$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d8401f0-968a-3837-9737-fdaf430464c5.roa File: 3d8401f0-968a-3837-9737-fdaf430464c5.roa (raw, json) Hash identifier: Ba+1TxR56QUY739oqRLMffLYbkGec/CySuZEIpietvw= Subject key identifier: 18:6B:91:4C:EF:51:93:5A:C3:45:EB:66:A4:E0:6F:69:2D:AA:AD:52 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF0890D64072CCFEE109D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d8401f0-968a-3837-9737-fdaf430464c5.roa Signing time: Thu 24 Jul 2025 12:38:56 +0000 ROA not before: Thu 24 Jul 2025 12:38:56 +0000 ROA not after: Wed 22 Oct 2025 12:38:56 +0000 asID: 21313 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:89:0d:64:07:2c:cf:ee:10:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:56 2025 GMT Not After : Oct 22 12:38:56 2025 GMT Subject: CN=9990faa1-de5a-445f-b2ac-da1f4bb481fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:24:fa:fd:f1:cf:b3:db:e9:58:42:99:09: b4:2b:a2:89:a1:2d:9b:2c:b2:03:51:1e:fa:ca:94: 88:60:44:c9:a2:33:bd:96:6e:f1:88:5d:e6:26:69: be:18:be:6e:58:18:13:cb:c9:6d:cb:e4:74:e2:b3: 2d:0f:6f:cc:30:70:f5:78:27:d8:d0:9d:b4:8a:73: d6:d9:c7:36:18:60:bb:38:25:1b:3f:e3:5e:90:a4: 01:a8:1c:9c:9f:76:a1:e1:76:96:b6:70:1b:2b:af: 48:b8:04:8d:a1:fb:98:80:a1:5a:e4:a5:2d:2b:7c: 3f:03:9b:03:e8:25:2f:fb:61:ee:a8:08:be:d1:d7: 56:9e:75:73:e6:56:1b:1c:88:8a:8f:77:ce:f4:e0: bb:48:90:ca:e5:8e:bd:52:a6:bd:80:c3:ed:c6:d6: 87:c3:ed:88:f4:b4:ea:c3:d4:4f:c4:8f:2f:26:8d: 11:78:17:84:76:33:2c:cf:98:b4:2e:77:81:c2:b2: de:c1:f9:a1:60:b6:81:5d:12:56:8a:67:61:31:27: 79:8b:ce:5b:3d:d8:44:60:61:86:28:54:57:1e:d1: 0d:f9:a3:b2:4c:19:ad:41:e3:67:a9:2d:2e:88:b5: 42:f2:8a:38:7e:8d:58:ec:bb:88:08:c4:01:2c:10: bc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6B:91:4C:EF:51:93:5A:C3:45:EB:66:A4:E0:6F:69:2D:AA:AD:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d8401f0-968a-3837-9737-fdaf430464c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:13:17:3e:85:02:25:92:bb:ca:9f:a9:56:22:0e:f8:ca:d3: 75:bf:71:ca:12:5c:67:fc:3a:16:48:50:c8:c3:df:6c:26:b4: 75:01:86:94:5c:ca:d0:b6:0b:35:a0:31:27:2c:68:e5:3b:ff: 23:35:c0:7a:86:6a:ca:f3:80:52:23:4b:6d:5b:df:a3:79:ab: 52:3e:83:83:d7:7d:3a:20:85:b5:dc:80:c1:cb:05:73:1d:c3: 89:72:61:8c:6d:cc:c9:71:45:ce:1b:c7:98:4a:a5:11:4c:cc: c7:81:4b:34:4e:90:50:60:ff:49:46:49:af:71:95:eb:89:77: 3c:7a:ab:f6:39:08:42:1f:1a:2c:78:ab:d2:04:6e:35:8c:ac: 0b:a2:14:80:31:61:64:3d:29:cd:c1:a5:36:4c:0a:d7:ae:31: 84:63:69:a5:0c:46:09:d5:60:b1:79:a3:f5:a6:6c:dc:5b:b1: 7b:d5:06:50:26:4c:88:19:bc:a7:44:0f:3f:fa:a1:ff:ca:ef: e3:35:c2:2b:49:8a:7c:5b:1e:e8:ed:c2:a1:ec:a9:37:be:50: a9:c4:c6:76:ab:7c:be:9a:28:fa:85:91:d3:9f:e9:39:72:01: 0b:5b:e0:4e:12:a5:8a:45:0e:e3:20:eb:ec:14:6a:a2:c3:62: cc:4d:78:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IkNZAcsz+4QnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1NloXDTI1MTAyMjEyMzg1NlowLzEtMCsGA1UEAxMk OTk5MGZhYTEtZGU1YS00NDVmLWIyYWMtZGExZjRiYjQ4MWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOEk+v3xz7Pb6VhCmQm0K6KJoS2bLLIDUR76 ypSIYETJojO9lm7xiF3mJmm+GL5uWBgTy8lty+R04rMtD2/MMHD1eCfY0J20inPW 2cc2GGC7OCUbP+NekKQBqBycn3ah4XaWtnAbK69IuASNofuYgKFa5KUtK3w/A5sD 6CUv+2HuqAi+0ddWnnVz5lYbHIiKj3fO9OC7SJDK5Y69Uqa9gMPtxtaHw+2I9LTq w9RPxI8vJo0ReBeEdjMsz5i0LneBwrLewfmhYLaBXRJWimdhMSd5i85bPdhEYGGG KFRXHtEN+aOyTBmtQeNnqS0uiLVC8oo4fo1Y7LuICMQBLBC85wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhrkUzvUZNaw0XrZqTgb2ktqq1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Q4NDAxZjAtOTY4YS0z ODM3LTk3MzctZmRhZjQzMDQ2NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkTFz6FAiWSu8qfqVYiDvjK03W/ccoSXGf8OhZIUMjD32wmtHUBhpRc ytC2CzWgMScsaOU7/yM1wHqGasrzgFIjS21b36N5q1I+g4PXfToghbXcgMHLBXMd w4lyYYxtzMlxRc4bx5hKpRFMzMeBSzROkFBg/0lGSa9xleuJdzx6q/Y5CEIfGix4 q9IEbjWMrAuiFIAxYWQ9Kc3BpTZMCteuMYRjaaUMRgnVYLF5o/WmbNxbsXvVBlAm TIgZvKdEDz/6of/K7+M1witJinxbHujtwqHsqTe+UKnExnarfL6aKPqFkdOf6Tly AQtb4E4SpYpFDuMg6+wUaqLDYsxNeAQ= -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:49 2025 by rpki-client