$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/400174e3-91c7-3bc2-b3d2-bd9a9e105718.roa File: 400174e3-91c7-3bc2-b3d2-bd9a9e105718.roa (raw, json) Hash identifier: f4jdHIUX/Qf3O/WdzIiMz0TWoxsM6XOt4Jc6/6DR0W8= Subject key identifier: BC:95:2B:F7:39:7E:3C:F1:C1:2A:B7:5D:57:20:33:0E:DE:1E:A5:EF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF08EC2E1B232DA5CEEA800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/400174e3-91c7-3bc2-b3d2-bd9a9e105718.roa Signing time: Thu 24 Jul 2025 12:38:59 +0000 ROA not before: Thu 24 Jul 2025 12:38:59 +0000 ROA not after: Wed 22 Oct 2025 12:38:59 +0000 asID: 396554 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:8e:c2:e1:b2:32:da:5c:ee:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:59 2025 GMT Not After : Oct 22 12:38:59 2025 GMT Subject: CN=3e350ae3-723e-4183-93a5-9533f3457587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:e3:19:96:6c:a0:65:b6:f2:17:b7:9e:14: 19:5f:ec:f8:3d:f8:90:94:14:97:bd:29:dc:2a:27: 3b:92:71:46:a4:b5:48:42:67:07:b2:7a:44:3b:f2: c7:e9:23:13:f9:83:1a:50:86:ef:b3:13:63:bb:54: 8e:68:79:6d:3d:d4:9d:6f:4e:62:57:22:f4:29:91: c6:e0:f5:c9:67:ec:f0:e9:34:a4:2f:dc:de:29:5b: 6c:b7:38:28:16:46:c0:26:f8:39:8f:fd:11:f5:8f: 56:89:3a:54:7f:c3:43:f2:f9:f6:cf:93:d9:8c:d9: e8:47:18:24:b1:dc:4b:21:51:f5:54:e4:da:e9:17: 78:b8:f0:1c:d1:47:4c:c0:0d:1c:09:9d:57:f7:93: 7e:63:d5:90:40:e1:27:3c:6a:e2:99:bb:05:a5:3c: c6:1b:1e:6f:30:3b:29:2e:d4:5e:28:29:63:51:f2: 92:87:e3:1e:02:dd:32:92:81:c6:f2:62:df:9f:1d: 7f:f8:87:a0:8a:8a:49:53:4c:ef:af:22:0d:e4:7b: b8:7c:45:e6:d3:fe:b1:0c:ec:29:f9:21:2a:9b:54: 57:c8:9c:b1:42:f2:4b:4d:da:25:14:7d:02:78:2d: e2:fc:47:51:30:be:01:ad:77:14:02:da:ad:c6:e8: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:95:2B:F7:39:7E:3C:F1:C1:2A:B7:5D:57:20:33:0E:DE:1E:A5:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/400174e3-91c7-3bc2-b3d2-bd9a9e105718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:c3:ac:f0:63:d4:3d:e4:a0:71:6e:d8:c7:95:7a:ed:b7:3b: 7a:7d:f3:5a:a0:fd:77:04:4a:2b:49:94:6c:2b:ed:b7:c7:9e: 03:0c:34:ad:4e:24:80:c0:52:e3:0c:a3:f2:25:66:f1:86:df: f2:31:da:9e:a7:1c:69:ed:e3:de:32:13:76:96:c9:b9:05:d6: 10:dc:bd:92:0d:ae:1d:70:7d:3e:d0:04:b5:1e:e7:3b:7e:94: 0d:10:0f:94:38:2e:81:1b:f3:e4:fb:e5:c8:f3:69:ad:9c:9e: 91:62:aa:58:c5:98:2a:f9:2e:d6:cf:6d:65:8d:38:f8:39:d3: af:6b:17:3e:4c:d4:23:d0:42:b1:cf:40:72:7a:31:77:e9:f5: 7b:c1:51:4f:8a:ec:20:07:5d:db:98:31:c0:c4:d9:62:a8:7e: ca:f9:3f:81:5c:ab:bd:b1:2f:16:b4:0b:e6:7d:1b:fd:4e:10: 1c:85:f5:c2:10:a3:c0:a3:b3:1c:39:f4:cb:b9:ac:53:cd:ec: cf:e4:bc:bc:b4:a1:bc:08:93:82:48:f8:44:6b:db:04:b0:1f: e3:c5:06:cc:c5:23:f5:4f:ed:4f:6e:fe:0d:77:c9:41:3b:4e: 33:9a:a8:43:64:04:a7:d6:8e:f6:4a:d0:1a:11:2f:fa:a7:02: 78:bd:96:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8I7C4bIy2lzuqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1OVoXDTI1MTAyMjEyMzg1OVowLzEtMCsGA1UEAxMk M2UzNTBhZTMtNzIzZS00MTgzLTkzYTUtOTUzM2YzNDU3NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaXjGZZsoGW28he3nhQZX+z4PfiQlBSXvSnc Kic7knFGpLVIQmcHsnpEO/LH6SMT+YMaUIbvsxNju1SOaHltPdSdb05iVyL0KZHG 4PXJZ+zw6TSkL9zeKVtstzgoFkbAJvg5j/0R9Y9WiTpUf8ND8vn2z5PZjNnoRxgk sdxLIVH1VOTa6Rd4uPAc0UdMwA0cCZ1X95N+Y9WQQOEnPGrimbsFpTzGGx5vMDsp LtReKCljUfKSh+MeAt0ykoHG8mLfnx1/+IegiopJU0zvryIN5Hu4fEXm0/6xDOwp +SEqm1RXyJyxQvJLTdolFH0CeC3i/EdRML4BrXcUAtqtxuhlTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyVK/c5fjzxwSq3XVcgMw7eHqXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDAwMTc0ZTMtOTFjNy0z YmMyLWIzZDItYmQ5YTllMTA1NzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfDrPBj1D3koHFu2MeVeu23O3p981qg/XcESitJlGwr7bfHngMMNK1O JIDAUuMMo/IlZvGG3/Ix2p6nHGnt494yE3aWybkF1hDcvZINrh1wfT7QBLUe5zt+ lA0QD5Q4LoEb8+T75cjzaa2cnpFiqljFmCr5LtbPbWWNOPg5069rFz5M1CPQQrHP QHJ6MXfp9XvBUU+K7CAHXduYMcDE2WKofsr5P4Fcq72xLxa0C+Z9G/1OEByF9cIQ o8Cjsxw59Mu5rFPN7M/kvLy0obwIk4JI+ERr2wSwH+PFBszFI/VP7U9u/g13yUE7 TjOaqENkBKfWjvZK0BoRL/qnAni9lj0= -----END CERTIFICATE-----Generated at Tue Aug 5 23:07:00 2025 by rpki-client