$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0ca056b-e57e-3d69-912f-a9e818ce8b84.roa File: a0ca056b-e57e-3d69-912f-a9e818ce8b84.roa (raw, json) Hash identifier: l/ij40C75atAhQ2VIWvKJITwN87MOQuRgR0soJgZqxo= Subject key identifier: A2:BB:82:32:D9:64:94:8C:25:62:AE:72:0E:BC:F8:1B:61:C4:A9:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF082A361129CFFDBD4CB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0ca056b-e57e-3d69-912f-a9e818ce8b84.roa Signing time: Thu 24 Jul 2025 12:38:53 +0000 ROA not before: Thu 24 Jul 2025 12:38:53 +0000 ROA not after: Wed 22 Oct 2025 12:38:53 +0000 asID: 36623 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:82:a3:61:12:9c:ff:db:d4:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:53 2025 GMT Not After : Oct 22 12:38:53 2025 GMT Subject: CN=0a70b1c7-3797-44c8-b607-2966fd4b1069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:de:ef:0f:36:71:e4:22:ff:1c:72:66:91:15: 36:74:13:49:7b:0d:6e:72:3c:ba:19:41:a9:32:69: de:c0:3e:a0:c5:8a:47:cb:88:a9:64:7d:24:69:30: 4e:e5:b8:f9:44:b9:b4:3b:cb:46:f0:a9:9c:c6:6c: f2:32:fe:cd:26:da:2a:40:56:f3:a7:75:2d:bc:4e: 37:ab:4a:32:7d:cb:5d:4c:b7:3e:69:9b:bd:8f:f0: 6d:8c:6a:af:1d:2e:2e:cb:03:09:ba:ba:b9:7e:90: 67:cc:fe:ae:12:82:67:3c:db:c7:c0:2b:de:9b:3e: 1d:93:a1:2e:4e:7f:a0:19:8e:e2:24:75:7f:70:b5: f1:af:4d:16:55:13:4c:68:c7:22:ff:23:63:9c:23: f4:cd:25:28:63:49:e2:fe:f6:b5:34:28:fa:d3:8c: c5:17:6e:cc:20:ba:54:48:c9:d3:2a:14:14:8e:f0: 58:64:dc:8c:b8:b8:8e:79:2d:29:5e:df:22:60:ad: d1:5a:c5:da:77:8e:fe:e1:d6:ac:34:50:ed:72:66: 7f:08:e3:2c:7e:a8:7d:c2:38:28:df:ef:1b:e1:11: 4c:a1:7a:a2:89:e4:4d:13:2d:19:c2:4e:f4:bc:7e: f3:cc:e1:c2:c3:be:e7:a8:84:5a:88:ff:8b:85:89: 3d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BB:82:32:D9:64:94:8C:25:62:AE:72:0E:BC:F8:1B:61:C4:A9:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0ca056b-e57e-3d69-912f-a9e818ce8b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e0:59:e2:28:c0:7c:71:e1:bb:3d:35:16:90:b5:dc:30:2d: 58:26:a4:db:34:c3:23:61:3c:cd:81:55:6d:1a:93:d7:78:91: e9:35:6e:17:e1:39:2b:e1:6f:06:a3:ab:ec:b2:08:10:25:cd: 51:37:e3:a8:82:8f:ca:3c:cc:28:3d:08:49:25:b2:1b:26:88: 0f:b9:62:f1:09:a4:78:63:18:bd:e9:91:51:4c:3e:de:38:4e: af:14:95:f1:6c:97:36:21:9f:e4:f1:63:f4:cb:16:61:4a:da: 5b:4c:24:a5:c6:ab:37:b8:fe:89:59:a3:d6:5f:5e:56:f7:01: aa:fb:17:f5:78:c3:2a:e1:e2:be:5d:18:7c:c7:a6:07:b7:b3: 86:60:31:fe:92:90:a6:6e:0d:7d:c1:52:aa:f2:7e:1d:f9:bb: 5f:a3:c2:30:a6:8a:cc:ad:43:64:f6:4a:85:3b:1e:0e:c3:ba: 5d:46:b9:a0:c3:21:96:04:36:99:e8:23:6b:c3:06:f7:3d:17: fc:bb:7e:95:66:46:d6:f8:87:af:d1:96:7e:ec:a8:43:71:54: 34:e1:03:09:4c:20:79:29:30:3c:2b:d2:8c:da:d3:ff:b0:83: c2:24:db:41:b5:e2:ee:f5:88:80:04:5b:a6:1b:4b:0c:44:d0: 0b:7c:33:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IKjYRKc/9vUy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1M1oXDTI1MTAyMjEyMzg1M1owLzEtMCsGA1UEAxMk MGE3MGIxYzctMzc5Ny00NGM4LWI2MDctMjk2NmZkNGIxMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N7vDzZx5CL/HHJmkRU2dBNJew1ucjy6GUGp MmnewD6gxYpHy4ipZH0kaTBO5bj5RLm0O8tG8KmcxmzyMv7NJtoqQFbzp3UtvE43 q0oyfctdTLc+aZu9j/BtjGqvHS4uywMJurq5fpBnzP6uEoJnPNvHwCvemz4dk6Eu Tn+gGY7iJHV/cLXxr00WVRNMaMci/yNjnCP0zSUoY0ni/va1NCj604zFF27MILpU SMnTKhQUjvBYZNyMuLiOeS0pXt8iYK3RWsXad47+4dasNFDtcmZ/COMsfqh9wjgo 3+8b4RFMoXqiieRNEy0Zwk70vH7zzOHCw77nqIRaiP+LhYk9HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKK7gjLZZJSMJWKucg68+BthxKmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTBjYTA1NmItZTU3ZS0z ZDY5LTkxMmYtYTllODE4Y2U4Yjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDgWeIowHxx4bs9NRaQtdwwLVgmpNs0wyNhPM2BVW0ak9d4kek1bhfh OSvhbwajq+yyCBAlzVE346iCj8o8zCg9CEklshsmiA+5YvEJpHhjGL3pkVFMPt44 Tq8UlfFslzYhn+TxY/TLFmFK2ltMJKXGqze4/olZo9ZfXlb3Aar7F/V4wyrh4r5d GHzHpge3s4ZgMf6SkKZuDX3BUqryfh35u1+jwjCmisytQ2T2SoU7Hg7Dul1GuaDD IZYENpnoI2vDBvc9F/y7fpVmRtb4h6/Rln7sqENxVDThAwlMIHkpMDwr0oza0/+w g8Ik20G14u71iIAEW6YbSwxE0At8M1I= -----END CERTIFICATE-----Generated at Tue Aug 5 08:22:04 2025 by rpki-client