$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e929e4e-7afe-330c-b391-7bbd0dd7db4f.roa File: 0e929e4e-7afe-330c-b391-7bbd0dd7db4f.roa (raw, json) Hash identifier: 3odCQphDqG2r410MzvDxZ3FHLsbUBYdcAhT/ovVdjho= Subject key identifier: 22:8D:D6:88:3C:FC:F1:52:DF:9D:14:9D:FD:67:41:95:AA:83:7A:39 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF080BC910D02FEC5746E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e929e4e-7afe-330c-b391-7bbd0dd7db4f.roa Signing time: Thu 24 Jul 2025 12:38:52 +0000 ROA not before: Thu 24 Jul 2025 12:38:52 +0000 ROA not after: Wed 22 Oct 2025 12:38:52 +0000 asID: 396612 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:80:bc:91:0d:02:fe:c5:74:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:52 2025 GMT Not After : Oct 22 12:38:52 2025 GMT Subject: CN=16a67eba-cad5-434c-80d0-d71e171b900d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ad:15:02:0f:b6:dd:0a:6b:df:09:1d:cc:1f: 86:74:de:28:7a:ce:f6:12:26:04:f4:3d:40:9f:bc: 42:c6:75:e7:fc:47:48:2d:8e:04:72:41:87:28:23: c3:0b:9a:d7:e0:cb:71:19:38:77:7c:17:11:93:a4: 59:02:55:3d:62:cf:63:8e:5c:24:98:06:9f:c9:ac: 12:aa:c6:44:e3:2b:62:7e:19:98:9b:f3:f7:d3:e6: e6:05:fe:bf:e8:67:3c:6c:07:d5:fa:79:00:7d:ec: 00:70:e2:df:8d:e4:d8:df:8d:48:5b:0c:42:27:ad: 46:8e:f5:da:88:c3:d0:b9:da:30:cd:25:76:e9:6f: f6:e1:23:6e:60:f6:d9:8d:02:6a:52:61:ef:95:76: ab:fe:1e:1b:95:7a:65:5c:2d:60:5c:d4:38:a5:57: f5:b4:de:b6:1f:cc:c1:29:86:0c:cd:ae:76:1f:17: a2:88:41:67:ec:f5:09:fd:df:fe:d9:af:47:98:47: f0:98:21:a3:57:90:dc:34:3d:2f:37:b2:8d:2d:81: 55:4c:ad:ad:ba:73:4e:4c:2a:79:d0:5c:d3:d6:d9: dc:6a:3f:26:23:9d:7a:9d:6a:8b:50:d1:c4:2c:11: b6:99:d2:b3:8b:41:c9:c6:0b:e0:39:73:1b:16:26: da:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8D:D6:88:3C:FC:F1:52:DF:9D:14:9D:FD:67:41:95:AA:83:7A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e929e4e-7afe-330c-b391-7bbd0dd7db4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:06:ae:da:67:f0:f3:5c:34:a0:a2:9d:f6:ae:93:ca:37:36: 57:6f:a3:fc:49:a9:5c:72:b1:36:11:f5:80:77:3b:2e:af:0b: 0b:c3:49:af:be:90:05:f4:cd:50:d5:2e:39:6e:3e:e2:94:1f: 62:11:a2:5f:62:27:74:46:25:48:b1:e1:a9:ca:f1:38:1c:6a: 29:c6:d9:a3:e5:ea:1f:27:ea:59:74:e5:98:1f:c1:e7:b7:23: 4d:aa:77:32:0c:70:da:15:31:96:85:0c:07:d9:6f:82:9e:b7: 74:76:93:ce:d4:3d:14:b9:da:95:45:b4:ca:88:be:10:f6:56: 2c:0f:40:dc:9a:23:d8:d7:c8:99:e7:8c:a5:d3:91:8b:32:db: 43:90:4a:92:26:10:09:7a:48:0c:05:be:f0:f7:bd:15:31:2d: 39:e6:42:71:0e:e2:6e:da:a0:19:f0:73:d7:68:03:90:bd:07: 1a:ab:55:0a:92:4c:27:6c:a0:dd:0b:ff:bb:e7:55:8b:69:15: d2:5b:7e:d9:ff:cb:45:44:c5:b4:e6:a4:4a:a6:73:7e:e0:bf: da:34:69:7f:4b:ed:c4:ab:46:6f:e5:ac:1a:7b:5b:5f:7b:aa: dd:ca:c1:95:37:cd:12:33:1f:ec:fe:d9:fa:e0:df:05:8c:a5: f4:29:63:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IC8kQ0C/sV0boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MloXDTI1MTAyMjEyMzg1MlowLzEtMCsGA1UEAxMk MTZhNjdlYmEtY2FkNS00MzRjLTgwZDAtZDcxZTE3MWI5MDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q0VAg+23Qpr3wkdzB+GdN4oes72EiYE9D1A n7xCxnXn/EdILY4EckGHKCPDC5rX4MtxGTh3fBcRk6RZAlU9Ys9jjlwkmAafyawS qsZE4ytifhmYm/P30+bmBf6/6Gc8bAfV+nkAfewAcOLfjeTY341IWwxCJ61GjvXa iMPQudowzSV26W/24SNuYPbZjQJqUmHvlXar/h4blXplXC1gXNQ4pVf1tN62H8zB KYYMza52HxeiiEFn7PUJ/d/+2a9HmEfwmCGjV5DcND0vN7KNLYFVTK2tunNOTCp5 0FzT1tncaj8mI516nWqLUNHELBG2mdKzi0HJxgvgOXMbFibaLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKN1og8/PFS350Unf1nQZWqg3o5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGU5MjllNGUtN2FmZS0z MzBjLWIzOTEtN2JiZDBkZDdkYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkGrtpn8PNcNKCinfauk8o3Nldvo/xJqVxysTYR9YB3Oy6vCwvDSa++ kAX0zVDVLjluPuKUH2IRol9iJ3RGJUix4anK8TgcainG2aPl6h8n6ll05Zgfwee3 I02qdzIMcNoVMZaFDAfZb4Ket3R2k87UPRS52pVFtMqIvhD2ViwPQNyaI9jXyJnn jKXTkYsy20OQSpImEAl6SAwFvvD3vRUxLTnmQnEO4m7aoBnwc9doA5C9BxqrVQqS TCdsoN0L/7vnVYtpFdJbftn/y0VExbTmpEqmc37gv9o0aX9L7cSrRm/lrBp7W197 qt3KwZU3zRIzH+z+2frg3wWMpfQpY5E= -----END CERTIFICATE-----Generated at Wed Aug 6 07:48:16 2025 by rpki-client