$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d17b58c1-858e-3e01-bd77-d39f6ffb10c2.roa File: d17b58c1-858e-3e01-bd77-d39f6ffb10c2.roa (raw, json) Hash identifier: cBcb3oQsIPpE+I+eGimrLy77Uk3xmVQnj1xA7n2Ohro= Subject key identifier: 62:30:23:39:51:E7:54:19:F3:28:89:79:8E:A9:50:7C:18:DA:07:B5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF07B6A46F3546DA3411F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d17b58c1-858e-3e01-bd77-d39f6ffb10c2.roa Signing time: Thu 24 Jul 2025 12:38:50 +0000 ROA not before: Thu 24 Jul 2025 12:38:50 +0000 ROA not after: Wed 22 Oct 2025 12:38:50 +0000 asID: 36629 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:7b:6a:46:f3:54:6d:a3:41:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:50 2025 GMT Not After : Oct 22 12:38:50 2025 GMT Subject: CN=53b3d1f9-4266-4a60-9873-ff5367ab9f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:44:14:10:d3:5f:d5:c6:68:44:bf:30:34:5b: 2b:8c:aa:3b:9b:cc:42:3f:5a:55:90:b0:1e:a2:5c: 55:fc:44:97:3e:ee:5d:bc:ca:b0:3e:0d:cc:be:b6: d0:7e:9b:ca:3f:f0:16:40:4b:e7:92:2f:30:f4:74: 75:d7:dc:49:da:bd:b2:f8:46:10:ae:79:90:0c:4e: 05:34:35:8d:3a:43:4b:2e:0d:09:c6:8e:e1:de:98: 19:c7:a1:b6:e2:a6:4d:b1:23:c3:49:90:0c:ed:08: a0:8f:06:cb:78:79:1f:99:46:1f:0c:4f:38:55:0a: 67:e9:3a:9c:ae:6d:d3:0f:be:f9:3c:e0:78:05:50: 51:1f:40:f1:e6:71:e4:41:46:23:50:6e:84:59:88: 51:77:59:a8:e8:0f:1c:93:e3:c1:00:9d:1f:f0:ae: ae:66:d1:cb:50:3c:66:c2:b0:0e:ea:cd:95:de:c5: bb:95:b5:ed:de:e3:33:36:79:f0:b1:e0:e2:2d:8d: 76:27:92:41:bc:68:df:c0:eb:e3:bf:6e:b3:de:a5: d6:ae:36:48:5f:04:24:5b:ec:b8:41:f9:be:7c:07: 87:e5:23:0b:7e:cc:e3:a1:47:3c:0e:a7:61:78:13: d9:b4:a4:6b:cf:95:ee:23:b4:4f:1e:68:50:f6:2c: a3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:30:23:39:51:E7:54:19:F3:28:89:79:8E:A9:50:7C:18:DA:07:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d17b58c1-858e-3e01-bd77-d39f6ffb10c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:7b:f3:07:09:75:d2:56:08:4f:0d:c7:5f:64:cc:15:fc:d4: 7d:6f:61:0e:67:d9:da:cc:e5:8a:9b:8e:1d:91:42:9c:c1:ef: d0:2c:dd:62:40:5b:13:8d:fb:87:5f:75:5f:d0:5e:70:9e:f6: a4:86:02:fb:bb:af:02:27:f1:b7:cf:ba:87:d2:ae:ed:fc:74: 07:5c:e4:6b:0f:ff:b0:d7:4d:74:53:0e:10:4c:f5:84:28:5f: 5c:22:f4:d3:f2:d0:a8:01:1c:91:19:ab:a6:66:b3:33:42:60: 6d:b2:da:86:17:2e:ee:97:c5:c0:05:4b:e2:fb:dc:c0:26:f3: b9:4f:a4:59:72:db:7d:5b:a6:ba:52:91:58:a7:0e:21:2f:f6: 59:13:1e:13:c8:39:7f:1d:a2:72:f6:7f:83:62:9b:dc:b7:fd: 0e:90:2f:1b:67:ae:2e:39:78:62:8b:59:73:e6:c2:ca:0d:12: a0:0c:77:85:06:5a:5a:aa:51:b4:27:0a:f1:f7:f1:6c:9a:a4: 88:18:43:04:bd:4c:92:17:68:d8:ad:5d:79:41:a2:26:41:41: 35:ee:63:10:fc:9d:c5:5b:0c:93:db:19:7c:30:41:4a:8c:a9: 7d:14:90:2d:a6:ac:f3:a1:f8:d1:63:10:e6:6b:55:75:e8:6d: 58:c6:69:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8HtqRvNUbaNBHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MFoXDTI1MTAyMjEyMzg1MFowLzEtMCsGA1UEAxMk NTNiM2QxZjktNDI2Ni00YTYwLTk4NzMtZmY1MzY3YWI5ZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0QUENNf1cZoRL8wNFsrjKo7m8xCP1pVkLAe olxV/ESXPu5dvMqwPg3MvrbQfpvKP/AWQEvnki8w9HR119xJ2r2y+EYQrnmQDE4F NDWNOkNLLg0Jxo7h3pgZx6G24qZNsSPDSZAM7QigjwbLeHkfmUYfDE84VQpn6Tqc rm3TD775POB4BVBRH0Dx5nHkQUYjUG6EWYhRd1mo6A8ck+PBAJ0f8K6uZtHLUDxm wrAO6s2V3sW7lbXt3uMzNnnwseDiLY12J5JBvGjfwOvjv26z3qXWrjZIXwQkW+y4 Qfm+fAeH5SMLfszjoUc8DqdheBPZtKRrz5XuI7RPHmhQ9iyjVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIwIzlR51QZ8yiJeY6pUHwY2ge1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDE3YjU4YzEtODU4ZS0z ZTAxLWJkNzctZDM5ZjZmZmIxMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG578wcJddJWCE8Nx19kzBX81H1vYQ5n2drM5Yqbjh2RQpzB79As3WJA WxON+4dfdV/QXnCe9qSGAvu7rwIn8bfPuofSru38dAdc5GsP/7DXTXRTDhBM9YQo X1wi9NPy0KgBHJEZq6ZmszNCYG2y2oYXLu6XxcAFS+L73MAm87lPpFly231bprpS kVinDiEv9lkTHhPIOX8donL2f4Nim9y3/Q6QLxtnri45eGKLWXPmwsoNEqAMd4UG WlqqUbQnCvH38WyapIgYQwS9TJIXaNitXXlBoiZBQTXuYxD8ncVbDJPbGXwwQUqM qX0UkC2mrPOh+NFjEOZrVXXobVjGaX8= -----END CERTIFICATE-----Generated at Mon Aug 4 21:49:01 2025 by rpki-client