$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38985936-37e5-36b0-9199-2735d2ec5ce3.roa File: 38985936-37e5-36b0-9199-2735d2ec5ce3.roa (raw, json) Hash identifier: yj/MBbdPBTJgrsokLfqXbgRZGL+KkPofnx2sEu5goDA= Subject key identifier: 57:A1:04:7E:F3:21:6D:9A:EC:A4:85:C5:F4:E7:6C:0A:BF:88:BC:5E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF087727C0F57BC0B85EB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38985936-37e5-36b0-9199-2735d2ec5ce3.roa Signing time: Thu 24 Jul 2025 12:38:56 +0000 ROA not before: Thu 24 Jul 2025 12:38:56 +0000 ROA not after: Wed 22 Oct 2025 12:38:56 +0000 asID: 396758 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:87:72:7c:0f:57:bc:0b:85:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:56 2025 GMT Not After : Oct 22 12:38:56 2025 GMT Subject: CN=e63600eb-1ac8-4784-8521-3b3b293bc3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:c6:39:38:ef:46:fd:d1:81:6a:6a:bc:60: 9a:ec:c1:b9:77:c6:68:00:21:d7:38:4c:22:01:37: dc:c7:14:e6:d2:94:01:ae:24:31:f0:03:2d:ce:af: b0:e4:e7:de:be:12:04:c9:28:2b:1a:16:a9:23:52: 7b:ad:bb:9e:3d:8f:6f:b4:d0:63:b4:f7:cc:b0:f7: 4a:9d:08:48:27:37:95:b6:90:8b:08:12:94:30:7b: be:60:1a:aa:5e:c4:25:ef:33:5c:5e:6b:cf:c4:0c: df:ba:cf:9b:26:21:e6:b1:9f:e8:71:35:71:59:92: 72:ad:ca:fe:d9:24:1a:4e:42:bd:9b:c3:89:21:c9: 07:8d:75:94:1e:71:21:db:be:95:df:c8:f3:e9:1b: 33:e3:a6:82:85:a0:a8:13:35:13:51:8d:07:a1:fe: be:69:b4:25:e3:b4:46:81:61:53:59:53:ef:2e:4e: 76:b3:46:48:0d:0c:91:6b:45:3f:27:b6:41:96:6c: 39:ba:2a:6b:03:38:04:55:02:31:91:28:3a:79:aa: e0:dd:0a:1a:42:b2:d7:a4:7b:8c:ac:53:f4:0e:ad: f2:f7:c6:f5:2f:0f:29:60:33:35:8a:b6:82:c3:1c: 28:0c:c8:89:0c:f5:56:f4:75:5b:d7:d3:59:b8:e3: b0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A1:04:7E:F3:21:6D:9A:EC:A4:85:C5:F4:E7:6C:0A:BF:88:BC:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38985936-37e5-36b0-9199-2735d2ec5ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:17:42:24:08:9a:22:e3:0b:56:fe:ba:1e:af:e0:fe:4a:cd: 73:4a:ac:dd:ea:6b:1f:ab:f2:26:18:65:39:bf:ea:8f:84:d9: 0c:c0:fc:13:76:0c:f3:e2:d4:c1:14:fe:be:cc:f7:c2:d9:e6: 02:ff:71:ff:8d:93:67:40:a1:28:6d:59:99:7a:de:74:2c:ae: 15:65:89:ec:62:91:cb:92:c2:3c:2c:91:0c:38:cd:c5:5f:c2: 64:96:64:88:f9:19:a7:5a:7c:34:34:54:d8:59:0f:6a:df:e3: 13:02:67:98:70:1d:aa:6e:a3:fa:02:ab:13:a8:01:d3:7f:55: 7f:90:cc:52:b9:e3:ed:e2:0e:1c:46:8a:39:4a:8b:b7:33:fd: 75:2e:db:2d:d1:b0:74:34:ca:ac:77:2e:d7:08:49:3d:61:aa: dd:93:25:08:8b:b4:7e:1e:4e:ce:9d:79:f4:8b:a3:43:51:79: 76:c6:17:55:79:09:37:52:c3:86:b2:73:4b:e1:19:94:17:ea: 74:99:bf:04:4e:cc:91:d0:eb:fa:98:5e:c2:38:59:e3:eb:b8: 8f:60:b6:db:5e:40:99:b5:d2:29:74:e2:01:1f:92:f2:9a:ed: ed:9b:8d:b1:01:62:78:17:d9:b0:01:9a:c1:60:ce:60:d1:23: 0f:42:8b:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IdyfA9XvAuF64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1NloXDTI1MTAyMjEyMzg1NlowLzEtMCsGA1UEAxMk ZTYzNjAwZWItMWFjOC00Nzg0LTg1MjEtM2IzYjI5M2JjM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCPGOTjvRv3RgWpqvGCa7MG5d8ZoACHXOEwi ATfcxxTm0pQBriQx8AMtzq+w5OfevhIEySgrGhapI1J7rbuePY9vtNBjtPfMsPdK nQhIJzeVtpCLCBKUMHu+YBqqXsQl7zNcXmvPxAzfus+bJiHmsZ/ocTVxWZJyrcr+ 2SQaTkK9m8OJIckHjXWUHnEh276V38jz6Rsz46aChaCoEzUTUY0Hof6+abQl47RG gWFTWVPvLk52s0ZIDQyRa0U/J7ZBlmw5uiprAzgEVQIxkSg6earg3QoaQrLXpHuM rFP0Dq3y98b1Lw8pYDM1iraCwxwoDMiJDPVW9HVb19NZuOOwAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFehBH7zIW2a7KSFxfTnbAq/iLxeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzg5ODU5MzYtMzdlNS0z NmIwLTkxOTktMjczNWQyZWM1Y2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEXQiQImiLjC1b+uh6v4P5KzXNKrN3qax+r8iYYZTm/6o+E2QzA/BN2 DPPi1MEU/r7M98LZ5gL/cf+Nk2dAoShtWZl63nQsrhVliexikcuSwjwskQw4zcVf wmSWZIj5GadafDQ0VNhZD2rf4xMCZ5hwHapuo/oCqxOoAdN/VX+QzFK54+3iDhxG ijlKi7cz/XUu2y3RsHQ0yqx3LtcIST1hqt2TJQiLtH4eTs6defSLo0NReXbGF1V5 CTdSw4ayc0vhGZQX6nSZvwROzJHQ6/qYXsI4WePruI9gttteQJm10il04gEfkvKa 7e2bjbEBYngX2bABmsFgzmDRIw9CixU= -----END CERTIFICATE-----Generated at Thu Aug 7 02:01:18 2025 by rpki-client