$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0be308b8-ad36-3dbf-9d9e-f20329d816b2.roa File: 0be308b8-ad36-3dbf-9d9e-f20329d816b2.roa (raw, json) Hash identifier: Ljla610MBp4hhHTGPtDp2+Q33Urk3QJ7LDWWYXkyxIA= Subject key identifier: 40:08:6B:2D:85:1A:3A:F6:5F:42:17:4E:0B:6C:93:97:40:CB:62:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF086CAFD9866B735F82E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0be308b8-ad36-3dbf-9d9e-f20329d816b2.roa Signing time: Thu 24 Jul 2025 12:38:55 +0000 ROA not before: Thu 24 Jul 2025 12:38:55 +0000 ROA not after: Wed 22 Oct 2025 12:38:55 +0000 asID: 211369 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:86:ca:fd:98:66:b7:35:f8:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:55 2025 GMT Not After : Oct 22 12:38:55 2025 GMT Subject: CN=61fb1fbf-962b-4f7c-b7ed-b4a4df97a15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:21:ee:72:26:1d:cd:9d:66:e5:c1:7c:23:ff: 1d:49:56:a9:ff:80:11:f4:ba:2f:e5:d1:a7:0c:88: 73:56:25:68:01:a3:5e:73:b9:cd:63:55:f2:75:5b: 5d:9b:f4:84:74:12:25:ee:d3:a4:c1:4e:88:ee:98: ba:72:11:da:06:cb:cf:aa:5a:94:34:b7:8d:2f:ea: 96:c3:4c:a0:46:ae:8c:fc:bc:d6:30:07:26:e9:c4: 48:cd:16:77:f0:ba:71:da:36:b1:4e:d8:db:af:f0: 75:8d:3c:ef:aa:3b:1c:bf:68:90:87:87:bf:14:48: 2e:74:3a:38:b6:72:80:3f:75:da:38:81:f2:d0:eb: 4f:f8:86:68:52:e3:ba:ce:8b:04:ec:ef:75:34:13: 5b:bf:28:44:b3:09:b9:45:cd:14:d8:08:b5:da:1f: 27:ab:99:34:eb:17:bf:58:26:7c:be:4f:be:04:33: d1:3c:05:6e:93:7f:2e:18:42:80:5a:b6:a2:08:82: 98:98:70:b4:82:ab:58:83:b0:38:ae:e6:41:86:e9: eb:4a:87:d5:75:64:66:92:2d:4d:b6:a5:93:f9:41: 52:6a:1f:b1:69:89:18:2b:d1:8e:65:de:e6:0d:fb: c0:25:b9:46:58:cc:47:21:51:ff:d4:4d:8b:fb:28: e0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:08:6B:2D:85:1A:3A:F6:5F:42:17:4E:0B:6C:93:97:40:CB:62:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0be308b8-ad36-3dbf-9d9e-f20329d816b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:72:f7:dd:d1:85:79:18:cd:af:5c:68:b0:59:89:1f:88:5a: d1:81:25:b0:52:bf:93:ea:df:c1:21:ee:14:b1:ae:39:8b:88: 90:ed:89:fd:56:da:f5:b2:5f:6e:61:ba:1a:9a:56:c9:ef:ad: 7b:ee:d9:36:5d:32:35:57:1d:e1:12:e7:39:f9:15:56:c9:de: bc:00:13:c3:c6:fd:5e:80:0c:c1:e4:d8:11:2e:26:8d:88:7e: c7:af:ab:74:d4:de:29:0e:4e:bf:64:5a:9f:4b:b6:3e:44:74: 60:4e:f6:6d:82:6b:c2:c4:e1:33:6f:7d:66:db:5e:8a:e6:10: 4d:fb:8f:a0:8d:54:37:1f:4d:0d:70:e5:75:d3:97:77:55:69: db:b7:89:e7:85:ef:fb:b4:ba:38:db:d7:f0:8a:21:62:0c:cd: dd:41:aa:78:fb:8c:f5:d9:80:3a:6c:ae:21:e3:bf:6f:c5:a2: 0b:a8:35:e2:9e:93:f6:80:21:54:d4:31:c0:e0:97:0e:08:f3: 63:a8:85:21:19:be:ed:b5:de:9a:a5:8b:65:c0:b4:2f:2f:6b: d9:3a:a6:5b:c5:ea:28:dc:2a:46:2f:7b:d4:c9:67:20:5e:62: 82:81:40:a9:f9:f9:d7:47:34:29:1f:df:8a:c5:55:a4:b7:e8: 3a:d0:4e:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IbK/ZhmtzX4LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1NVoXDTI1MTAyMjEyMzg1NVowLzEtMCsGA1UEAxMk NjFmYjFmYmYtOTYyYi00ZjdjLWI3ZWQtYjRhNGRmOTdhMTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiHuciYdzZ1m5cF8I/8dSVap/4AR9Lov5dGn DIhzViVoAaNec7nNY1XydVtdm/SEdBIl7tOkwU6I7pi6chHaBsvPqlqUNLeNL+qW w0ygRq6M/LzWMAcm6cRIzRZ38Lpx2jaxTtjbr/B1jTzvqjscv2iQh4e/FEgudDo4 tnKAP3XaOIHy0OtP+IZoUuO6zosE7O91NBNbvyhEswm5Rc0U2Ai12h8nq5k06xe/ WCZ8vk++BDPRPAVuk38uGEKAWraiCIKYmHC0gqtYg7A4ruZBhunrSofVdWRmki1N tqWT+UFSah+xaYkYK9GOZd7mDfvAJblGWMxHIVH/1E2L+yjg4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAIay2FGjr2X0IXTgtsk5dAy2KNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGJlMzA4YjgtYWQzNi0z ZGJmLTlkOWUtZjIwMzI5ZDgxNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBy993RhXkYza9caLBZiR+IWtGBJbBSv5Pq38Eh7hSxrjmLiJDtif1W 2vWyX25huhqaVsnvrXvu2TZdMjVXHeES5zn5FVbJ3rwAE8PG/V6ADMHk2BEuJo2I fsevq3TU3ikOTr9kWp9Ltj5EdGBO9m2Ca8LE4TNvfWbbXormEE37j6CNVDcfTQ1w 5XXTl3dVadu3ieeF7/u0ujjb1/CKIWIMzd1Bqnj7jPXZgDpsriHjv2/FoguoNeKe k/aAIVTUMcDglw4I82OohSEZvu213pqli2XAtC8va9k6plvF6ijcKkYve9TJZyBe YoKBQKn5+ddHNCkf34rFVaS36DrQTmQ= -----END CERTIFICATE-----Generated at Wed Aug 6 06:00:56 2025 by rpki-client