$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ecf9f37-521d-3fbd-8cc8-131c99b7a7e7.roa File: 4ecf9f37-521d-3fbd-8cc8-131c99b7a7e7.roa (raw, json) Hash identifier: EYZ4VsdV9VxAyOEqAUA2PY84+sNtPFlvyzSNYh6hSvc= Subject key identifier: D4:A6:F4:B5:7F:D0:47:B5:27:2E:22:04:E5:AB:13:7E:8A:23:53:4D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF0847ECF626BD8CFC3B100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ecf9f37-521d-3fbd-8cc8-131c99b7a7e7.roa Signing time: Thu 24 Jul 2025 12:38:54 +0000 ROA not before: Thu 24 Jul 2025 12:38:54 +0000 ROA not after: Wed 22 Oct 2025 12:38:54 +0000 asID: 396562 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:84:7e:cf:62:6b:d8:cf:c3:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:54 2025 GMT Not After : Oct 22 12:38:54 2025 GMT Subject: CN=4b372469-0fb1-42d6-aff7-080a498793de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3b:8d:5b:34:4d:9f:54:d0:a6:0b:38:83:a1: 5e:1c:97:98:ce:00:fc:b4:0a:93:dc:6f:04:fe:25: 61:fe:34:c1:5c:f3:68:83:ac:a6:fe:bc:3b:7f:38: 3d:95:70:53:cd:77:96:31:2c:7a:3c:f0:54:19:86: 05:2e:f8:e2:1a:9a:db:03:bd:28:c5:c4:90:aa:83: 82:26:87:aa:3e:a9:2d:14:ee:d0:6e:9c:51:6d:88: ea:9d:3c:5e:78:66:0d:c4:d2:97:f2:08:9c:98:c6: 79:0c:6d:78:49:71:0c:70:40:08:a1:0c:69:af:83: 74:19:3d:49:98:35:24:1a:1f:60:2c:95:0a:d5:08: eb:1a:81:28:0e:d4:ef:c8:bf:b1:54:ac:e7:9c:45: 7e:dc:44:2c:6f:a2:50:c6:78:7d:ec:f0:3b:73:05: a9:ba:04:23:ec:04:0f:75:19:6f:e8:59:ac:f6:ea: 77:16:e9:02:9c:3d:50:3b:01:b0:e9:9f:3f:de:4e: 11:70:2a:bd:d2:da:f7:58:5b:c9:91:4c:8a:aa:bc: fd:3a:7e:70:82:22:4f:c3:e5:04:15:b9:d2:c7:5a: 03:a1:f6:51:15:d1:95:ed:06:42:ca:a7:2a:ec:55: 53:1c:70:7d:10:23:07:1d:f4:1d:bb:07:93:64:fd: cd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A6:F4:B5:7F:D0:47:B5:27:2E:22:04:E5:AB:13:7E:8A:23:53:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ecf9f37-521d-3fbd-8cc8-131c99b7a7e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:78:84:f0:87:01:3a:1a:f4:7f:a1:68:07:18:56:55:21:3a: 90:65:36:06:78:ba:a5:a7:14:e0:6a:87:8f:f5:af:93:9c:b9: 9a:04:b8:72:68:1d:21:5f:18:3c:a8:6e:10:3b:0c:a5:9e:8d: d6:32:e7:2b:1c:64:c7:6e:df:b7:f1:8f:e2:a5:96:27:48:19: 93:ff:d1:7a:4b:e2:0d:fa:d1:de:87:1d:d5:0a:62:b2:fe:aa: 6f:45:f1:7a:b5:4f:8c:55:b6:c2:80:5e:76:5a:d0:d8:5b:8e: b8:be:44:da:b8:a2:7c:00:02:55:46:d8:4e:1a:8e:be:bb:1f: 72:81:a6:56:0a:8d:2a:81:49:10:b6:d3:5d:19:db:22:c2:fe: b7:b8:d8:f4:9b:36:a8:36:ed:e1:38:54:2c:ee:be:52:1f:3c: c0:23:71:18:bb:f6:b3:c3:25:c4:b3:ea:48:11:43:31:fe:be: ea:db:31:b4:73:ca:92:0b:ce:9b:14:61:a8:7c:b7:3c:87:a7: cc:81:6b:da:71:1e:ba:d7:e4:70:2e:10:83:73:58:b4:5d:75: 57:03:b4:43:73:a3:b8:97:d9:76:57:c7:bd:aa:da:dd:da:c1: 51:a2:d0:3a:39:e9:cd:81:10:a5:6f:03:51:7c:d6:7a:e5:e3: 4a:1f:1a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IR+z2Jr2M/DsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1NFoXDTI1MTAyMjEyMzg1NFowLzEtMCsGA1UEAxMk NGIzNzI0NjktMGZiMS00MmQ2LWFmZjctMDgwYTQ5ODc5M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzuNWzRNn1TQpgs4g6FeHJeYzgD8tAqT3G8E /iVh/jTBXPNog6ym/rw7fzg9lXBTzXeWMSx6PPBUGYYFLvjiGprbA70oxcSQqoOC JoeqPqktFO7QbpxRbYjqnTxeeGYNxNKX8gicmMZ5DG14SXEMcEAIoQxpr4N0GT1J mDUkGh9gLJUK1QjrGoEoDtTvyL+xVKznnEV+3EQsb6JQxnh97PA7cwWpugQj7AQP dRlv6Fms9up3FukCnD1QOwGw6Z8/3k4RcCq90tr3WFvJkUyKqrz9On5wgiJPw+UE FbnSx1oDofZRFdGV7QZCyqcq7FVTHHB9ECMHHfQduweTZP3NVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSm9LV/0Ee1Jy4iBOWrE36KI1NNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGVjZjlmMzctNTIxZC0z ZmJkLThjYzgtMTMxYzk5YjdhN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx4hPCHAToa9H+haAcYVlUhOpBlNgZ4uqWnFOBqh4/1r5OcuZoEuHJo HSFfGDyobhA7DKWejdYy5yscZMdu37fxj+KllidIGZP/0XpL4g360d6HHdUKYrL+ qm9F8Xq1T4xVtsKAXnZa0Nhbjri+RNq4onwAAlVG2E4ajr67H3KBplYKjSqBSRC2 010Z2yLC/re42PSbNqg27eE4VCzuvlIfPMAjcRi79rPDJcSz6kgRQzH+vurbMbRz ypILzpsUYah8tzyHp8yBa9pxHrrX5HAuEINzWLRddVcDtENzo7iX2XZXx72q2t3a wVGi0Do56c2BEKVvA1F81nrl40ofGok= -----END CERTIFICATE-----Generated at Tue Aug 5 17:09:34 2025 by rpki-client