$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c553a58f-dc4e-346b-9d67-90973f0fbe06.roa File: c553a58f-dc4e-346b-9d67-90973f0fbe06.roa (raw, json) Hash identifier: qJw7NCAqIvxRHJHY3Z5siBMQ1NmnL0Xqxg/z13X1l8M= Subject key identifier: 6D:63:0F:17:1E:44:BD:06:E8:A3:14:8A:C9:18:C7:80:B0:30:1F:E9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF082C2CC0B46E8E00FA9E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c553a58f-dc4e-346b-9d67-90973f0fbe06.roa Signing time: Thu 24 Jul 2025 12:38:53 +0000 ROA not before: Thu 24 Jul 2025 12:38:53 +0000 ROA not after: Wed 22 Oct 2025 12:38:53 +0000 asID: 32651 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:82:c2:cc:0b:46:e8:e0:0f:a9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:53 2025 GMT Not After : Oct 22 12:38:53 2025 GMT Subject: CN=2f49937c-088a-4b57-ad9e-d3ea1dd5c2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:c5:70:e4:04:93:ad:15:f4:05:cf:05:4c: 51:a8:21:00:8e:9f:09:b3:75:ec:79:fd:dd:db:4a: bf:36:e0:86:28:f6:03:7c:bd:7b:1f:8a:07:5e:d7: 05:81:6d:ee:a6:83:9a:d7:fd:5e:99:be:2b:ab:1c: 16:70:22:f3:f2:ae:a5:44:50:c0:8a:00:5f:49:b6: 57:cd:66:34:f0:f5:ad:91:38:bc:24:ae:10:50:6c: 7b:ad:1a:1c:22:9e:a7:3c:12:3d:22:1c:41:11:58: 28:0f:41:49:9c:18:7b:44:2a:18:7d:28:9f:8e:3e: 79:64:bf:29:2f:a7:cc:6d:e6:79:3e:c1:19:cf:4f: 75:99:7a:a7:b2:74:91:51:35:91:84:59:9d:76:27: 94:1f:4f:d6:72:1a:b9:bf:9f:c2:58:d8:e0:4a:e3: ad:5a:e5:b0:db:7c:de:87:40:5a:03:6d:9e:ab:6a: 91:5f:5a:fc:b0:5c:3d:73:b0:55:73:cb:9f:dd:62: 7e:58:24:4a:6a:af:e9:0b:f0:72:ad:76:d8:75:c2: 3e:4d:51:10:9e:c5:8f:52:1a:9f:fc:6c:f1:1c:dd: 47:a9:69:19:46:b7:f8:c5:3a:9c:b9:05:a7:6e:77: 68:e3:9c:84:44:45:f5:1c:6e:c9:3a:40:81:59:3c: eb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:63:0F:17:1E:44:BD:06:E8:A3:14:8A:C9:18:C7:80:B0:30:1F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c553a58f-dc4e-346b-9d67-90973f0fbe06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:a2:d0:ba:56:45:ce:78:13:72:e3:3d:30:28:71:52:58:dd: c7:10:c8:e9:df:f3:cb:10:69:be:27:39:8d:dd:65:16:21:c7: 94:91:8c:cb:8a:d3:6f:5d:cc:c6:5b:de:c6:68:41:34:b9:6e: 36:e2:c9:1c:cb:65:29:12:40:1b:98:16:7c:c3:94:6e:14:34: 96:a2:3d:97:b5:2b:ce:b4:8f:4b:bb:d0:7a:6b:67:a1:ef:d8: 9b:ab:f6:5b:5a:e6:37:48:73:b5:ad:35:2a:53:f4:a3:b4:f3: e9:5c:20:7f:24:3d:ce:b1:ba:0d:69:1f:8d:01:a7:7e:85:a0: 7c:97:32:ea:cf:86:93:25:09:a3:69:2b:00:5d:fb:20:c9:cc: 03:35:3d:41:1b:de:4b:4c:5c:97:59:6a:fb:8f:90:5f:48:63: 32:81:52:8d:27:fc:00:c2:eb:cd:d0:7c:f6:55:57:28:52:8b: da:30:09:43:34:35:48:61:2e:9b:88:75:8a:b0:7f:ff:c7:c0: 5b:ee:9c:3a:19:1e:9f:73:67:d1:30:3c:58:dc:d4:74:d9:2d: 62:c8:4d:47:42:14:34:84:60:a6:23:9c:39:16:f5:11:c1:65: 68:9f:e4:c4:05:58:5d:d1:17:fb:02:c7:9d:6f:a4:52:6d:51: f8:91:92:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8ILCzAtG6OAPqeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1M1oXDTI1MTAyMjEyMzg1M1owLzEtMCsGA1UEAxMk MmY0OTkzN2MtMDg4YS00YjU3LWFkOWUtZDNlYTFkZDVjMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnDFcOQEk60V9AXPBUxRqCEAjp8Js3Xsef3d 20q/NuCGKPYDfL17H4oHXtcFgW3upoOa1/1emb4rqxwWcCLz8q6lRFDAigBfSbZX zWY08PWtkTi8JK4QUGx7rRocIp6nPBI9IhxBEVgoD0FJnBh7RCoYfSifjj55ZL8p L6fMbeZ5PsEZz091mXqnsnSRUTWRhFmddieUH0/Wchq5v5/CWNjgSuOtWuWw23ze h0BaA22eq2qRX1r8sFw9c7BVc8uf3WJ+WCRKaq/pC/ByrXbYdcI+TVEQnsWPUhqf /GzxHN1HqWkZRrf4xTqcuQWnbndo45yEREX1HG7JOkCBWTzrUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1jDxceRL0G6KMUiskYx4CwMB/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzU1M2E1OGYtZGM0ZS0z NDZiLTlkNjctOTA5NzNmMGZiZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKi0LpWRc54E3LjPTAocVJY3ccQyOnf88sQab4nOY3dZRYhx5SRjMuK 029dzMZb3sZoQTS5bjbiyRzLZSkSQBuYFnzDlG4UNJaiPZe1K860j0u70HprZ6Hv 2Jur9lta5jdIc7WtNSpT9KO08+lcIH8kPc6xug1pH40Bp36FoHyXMurPhpMlCaNp KwBd+yDJzAM1PUEb3ktMXJdZavuPkF9IYzKBUo0n/ADC683QfPZVVyhSi9owCUM0 NUhhLpuIdYqwf//HwFvunDoZHp9zZ9EwPFjc1HTZLWLITUdCFDSEYKYjnDkW9RHB ZWif5MQFWF3RF/sCx51vpFJtUfiRkp4= -----END CERTIFICATE-----Generated at Wed Aug 6 00:41:34 2025 by rpki-client