjFuR+Vh2vdoKTngr5eIET38k/1QIY8E9Pl1MpX1TKsFQQB8J//l8q g8KM6SJS55qeLiEiKV4SQb69PW+zgE1+4NHV1sKD+4k3RXit9IoqmEV3iHN1dU8y kVC7eRwRFt7s7IUUYXAPB/PabEIS5MY1Qfz+V0Rkeq3exDuf7GHHjYx/FxMcyBR2 MK6XUFkQoE6TbnvjYwbK6mrPZgklnXt0JjdNCSYMi4FQu7vyeYeUoK1Wh+ZoiJNt CxvafnQEvLDWo/wHpbDpck8KkXjmEFpQ+QdYRH4rntvRCqEVD7Y2BVKvxTrzeN7g l/I6vGzG7KVEXx2StRJua+oNO/c72d0p -----END CERTIFICATE-----Generated at Sat Aug 23 18:05:37 2025 by rpki-client