$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4c4602e-1b06-304b-84e3-00919b77de72.roa File: c4c4602e-1b06-304b-84e3-00919b77de72.roa (raw, json) Hash identifier: hPQ88MzHDrvg037+dnIopR+UHg7hiPbgYxXtlJ4wH1g= Subject key identifier: C3:EF:C7:B3:3B:96:B7:65:E0:47:3A:36:85:09:92:0F:6E:42:00:8C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF089DA4B2FCF3EE7A3D700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4c4602e-1b06-304b-84e3-00919b77de72.roa Signing time: Thu 24 Jul 2025 12:38:57 +0000 ROA not before: Thu 24 Jul 2025 12:38:57 +0000 ROA not after: Wed 22 Oct 2025 12:38:57 +0000 asID: 397198 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:89:da:4b:2f:cf:3e:e7:a3:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:57 2025 GMT Not After : Oct 22 12:38:57 2025 GMT Subject: CN=46afcbaf-3264-40e8-afbf-e3640e3cdaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7b:25:8a:8e:bb:1f:32:11:ab:52:68:dc:40: 7e:b6:a8:dd:26:11:ce:23:7e:8c:8b:3a:40:3e:7f: 58:5c:b0:48:c8:15:ca:0d:cc:a8:80:00:d3:b9:1c: 2c:2b:5e:b2:9f:17:e3:8d:a1:94:bf:78:38:65:87: e1:a6:2d:d6:48:14:1b:90:9e:b4:33:b5:f7:3c:e2: e5:1d:12:5f:12:b6:c4:b0:5b:68:b4:bc:cb:89:dc: 3e:e1:0b:1e:fd:d2:74:bb:2b:ab:ee:92:64:37:5f: fb:b0:5e:e5:31:ce:4d:84:38:6c:0d:14:a9:00:0e: e1:36:4f:30:e3:7b:1b:81:32:46:4e:50:eb:fc:36: 55:5a:54:7f:23:f5:f8:45:bd:bd:fc:d5:f1:bf:25: 3d:c8:e7:48:96:93:20:35:82:1c:21:6c:ff:fd:d8: d8:ce:2c:ee:b3:49:f4:69:d0:01:35:04:89:87:4e: 9e:72:a9:e2:7f:31:d9:bc:71:98:b3:df:f0:6a:3a: 18:11:3d:24:3d:72:f9:7f:28:30:bf:bf:66:b6:86: 0c:c5:93:a5:80:52:6a:0e:3b:c0:c9:05:03:ac:9a: 39:79:02:3f:39:ab:fc:68:68:4f:6b:75:a4:82:d0: 5e:af:a5:9c:2d:01:dc:9e:9c:23:36:8b:d6:b3:b1: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EF:C7:B3:3B:96:B7:65:E0:47:3A:36:85:09:92:0F:6E:42:00:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4c4602e-1b06-304b-84e3-00919b77de72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:8d:26:95:83:74:ee:20:bd:d4:2e:74:88:74:18:ee:ee:57: 11:84:ad:43:37:74:a4:f0:39:68:5d:29:92:b1:5e:20:f7:0a: 4c:81:d5:1d:62:60:c8:be:d5:a8:73:02:08:c3:79:c3:7c:67: da:59:19:8e:7c:06:7a:23:8c:60:26:0c:25:b4:16:cb:4d:3c: e7:28:20:93:0d:e0:82:37:ae:8e:1b:13:e0:36:21:fc:df:17: 2c:43:3d:87:81:5b:1a:73:a3:3d:ff:d2:ab:8c:40:63:2d:88: 50:e2:3d:c1:c7:f5:f7:8c:93:98:0a:cb:ec:6b:95:e0:8d:af: 5f:f3:9e:f4:e7:31:be:e4:af:26:36:e6:79:34:e2:fe:98:cc: a5:cc:dd:04:73:e6:72:cd:31:c7:3c:eb:14:a9:0e:28:86:4f: 9e:89:f3:97:61:f9:fd:d2:1d:c1:43:37:b3:bd:88:76:45:1e: 1a:a3:d3:14:a0:d3:99:10:d8:14:db:a5:6e:45:fe:08:10:ea: d0:ab:4b:63:53:cc:19:a2:40:f9:2d:60:14:93:c9:06:33:81: 7b:df:45:c3:fb:6e:64:36:79:dc:a0:b9:a5:b6:04:7a:0c:5a: 7d:30:db:a2:78:8f:d9:03:01:c0:29:bb:d9:cf:35:11:b7:fa: 65:32:64:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8InaSy/PPuej1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1N1oXDTI1MTAyMjEyMzg1N1owLzEtMCsGA1UEAxMk NDZhZmNiYWYtMzI2NC00MGU4LWFmYmYtZTM2NDBlM2NkYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHslio67HzIRq1Jo3EB+tqjdJhHOI36MizpA Pn9YXLBIyBXKDcyogADTuRwsK16ynxfjjaGUv3g4ZYfhpi3WSBQbkJ60M7X3POLl HRJfErbEsFtotLzLidw+4Qse/dJ0uyur7pJkN1/7sF7lMc5NhDhsDRSpAA7hNk8w 43sbgTJGTlDr/DZVWlR/I/X4Rb29/NXxvyU9yOdIlpMgNYIcIWz//djYzizus0n0 adABNQSJh06ecqnifzHZvHGYs9/wajoYET0kPXL5fygwv79mtoYMxZOlgFJqDjvA yQUDrJo5eQI/Oav8aGhPa3WkgtBer6WcLQHcnpwjNovWs7FL+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPvx7M7lrdl4Ec6NoUJkg9uQgCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzRjNDYwMmUtMWIwNi0z MDRiLTg0ZTMtMDA5MTliNzdkZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiNJpWDdO4gvdQudIh0GO7uVxGErUM3dKTwOWhdKZKxXiD3CkyB1R1i YMi+1ahzAgjDecN8Z9pZGY58BnojjGAmDCW0FstNPOcoIJMN4II3ro4bE+A2Ifzf FyxDPYeBWxpzoz3/0quMQGMtiFDiPcHH9feMk5gKy+xrleCNr1/znvTnMb7kryY2 5nk04v6YzKXM3QRz5nLNMcc86xSpDiiGT56J85dh+f3SHcFDN7O9iHZFHhqj0xSg 05kQ2BTbpW5F/ggQ6tCrS2NTzBmiQPktYBSTyQYzgXvfRcP7bmQ2edyguaW2BHoM Wn0w26J4j9kDAcApu9nPNRG3+mUyZDg= -----END CERTIFICATE-----Generated at Wed Aug 6 05:28:49 2025 by rpki-client