$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99ced7b9-570f-39b0-9bf7-2d6dfcb1886f.roa File: 99ced7b9-570f-39b0-9bf7-2d6dfcb1886f.roa (raw, json) Hash identifier: lb0WW1a3FW5xyKKVhQLCvRupQkBTRgu7iqzIhj83Ds0= Subject key identifier: CF:65:74:DC:1A:11:2E:68:E4:64:18:BD:C3:5B:D3:3F:E7:92:CE:36 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF0846F1762BE7752132680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99ced7b9-570f-39b0-9bf7-2d6dfcb1886f.roa Signing time: Thu 24 Jul 2025 12:38:54 +0000 ROA not before: Thu 24 Jul 2025 12:38:54 +0000 ROA not after: Wed 22 Oct 2025 12:38:54 +0000 asID: 396565 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:84:6f:17:62:be:77:52:13:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:54 2025 GMT Not After : Oct 22 12:38:54 2025 GMT Subject: CN=8f764cd2-8813-4512-9968-ef10f4f6a802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:20:aa:e0:84:c6:11:60:80:05:71:e7:30: 95:cf:fb:eb:e7:6e:eb:84:ae:3c:75:b0:8d:76:65: f4:31:fa:cf:81:7f:67:35:6e:4a:8d:75:9a:b8:72: f1:4f:b7:c1:8f:36:42:bf:ea:b9:ef:0b:d6:b8:18: 8c:85:33:f4:53:e1:e7:be:a7:c3:de:f9:9a:7d:7b: 3a:87:d8:65:ca:68:b7:74:4f:ea:ba:70:d7:41:24: bf:a1:45:97:5b:4b:eb:c8:41:69:98:3d:99:6b:5b: 88:f3:19:9f:54:c5:7e:25:4c:8c:85:09:13:91:bd: d3:9f:58:70:c5:a4:76:18:aa:1e:01:9b:a8:5e:1c: 78:63:59:83:06:39:c2:c7:bb:bc:ff:7c:69:81:8d: db:a1:4e:5f:6c:f2:2c:02:77:85:5b:72:7a:5e:b7: cc:30:2e:ed:73:15:0e:cf:bc:e1:eb:d4:e2:83:ca: 2b:73:4d:89:a3:42:79:84:01:f2:13:7a:fe:5c:d0: 8c:3f:d5:55:32:b3:99:18:ea:78:86:d2:85:2b:1b: 75:02:46:35:8b:60:b3:03:8e:69:52:ed:de:70:63: 95:26:55:28:6d:a3:ec:98:1c:c1:a0:12:ac:6c:20: 94:67:1f:ab:3e:b3:8d:4d:1d:50:bf:43:70:be:7f: 14:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:65:74:DC:1A:11:2E:68:E4:64:18:BD:C3:5B:D3:3F:E7:92:CE:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99ced7b9-570f-39b0-9bf7-2d6dfcb1886f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:f3:1f:0b:a4:16:24:50:ef:24:c6:d5:c7:57:43:b0:d3:22: e6:94:83:12:93:b7:f2:60:6a:79:2c:1b:38:98:49:f1:3e:65: e7:96:29:4a:bc:9a:57:59:6c:83:75:b4:5b:56:e6:07:8d:a3: 3c:1b:14:39:45:2f:c4:42:93:84:a9:60:db:1c:be:9c:02:64: 61:2d:6f:91:c0:5d:8f:d4:60:15:32:26:5c:b3:0e:cc:2f:c5: 5c:4e:ae:24:ab:3a:a6:1d:a2:05:98:18:42:5e:d6:1f:5e:63: 26:15:92:29:ce:cb:d9:ce:1c:e5:58:2e:63:96:94:8e:13:f9: 68:1e:2f:ac:85:10:0e:95:13:74:73:b4:28:80:c9:cd:ff:44: b6:dd:c8:6a:c2:4f:28:2f:e1:76:de:bb:07:51:1d:b2:91:0f: 94:18:4d:7b:96:f8:d4:16:72:96:bf:62:74:22:58:4d:d0:78: f8:a2:99:da:f4:87:ee:78:55:79:68:69:67:c5:63:76:b0:a5: 70:f1:66:02:ab:0d:41:d2:b3:2c:91:fa:d7:11:ff:fe:5e:f9: 83:dd:d3:ae:09:70:23:07:bd:57:a4:aa:77:19:20:aa:eb:1c: 1a:88:68:4b:81:06:4d:84:5c:14:47:41:43:0d:be:3b:96:8d: 3e:83:6e:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IRvF2K+d1ITJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1NFoXDTI1MTAyMjEyMzg1NFowLzEtMCsGA1UEAxMk OGY3NjRjZDItODgxMy00NTEyLTk5NjgtZWYxMGY0ZjZhODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7ogquCExhFggAVx5zCVz/vr527rhK48dbCN dmX0MfrPgX9nNW5KjXWauHLxT7fBjzZCv+q57wvWuBiMhTP0U+HnvqfD3vmafXs6 h9hlymi3dE/qunDXQSS/oUWXW0vryEFpmD2Za1uI8xmfVMV+JUyMhQkTkb3Tn1hw xaR2GKoeAZuoXhx4Y1mDBjnCx7u8/3xpgY3boU5fbPIsAneFW3J6XrfMMC7tcxUO z7zh69Tig8orc02Jo0J5hAHyE3r+XNCMP9VVMrOZGOp4htKFKxt1AkY1i2CzA45p Uu3ecGOVJlUobaPsmBzBoBKsbCCUZx+rPrONTR1Qv0Nwvn8UdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9ldNwaES5o5GQYvcNb0z/nks42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTljZWQ3YjktNTcwZi0z OWIwLTliZjctMmQ2ZGZjYjE4ODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfzHwukFiRQ7yTG1cdXQ7DTIuaUgxKTt/JganksGziYSfE+ZeeWKUq8 mldZbIN1tFtW5geNozwbFDlFL8RCk4SpYNscvpwCZGEtb5HAXY/UYBUyJlyzDswv xVxOriSrOqYdogWYGEJe1h9eYyYVkinOy9nOHOVYLmOWlI4T+WgeL6yFEA6VE3Rz tCiAyc3/RLbdyGrCTygv4XbeuwdRHbKRD5QYTXuW+NQWcpa/YnQiWE3QePiimdr0 h+54VXloaWfFY3awpXDxZgKrDUHSsyyR+tcR//5e+YPd064JcCMHvVekqncZIKrr HBqIaEuBBk2EXBRHQUMNvjuWjT6Dbo0= -----END CERTIFICATE-----Generated at Wed Aug 6 07:57:40 2025 by rpki-client