$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dccd6d3-91d2-30f7-9710-dce93cb42d08.roa File: 0dccd6d3-91d2-30f7-9710-dce93cb42d08.roa (raw, json) Hash identifier: lmMjnRecqkQfSGMGH2D8M2FvvmcBnlzaXM+0eucVwfk= Subject key identifier: F7:B0:DA:91:F9:94:64:48:74:35:DE:8D:E5:AC:61:DA:C0:0F:F4:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF077FD29FDD9AC1F259400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dccd6d3-91d2-30f7-9710-dce93cb42d08.roa Signing time: Thu 24 Jul 2025 12:38:48 +0000 ROA not before: Thu 24 Jul 2025 12:38:48 +0000 ROA not after: Wed 22 Oct 2025 12:38:48 +0000 asID: 396555 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:77:fd:29:fd:d9:ac:1f:25:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:48 2025 GMT Not After : Oct 22 12:38:48 2025 GMT Subject: CN=72604c10-2266-4fcc-a2ff-4fd8823c30c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4f:77:f7:37:fb:0a:1c:9e:57:9c:15:50:55: b1:66:6a:74:de:7e:9e:3f:70:cd:6d:66:d9:57:62: a1:8b:9f:d5:8d:59:9e:d6:32:09:8b:4a:fd:b4:92: 85:9b:50:53:19:34:4c:2a:3b:37:1e:c5:81:86:1c: e1:a8:78:3f:96:73:ff:ad:14:e1:fe:86:9d:18:d6: a3:c4:bb:db:6f:86:b8:3b:67:cf:99:39:5a:f4:7a: 56:a2:5e:62:17:c8:09:c0:e1:06:88:40:2e:f4:67: be:0b:92:ed:04:40:4c:16:26:9d:fd:3a:d2:33:46: 55:9f:c0:04:13:12:33:44:1c:fd:09:90:c8:65:9d: 24:d9:46:4e:75:b3:d5:7a:aa:76:75:5c:d7:69:e9: cb:2a:82:fd:cb:ca:c5:4c:ca:a9:d6:e4:f3:52:10: df:50:64:f6:49:bb:a8:e6:0e:8a:db:a6:2d:e1:c9: 4a:62:02:27:19:1b:61:b6:40:66:47:1a:46:c5:4e: ab:de:67:2c:4b:ef:9c:4d:25:61:24:ce:b3:10:9e: 4b:50:2d:d9:dd:0d:15:f9:df:96:44:78:13:ca:d3: 1d:a0:ba:40:a5:8c:e9:1e:7a:d2:f7:f6:fa:f5:d5: 5f:45:e8:13:31:86:38:1e:3d:ad:0d:8c:69:18:f3: 17:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B0:DA:91:F9:94:64:48:74:35:DE:8D:E5:AC:61:DA:C0:0F:F4:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dccd6d3-91d2-30f7-9710-dce93cb42d08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3a:1a:3b:de:f3:23:60:3d:10:06:09:d7:e9:2c:9c:7a:3d: 9d:fe:ff:35:86:7a:58:74:7e:6d:3a:fc:09:71:b1:cb:e2:d5: bb:23:b0:e6:22:a9:04:d6:4e:99:9e:94:3b:29:2c:2c:bd:18: d0:ca:0a:b8:a4:59:3a:29:51:db:5c:cb:b8:8d:61:86:36:83: 74:1f:13:f6:63:6e:bb:40:17:12:98:80:4a:08:3d:0c:28:77: 08:6e:e4:5c:03:64:57:c4:25:ec:17:9c:bf:63:94:8e:cd:08: 41:35:35:19:6f:17:27:ab:08:f2:49:0f:c3:e7:3c:77:b3:f5: 75:09:1e:83:f9:bd:09:74:e8:d8:65:08:ac:18:0d:5a:0a:35: 50:f4:89:e0:64:93:d8:4e:bb:31:0a:46:e6:cb:82:5f:10:87: 4f:f1:19:ea:2b:71:a2:ea:69:a9:d3:ef:8f:94:bf:bd:c4:1a: 95:8e:7f:fd:57:e4:31:1a:5f:9f:78:dc:a9:98:da:25:da:e6: 18:da:37:e1:5a:db:03:06:29:fb:34:0f:d3:05:60:05:d2:7c: ad:6c:c9:44:af:38:25:41:8d:7b:e9:1e:fd:74:88:bf:dc:a7: e6:1f:67:f0:38:0d:3d:71:17:1a:c9:5f:6c:c9:91:90:f2:1b: 07:9d:7a:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8Hf9Kf3ZrB8llAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg0OFoXDTI1MTAyMjEyMzg0OFowLzEtMCsGA1UEAxMk NzI2MDRjMTAtMjI2Ni00ZmNjLWEyZmYtNGZkODgyM2MzMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE939zf7ChyeV5wVUFWxZmp03n6eP3DNbWbZ V2Khi5/VjVme1jIJi0r9tJKFm1BTGTRMKjs3HsWBhhzhqHg/lnP/rRTh/oadGNaj xLvbb4a4O2fPmTla9HpWol5iF8gJwOEGiEAu9Ge+C5LtBEBMFiad/TrSM0ZVn8AE ExIzRBz9CZDIZZ0k2UZOdbPVeqp2dVzXaenLKoL9y8rFTMqp1uTzUhDfUGT2Sbuo 5g6K26Yt4clKYgInGRthtkBmRxpGxU6r3mcsS++cTSVhJM6zEJ5LUC3Z3Q0V+d+W RHgTytMdoLpApYzpHnrS9/b69dVfRegTMYY4Hj2tDYxpGPMXEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPew2pH5lGRIdDXejeWsYdrAD/RPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGRjY2Q2ZDMtOTFkMi0z MGY3LTk3MTAtZGNlOTNjYjQyZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ6Gjve8yNgPRAGCdfpLJx6PZ3+/zWGelh0fm06/Alxscvi1bsjsOYi qQTWTpmelDspLCy9GNDKCrikWTopUdtcy7iNYYY2g3QfE/ZjbrtAFxKYgEoIPQwo dwhu5FwDZFfEJewXnL9jlI7NCEE1NRlvFyerCPJJD8PnPHez9XUJHoP5vQl06Nhl CKwYDVoKNVD0ieBkk9hOuzEKRubLgl8Qh0/xGeorcaLqaanT74+Uv73EGpWOf/1X 5DEaX5943KmY2iXa5hjaN+Fa2wMGKfs0D9MFYAXSfK1syUSvOCVBjXvpHv10iL/c p+YfZ/A4DT1xFxrJX2zJkZDyGwedeq4= -----END CERTIFICATE-----Generated at Wed Aug 6 09:41:09 2025 by rpki-client