$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438f457e-1916-328d-9276-5ac23bfd1b74.roa File: 438f457e-1916-328d-9276-5ac23bfd1b74.roa (raw, json) Hash identifier: 0OlRTwe5+qg9djkRBcKev1BMH6yhLeitEArhenEfQj8= Subject key identifier: 8B:28:84:70:7A:54:72:90:DA:EF:CE:8A:40:E9:BC:DB:0C:46:8D:B2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF084E7F7769F2BC9214080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438f457e-1916-328d-9276-5ac23bfd1b74.roa Signing time: Thu 24 Jul 2025 12:38:54 +0000 ROA not before: Thu 24 Jul 2025 12:38:54 +0000 ROA not after: Wed 22 Oct 2025 12:38:54 +0000 asID: 36620 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:84:e7:f7:76:9f:2b:c9:21:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:54 2025 GMT Not After : Oct 22 12:38:54 2025 GMT Subject: CN=a23eb941-c517-4320-907d-97309537e3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:7c:7e:1b:e6:cc:b7:47:89:30:f1:03:b9: b9:4c:45:73:b9:0e:5b:92:82:2a:db:64:39:ae:27: cb:b4:dc:89:0d:93:7a:c2:09:16:d2:d8:a1:27:fa: 22:f4:77:ff:8d:53:c3:68:7c:33:ef:32:0e:4a:fc: b9:a2:5f:42:1e:ff:7d:7c:41:c4:17:a8:7c:f6:a1: 4d:d0:4e:29:a2:6d:59:16:ba:9f:ab:78:cd:e5:57: e2:8a:02:a8:47:3d:05:4e:e1:f5:47:9f:b4:2b:f6: 1c:7b:8d:4a:18:3c:2c:bc:85:5e:88:d9:6e:ec:0a: 2c:41:bc:e5:22:a2:19:bd:2f:b2:71:74:f8:5a:c2: cd:65:1a:46:c2:a3:8e:d1:75:05:83:8e:d8:46:2d: a7:d6:73:02:eb:13:33:7d:fa:4c:54:a0:91:af:48: 1f:db:70:1d:e0:bc:03:7b:a6:dc:50:2a:6c:74:01: 2d:69:0b:0f:f6:1a:28:0b:88:08:d0:86:c6:0f:e1: d4:da:9f:d2:b5:7f:c5:b8:e6:82:4e:d2:0f:3f:56: 91:45:ad:9f:34:c3:49:0a:1d:41:0f:8e:dc:ec:e7: df:d0:30:6b:64:57:19:dc:9e:e8:e4:50:41:a7:e9: 4c:62:b5:83:ee:2e:33:e0:b3:6e:d3:df:c9:6b:de: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:28:84:70:7A:54:72:90:DA:EF:CE:8A:40:E9:BC:DB:0C:46:8D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438f457e-1916-328d-9276-5ac23bfd1b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:e7:c6:a9:c6:ca:32:4d:c8:9b:a0:6f:38:6a:dc:31:d0:e6: 5a:32:8e:fb:4b:ce:23:3e:c5:2b:8b:ed:c1:7e:39:02:4c:db: f8:f1:43:ae:7a:91:3e:a9:37:bb:90:61:5d:ec:03:22:49:82: 8f:4c:a3:70:1b:2d:fe:b9:0d:f6:b7:2a:c2:a0:37:d1:a0:1a: 70:d3:d5:2e:b2:cd:63:6c:32:35:64:45:6b:ad:d4:a5:e2:1b: e2:cc:67:c8:a9:1f:8a:25:2f:02:6e:e7:c4:bf:6b:57:7b:bf: c9:fc:8e:39:70:f5:67:b9:98:26:9c:19:25:5f:ba:ec:c6:3a: 0f:d2:e7:e3:4b:1b:48:88:61:c1:4a:2e:61:5a:13:73:c9:be: d7:54:c4:eb:cc:b7:99:58:84:be:e8:e1:e8:3d:26:bd:28:03: ed:c9:5a:a3:01:bc:cc:0d:14:43:b8:f3:a3:30:59:a5:14:c2: 87:9b:79:ba:92:18:51:73:b5:56:a5:bb:4c:67:f6:32:d2:23: a0:a2:af:e7:3c:66:e2:45:e5:4e:50:26:55:ee:8e:9a:b6:99: 62:bd:0e:eb:8a:ad:a0:1e:d8:9e:49:f8:51:8b:82:ba:ce:0d: 5a:2a:d5:9c:98:15:55:c2:a9:48:30:95:af:4b:2b:73:06:3c: 1f:d1:a3:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8ITn93afK8khQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1NFoXDTI1MTAyMjEyMzg1NFowLzEtMCsGA1UEAxMk YTIzZWI5NDEtYzUxNy00MzIwLTkwN2QtOTczMDk1MzdlM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi58fhvmzLdHiTDxA7m5TEVzuQ5bkoIq22Q5 rifLtNyJDZN6wgkW0tihJ/oi9Hf/jVPDaHwz7zIOSvy5ol9CHv99fEHEF6h89qFN 0E4pom1ZFrqfq3jN5VfiigKoRz0FTuH1R5+0K/Yce41KGDwsvIVeiNlu7AosQbzl IqIZvS+ycXT4WsLNZRpGwqOO0XUFg47YRi2n1nMC6xMzffpMVKCRr0gf23Ad4LwD e6bcUCpsdAEtaQsP9hooC4gI0IbGD+HU2p/StX/FuOaCTtIPP1aRRa2fNMNJCh1B D47c7Off0DBrZFcZ3J7o5FBBp+lMYrWD7i4z4LNu09/Ja95qmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsohHB6VHKQ2u/OikDpvNsMRo2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDM4ZjQ1N2UtMTkxNi0z MjhkLTkyNzYtNWFjMjNiZmQxYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKznxqnGyjJNyJugbzhq3DHQ5loyjvtLziM+xSuL7cF+OQJM2/jxQ656 kT6pN7uQYV3sAyJJgo9Mo3AbLf65Dfa3KsKgN9GgGnDT1S6yzWNsMjVkRWut1KXi G+LMZ8ipH4olLwJu58S/a1d7v8n8jjlw9We5mCacGSVfuuzGOg/S5+NLG0iIYcFK LmFaE3PJvtdUxOvMt5lYhL7o4eg9Jr0oA+3JWqMBvMwNFEO486MwWaUUwoebebqS GFFztValu0xn9jLSI6Cir+c8ZuJF5U5QJlXujpq2mWK9DuuKraAe2J5J+FGLgrrO DVoq1ZyYFVXCqUgwla9LK3MGPB/Ro80= -----END CERTIFICATE-----Generated at Thu Aug 7 03:53:26 2025 by rpki-client