$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/321dbdc7-ea71-3d84-a54d-f3442ff633d3.roa File: 321dbdc7-ea71-3d84-a54d-f3442ff633d3.roa (raw, json) Hash identifier: 1+dpsf45IoSrSnWOcXwcyYZzsr97s2MBHKvZlmXFjj8= Subject key identifier: 02:8B:CC:A1:12:C4:E4:8F:29:06:D8:EB:61:0B:2F:D3:AF:D0:55:35 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF07C8DE4CBD7B0B844E440 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/321dbdc7-ea71-3d84-a54d-f3442ff633d3.roa Signing time: Thu 24 Jul 2025 12:38:50 +0000 ROA not before: Thu 24 Jul 2025 12:38:50 +0000 ROA not after: Wed 22 Oct 2025 12:38:50 +0000 asID: 396588 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:7c:8d:e4:cb:d7:b0:b8:44:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:50 2025 GMT Not After : Oct 22 12:38:50 2025 GMT Subject: CN=78e3e97b-6631-42e3-bfad-ae102627e067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:35:a3:ee:f8:9d:25:c2:dd:17:f7:7d:d5:f0: 34:ba:e6:f8:9e:10:88:9f:9e:ea:28:2a:ff:07:01: 7a:b7:88:ae:73:fc:27:1f:40:1d:01:cd:cd:df:31: 18:50:0e:86:0c:e6:fd:88:df:86:4a:05:1a:b2:81: bf:4a:d9:db:f1:d6:c4:6a:d5:58:0b:31:47:99:16: ac:f4:aa:fa:48:fc:11:9d:d5:52:f1:b7:80:c9:8f: bf:b9:61:f7:88:a2:1a:e5:44:4d:f7:b4:c2:ee:8f: 9d:f7:b3:e0:c7:97:e2:22:2a:77:d8:9f:ac:07:ce: 7e:7e:07:4e:50:b6:5e:54:3f:fa:46:ba:47:4c:d5: 13:09:4e:a8:29:44:2c:8d:53:d3:52:04:0e:7a:ae: e3:35:e4:0d:8b:1e:b8:97:2f:85:04:aa:bc:91:49: f9:06:88:79:ed:62:b4:72:46:69:9d:67:0f:0a:f1: 59:d6:35:36:23:dd:f0:29:7e:de:a8:ee:bb:a1:71: 32:88:2c:10:4b:ef:11:b9:74:f0:ac:51:28:47:52: f8:ec:c5:7e:ed:59:65:64:21:7f:29:d8:90:e5:1d: bc:f8:95:8d:b3:84:60:75:d7:d9:6a:c6:69:38:e4: 34:60:cc:00:34:e7:18:75:9f:02:83:78:38:7a:6c: 97:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8B:CC:A1:12:C4:E4:8F:29:06:D8:EB:61:0B:2F:D3:AF:D0:55:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/321dbdc7-ea71-3d84-a54d-f3442ff633d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:78:06:e5:0b:bb:1d:ca:de:d1:38:c3:d8:ef:4c:50:68:38: bb:0a:69:11:11:0a:90:28:1f:b8:65:26:d8:02:7a:70:47:94: c1:11:6b:4b:4d:c4:2e:38:69:84:77:6c:0f:42:f3:b2:4d:1d: 69:61:4d:33:cc:99:cf:c4:c5:9a:9e:2d:1d:b4:53:7c:ac:74: ce:d6:c8:39:a8:8b:d6:e4:b2:9c:7e:ea:f7:a6:ba:7f:11:43: 90:cd:a3:ec:eb:c5:eb:bf:0a:59:ac:6a:d6:67:0b:25:68:47: 3d:b3:16:10:54:20:e7:3f:32:9c:cb:85:71:c6:81:40:e0:ca: cd:2a:a7:a9:a8:93:19:7d:43:d7:b5:2e:65:c0:de:6c:48:18: 68:ea:4b:ad:13:41:81:c3:45:95:49:3e:41:f9:18:53:f4:22: 84:cc:4d:36:f4:af:ef:72:96:ff:bb:84:54:2f:02:3d:e1:cd: a3:8b:10:c2:5d:76:6b:0b:1a:1e:1a:0b:1d:e9:2e:c6:eb:4d: 06:5f:ee:3c:27:fc:d4:e1:cd:89:93:8b:47:a5:ce:39:d9:2f: ab:08:54:30:43:5a:f4:03:4e:90:71:8e:2b:ec:81:55:05:b5: ab:80:e4:6b:d0:fc:d4:f2:bd:c9:4a:f0:3a:f3:a2:9a:fa:7e: 7b:10:c0:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8HyN5MvXsLhE5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MFoXDTI1MTAyMjEyMzg1MFowLzEtMCsGA1UEAxMk NzhlM2U5N2ItNjYzMS00MmUzLWJmYWQtYWUxMDI2MjdlMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+DWj7vidJcLdF/d91fA0uub4nhCIn57qKCr/ BwF6t4iuc/wnH0AdAc3N3zEYUA6GDOb9iN+GSgUasoG/Stnb8dbEatVYCzFHmRas 9Kr6SPwRndVS8beAyY+/uWH3iKIa5URN97TC7o+d97Pgx5fiIip32J+sB85+fgdO ULZeVD/6RrpHTNUTCU6oKUQsjVPTUgQOeq7jNeQNix64ly+FBKq8kUn5Boh57WK0 ckZpnWcPCvFZ1jU2I93wKX7eqO67oXEyiCwQS+8RuXTwrFEoR1L47MV+7VllZCF/ KdiQ5R28+JWNs4RgddfZasZpOOQ0YMwANOcYdZ8Cg3g4emyXmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKLzKESxOSPKQbY62ELL9Ov0FU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzIxZGJkYzctZWE3MS0z ZDg0LWE1NGQtZjM0NDJmZjYzM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR4BuULux3K3tE4w9jvTFBoOLsKaRERCpAoH7hlJtgCenBHlMERa0tN xC44aYR3bA9C87JNHWlhTTPMmc/ExZqeLR20U3ysdM7WyDmoi9bkspx+6vemun8R Q5DNo+zrxeu/ClmsatZnCyVoRz2zFhBUIOc/MpzLhXHGgUDgys0qp6mokxl9Q9e1 LmXA3mxIGGjqS60TQYHDRZVJPkH5GFP0IoTMTTb0r+9ylv+7hFQvAj3hzaOLEMJd dmsLGh4aCx3pLsbrTQZf7jwn/NThzYmTi0elzjnZL6sIVDBDWvQDTpBxjivsgVUF tauA5GvQ/NTyvclK8Drzopr6fnsQwPk= -----END CERTIFICATE-----Generated at Wed Aug 6 18:28:47 2025 by rpki-client