$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8c87c4b-13b2-330d-b898-07edefe1f587.roa File: b8c87c4b-13b2-330d-b898-07edefe1f587.roa (raw, json) Hash identifier: kk92AY0MU9fmX7Rw66YPjeSF8QJMMpRFyrG6CJHqJCw= Subject key identifier: CE:16:01:C7:E7:35:D4:E1:3D:CA:46:74:48:3A:C9:35:A8:6B:CE:9E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF07F71E68BC57BA339DD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8c87c4b-13b2-330d-b898-07edefe1f587.roa Signing time: Thu 24 Jul 2025 12:38:52 +0000 ROA not before: Thu 24 Jul 2025 12:38:52 +0000 ROA not after: Wed 22 Oct 2025 12:38:52 +0000 asID: 40717 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:7f:71:e6:8b:c5:7b:a3:39:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:52 2025 GMT Not After : Oct 22 12:38:52 2025 GMT Subject: CN=1fbb69a3-5e4f-4683-b0cf-79881d301142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b7:7f:a5:47:1e:96:af:36:1e:d2:d4:df:a3: 82:98:e4:64:98:1a:51:0a:0a:d4:55:7a:6a:52:02: 36:55:f5:83:6b:3f:7f:53:f5:b7:df:d4:75:f8:e7: 0c:8f:bb:a4:07:08:ba:c3:e8:9a:97:dc:a8:08:99: 7e:b7:56:5e:90:d8:fd:17:72:d0:5a:27:1f:ba:85: fc:74:89:34:cb:d1:73:ec:d7:54:16:cf:08:05:a9: ec:dd:59:31:74:55:03:48:54:97:13:51:e7:cd:47: eb:a7:bf:95:a8:e9:d6:40:5d:97:e0:0c:53:d4:9c: 51:c5:fa:a9:1a:ce:37:e1:8e:cd:7a:8f:0e:85:74: 48:07:8d:ac:45:bf:6b:e9:9b:c4:7b:17:bd:23:ef: 31:d0:de:80:a9:0e:f0:c4:8e:e3:19:17:b7:55:4f: 24:69:23:2b:e5:d9:2f:5f:88:99:77:5e:99:28:0b: f5:e5:1d:a2:85:c5:4e:d0:43:77:6d:d9:df:78:d7: a3:01:37:a5:d3:db:91:14:88:41:28:e3:67:43:05: d3:8d:e5:71:ed:8c:e7:bb:41:79:90:31:3b:90:73: d6:89:0a:bd:b2:05:94:56:fe:d6:3f:31:4a:66:37: d7:48:cb:7e:f4:07:28:b1:37:dc:f7:3a:ca:38:80: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:16:01:C7:E7:35:D4:E1:3D:CA:46:74:48:3A:C9:35:A8:6B:CE:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8c87c4b-13b2-330d-b898-07edefe1f587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:43:42:69:4f:7b:55:f7:19:81:66:e0:f6:c2:44:d7:0e:60: 47:4a:15:86:b4:3e:f2:5d:33:f3:df:09:df:6f:8b:9a:09:7a: ec:98:0a:e6:ab:fc:40:65:ca:e8:76:5e:87:02:04:5b:8d:2d: 8e:a4:5d:e2:e5:31:e8:74:d6:86:3c:a6:d7:f1:82:32:21:fd: bb:1e:2f:57:17:87:f0:1a:e3:81:b0:fc:ec:13:c2:5f:43:86: 08:33:0c:c8:0d:36:81:06:81:34:db:ce:a7:c5:0d:a3:4c:12: fb:73:30:df:a4:8b:8a:36:44:be:e1:de:bd:b6:32:3e:a0:4f: 94:47:65:88:1a:fd:21:45:72:89:62:75:cd:9a:d6:a3:b2:70: 90:d1:d7:df:a6:3d:94:91:21:0d:3f:b8:1e:48:1c:7f:5c:e5: 19:6d:2d:9e:0a:a6:df:ab:4a:b6:c0:71:61:31:05:52:ad:4a: a9:51:d5:40:14:87:b1:57:90:3c:a5:e7:37:1e:f6:fa:38:2b: 7d:b0:d8:65:55:2f:0f:d0:1c:a8:dd:41:d8:f6:9d:84:d5:f4: a3:54:66:47:18:a4:23:4f:c4:00:96:a5:7f:66:6a:20:98:79: d5:d9:f1:e2:18:7b:9b:97:cb:94:ec:ca:49:20:c8:d5:ce:0b: ab:ca:21:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8H9x5ovFe6M53YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MloXDTI1MTAyMjEyMzg1MlowLzEtMCsGA1UEAxMk MWZiYjY5YTMtNWU0Zi00NjgzLWIwY2YtNzk4ODFkMzAxMTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrd/pUcelq82HtLU36OCmORkmBpRCgrUVXpq UgI2VfWDaz9/U/W339R1+OcMj7ukBwi6w+ial9yoCJl+t1ZekNj9F3LQWicfuoX8 dIk0y9Fz7NdUFs8IBans3VkxdFUDSFSXE1HnzUfrp7+VqOnWQF2X4AxT1JxRxfqp Gs434Y7Neo8OhXRIB42sRb9r6ZvEexe9I+8x0N6AqQ7wxI7jGRe3VU8kaSMr5dkv X4iZd16ZKAv15R2ihcVO0EN3bdnfeNejATel09uRFIhBKONnQwXTjeVx7Yznu0F5 kDE7kHPWiQq9sgWUVv7WPzFKZjfXSMt+9AcosTfc9zrKOIAG0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4WAcfnNdThPcpGdEg6yTWoa86eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjhjODdjNGItMTNiMi0z MzBkLWI4OTgtMDdlZGVmZTFmNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdDQmlPe1X3GYFm4PbCRNcOYEdKFYa0PvJdM/PfCd9vi5oJeuyYCuar /EBlyuh2XocCBFuNLY6kXeLlMeh01oY8ptfxgjIh/bseL1cXh/Aa44Gw/OwTwl9D hggzDMgNNoEGgTTbzqfFDaNMEvtzMN+ki4o2RL7h3r22Mj6gT5RHZYga/SFFcoli dc2a1qOycJDR19+mPZSRIQ0/uB5IHH9c5RltLZ4Kpt+rSrbAcWExBVKtSqlR1UAU h7FXkDyl5zce9vo4K32w2GVVLw/QHKjdQdj2nYTV9KNUZkcYpCNPxACWpX9maiCY edXZ8eIYe5uXy5TsykkgyNXOC6vKIcs= -----END CERTIFICATE-----Generated at Wed Aug 6 12:41:45 2025 by rpki-client