$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c434e4f3-be8f-3639-852d-82e7a27c95c9.roa File: c434e4f3-be8f-3639-852d-82e7a27c95c9.roa (raw, json) Hash identifier: hAw4vYSnzeaxXyq2/gjHePQq3MddfY2xm6YVuIK1UO0= Subject key identifier: A9:96:24:48:DE:78:0B:D2:60:C4:4B:5E:67:97:8B:55:96:14:43:18 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF08994662B552CB4851700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c434e4f3-be8f-3639-852d-82e7a27c95c9.roa Signing time: Thu 24 Jul 2025 12:38:57 +0000 ROA not before: Thu 24 Jul 2025 12:38:57 +0000 ROA not after: Wed 22 Oct 2025 12:38:57 +0000 asID: 396574 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:89:94:66:2b:55:2c:b4:85:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:57 2025 GMT Not After : Oct 22 12:38:57 2025 GMT Subject: CN=958a9dfd-e39a-4f1d-ac23-746493af45ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:7e:5b:23:2b:88:85:a6:61:01:99:da:da: bf:bf:97:b3:87:8d:4a:56:09:59:99:5e:f5:6a:1a: 64:7c:3c:4b:10:9c:76:cb:17:79:bb:a8:95:2e:7d: 65:09:13:5d:65:f5:c9:87:78:9b:df:85:e6:f1:86: a7:33:c6:e3:de:de:22:f6:32:51:f4:af:91:5c:73: fd:32:2d:ea:de:e7:7d:98:a4:0b:be:ba:d6:bb:70: d1:df:bd:44:c8:2e:19:5e:a1:c6:aa:a7:fb:1b:1f: 25:80:cf:31:5c:a0:0f:ce:94:60:44:15:f7:3a:ce: 33:3b:f2:02:94:90:29:ec:28:85:80:a6:1e:06:e6: d6:17:1a:4c:82:05:14:17:07:82:2a:5c:30:78:e3: 4c:f1:4f:ec:5f:c2:b5:f2:31:5a:71:94:07:ed:7f: 82:e4:42:66:2e:04:7c:7d:2c:1f:8b:67:3f:29:b4: 48:28:ef:2a:3a:92:41:fd:d6:26:67:4a:32:89:20: d1:a6:6a:df:a1:9e:4b:df:11:6f:30:8f:b9:6f:b9: f6:d3:4c:0b:60:f5:fb:7e:2f:7e:db:1c:61:c7:3c: f9:bf:94:32:52:79:db:c6:f4:f7:1d:64:d6:fa:3a: 9d:6d:81:a2:79:19:cc:fe:d0:dc:70:9b:f5:56:2a: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:96:24:48:DE:78:0B:D2:60:C4:4B:5E:67:97:8B:55:96:14:43:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c434e4f3-be8f-3639-852d-82e7a27c95c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:87:cc:41:2f:89:ca:d2:47:9e:5b:fa:28:9c:0f:b6:1b:5a: d3:66:89:17:2f:b5:cb:d8:1f:d5:fd:9d:e6:56:ad:70:53:d7: 69:9d:f1:7f:00:55:13:e6:4a:b0:42:a9:41:3d:90:b0:de:32: ea:85:74:28:5f:d2:ed:e3:44:37:81:36:6c:cc:7a:fc:1a:9c: 15:8f:5f:bb:0d:6e:d7:5d:f0:c1:07:00:1f:5d:f3:6d:fb:25: 7c:84:b7:aa:52:2b:79:25:99:21:76:63:b7:56:7f:64:ae:ec: 11:19:5f:eb:b4:37:3e:54:bd:63:15:9b:56:a3:b2:6d:fe:ce: 0a:aa:8d:87:12:89:5b:ab:8e:4c:76:51:b8:88:d5:fc:92:88: 20:e7:23:07:83:44:bc:f7:65:ab:8c:5c:de:ad:84:34:5c:a7: 13:de:66:fc:2c:78:1a:34:68:ac:41:1f:42:41:bd:55:7e:b7: d4:21:5e:f5:9b:8f:38:83:d8:d9:b6:25:7b:9d:58:86:ea:6e: 81:4a:1f:2c:42:cd:3d:9f:a0:4e:12:00:7d:dd:99:de:cf:93: 65:e4:08:10:10:25:36:67:2a:06:69:d5:c9:a0:2c:73:c7:68: 3a:c9:e0:cf:e9:71:d6:62:f9:25:5a:93:8f:2e:29:81:a5:e6: 96:79:59:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8ImUZitVLLSFFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1N1oXDTI1MTAyMjEyMzg1N1owLzEtMCsGA1UEAxMk OTU4YTlkZmQtZTM5YS00ZjFkLWFjMjMtNzQ2NDkzYWY0NWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtat+WyMriIWmYQGZ2tq/v5ezh41KVglZmV71 ahpkfDxLEJx2yxd5u6iVLn1lCRNdZfXJh3ib34Xm8YanM8bj3t4i9jJR9K+RXHP9 Mi3q3ud9mKQLvrrWu3DR371EyC4ZXqHGqqf7Gx8lgM8xXKAPzpRgRBX3Os4zO/IC lJAp7CiFgKYeBubWFxpMggUUFweCKlwweONM8U/sX8K18jFacZQH7X+C5EJmLgR8 fSwfi2c/KbRIKO8qOpJB/dYmZ0oyiSDRpmrfoZ5L3xFvMI+5b7n200wLYPX7fi9+ 2xxhxzz5v5QyUnnbxvT3HWTW+jqdbYGieRnM/tDccJv1ViqNzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmWJEjeeAvSYMRLXmeXi1WWFEMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzQzNGU0ZjMtYmU4Zi0z NjM5LTg1MmQtODJlN2EyN2M5NWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqHzEEvicrSR55b+iicD7YbWtNmiRcvtcvYH9X9neZWrXBT12md8X8A VRPmSrBCqUE9kLDeMuqFdChf0u3jRDeBNmzMevwanBWPX7sNbtdd8MEHAB9d8237 JXyEt6pSK3klmSF2Y7dWf2Su7BEZX+u0Nz5UvWMVm1ajsm3+zgqqjYcSiVurjkx2 UbiI1fySiCDnIweDRLz3ZauMXN6thDRcpxPeZvwseBo0aKxBH0JBvVV+t9QhXvWb jziD2Nm2JXudWIbqboFKHyxCzT2foE4SAH3dmd7Pk2XkCBAQJTZnKgZp1cmgLHPH aDrJ4M/pcdZi+SVak48uKYGl5pZ5WSg= -----END CERTIFICATE-----Generated at Wed Aug 6 00:47:30 2025 by rpki-client