$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ffd968-02c6-388c-b8db-e56815461be6.roa File: 86ffd968-02c6-388c-b8db-e56815461be6.roa (raw, json) Hash identifier: 95m5O/9KVbZQL08g3UA/EXoqRL2G2G9nPMt/XQC3Shc= Subject key identifier: 40:B3:59:66:82:5C:5A:BF:BE:38:64:56:6B:58:12:FB:D8:AA:EA:35 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF08655E641B05693C8BE80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ffd968-02c6-388c-b8db-e56815461be6.roa Signing time: Thu 24 Jul 2025 12:38:55 +0000 ROA not before: Thu 24 Jul 2025 12:38:55 +0000 ROA not after: Wed 22 Oct 2025 12:38:55 +0000 asID: 396745 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:86:55:e6:41:b0:56:93:c8:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:55 2025 GMT Not After : Oct 22 12:38:55 2025 GMT Subject: CN=8571620e-8db7-48c7-b646-0793a0f8cf47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fa:cd:8a:fd:1f:3e:da:22:9d:d4:15:d8:2a: fd:01:06:ff:86:39:a0:0c:39:46:80:a2:ef:ac:34: f7:8e:14:1c:5e:18:19:ad:ae:d1:a3:50:d9:c3:d7: 95:aa:47:c3:92:a6:e5:9e:f6:1c:34:6c:c4:8d:f9: 53:6e:36:95:c1:67:b8:32:89:d8:ec:78:20:34:4b: 2e:f6:ab:5e:4d:e9:78:39:d0:21:5b:81:51:4c:63: 8d:70:5e:42:06:11:ea:a4:50:93:ba:36:17:29:04: d6:ec:13:f2:7b:8e:66:8f:4a:c6:9c:97:5e:f9:e9: 8b:a5:6d:57:32:b0:b9:84:a8:14:7b:b0:25:52:a6: c1:ff:4f:38:b0:6b:e8:38:c8:b8:2c:6f:4a:56:ed: d7:4d:b0:49:1b:5b:c1:13:95:8d:65:0a:ca:4b:73: 8d:f1:7e:23:1c:ff:31:f0:30:53:18:03:11:27:64: 38:de:66:e9:61:ff:aa:0e:25:9c:1c:61:05:24:ca: 54:29:03:28:fc:c5:42:08:7d:01:09:24:ed:ba:52: 81:ad:d7:52:b2:d9:74:9b:e0:32:cb:d2:f2:ea:0d: e7:ef:5c:4c:1f:dc:f7:9a:75:b8:33:e4:24:ba:5a: 8f:18:80:d6:33:8a:de:90:b5:a2:8e:61:db:85:17: b2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B3:59:66:82:5C:5A:BF:BE:38:64:56:6B:58:12:FB:D8:AA:EA:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ffd968-02c6-388c-b8db-e56815461be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ee:43:b9:6a:ec:d6:c2:67:5a:af:7f:c5:4a:99:45:ca:b7: 96:13:65:1b:47:9a:10:48:e6:d5:b3:9f:29:c3:be:c5:91:45: e8:13:7d:4d:4c:17:de:f6:d6:68:58:fa:e2:9d:ff:f8:ba:f2: 03:d2:46:f5:02:ae:1d:89:f7:45:a0:d2:95:f2:59:ea:d5:da: 7c:42:b4:f8:1d:06:5f:32:5b:10:dd:51:f0:5e:90:4d:11:85: 0d:b2:45:14:e0:b5:95:b9:34:f9:9a:fa:4d:18:ee:df:71:0c: 6a:25:4b:f9:6e:37:b4:0f:31:08:e3:24:52:7b:93:22:84:84: d1:90:ce:a8:72:ad:2a:49:19:4c:ba:2a:13:0a:0e:8a:2c:67: 4e:19:76:be:7a:ce:93:bc:fc:42:7c:9a:55:bb:66:a0:15:8a: 43:64:95:5a:3f:03:37:1a:fd:90:e9:36:95:33:2b:7c:82:f8: 90:89:d0:b9:b6:e1:e2:1f:15:68:ae:9f:65:17:6e:d8:42:2f: b8:18:d5:3e:e6:c0:56:05:20:ee:17:a8:d2:91:60:11:eb:72: 86:ec:df:aa:f6:18:bc:bd:8d:c0:71:9a:7c:d8:71:fe:18:f4: 34:a4:2d:70:2c:b5:db:09:1f:86:76:41:09:f3:60:8f:2f:82: a2:8b:c8:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IZV5kGwVpPIvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1NVoXDTI1MTAyMjEyMzg1NVowLzEtMCsGA1UEAxMk ODU3MTYyMGUtOGRiNy00OGM3LWI2NDYtMDc5M2EwZjhjZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/rNiv0fPtoindQV2Cr9AQb/hjmgDDlGgKLv rDT3jhQcXhgZra7Ro1DZw9eVqkfDkqblnvYcNGzEjflTbjaVwWe4MonY7HggNEsu 9qteTel4OdAhW4FRTGONcF5CBhHqpFCTujYXKQTW7BPye45mj0rGnJde+emLpW1X MrC5hKgUe7AlUqbB/084sGvoOMi4LG9KVu3XTbBJG1vBE5WNZQrKS3ON8X4jHP8x 8DBTGAMRJ2Q43mbpYf+qDiWcHGEFJMpUKQMo/MVCCH0BCSTtulKBrddSstl0m+Ay y9Ly6g3n71xMH9z3mnW4M+QkulqPGIDWM4rekLWijmHbhReyiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECzWWaCXFq/vjhkVmtYEvvYquo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZmZmQ5NjgtMDJjNi0z ODhjLWI4ZGItZTU2ODE1NDYxYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzuQ7lq7NbCZ1qvf8VKmUXKt5YTZRtHmhBI5tWznynDvsWRRegTfU1M F9721mhY+uKd//i68gPSRvUCrh2J90Wg0pXyWerV2nxCtPgdBl8yWxDdUfBekE0R hQ2yRRTgtZW5NPma+k0Y7t9xDGolS/luN7QPMQjjJFJ7kyKEhNGQzqhyrSpJGUy6 KhMKDoosZ04Zdr56zpO8/EJ8mlW7ZqAVikNklVo/Azca/ZDpNpUzK3yC+JCJ0Lm2 4eIfFWiun2UXbthCL7gY1T7mwFYFIO4XqNKRYBHrcobs36r2GLy9jcBxmnzYcf4Y 9DSkLXAstdsJH4Z2QQnzYI8vgqKLyIQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:45:20 2025 by rpki-client