$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3a1da72-da25-3268-afb9-3292055ce3df.roa File: d3a1da72-da25-3268-afb9-3292055ce3df.roa (raw, json) Hash identifier: MN1A/QTAXoxYofR7RFzT8AkxTgI6XSy40Ln2VonsMUM= Subject key identifier: C0:83:EA:4E:0E:A9:F2:F4:59:E5:CA:7A:8F:5B:B0:9D:37:0C:C7:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF07FB263E5D3A545D17700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3a1da72-da25-3268-afb9-3292055ce3df.roa Signing time: Thu 24 Jul 2025 12:38:52 +0000 ROA not before: Thu 24 Jul 2025 12:38:52 +0000 ROA not after: Wed 22 Oct 2025 12:38:52 +0000 asID: 396597 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:7f:b2:63:e5:d3:a5:45:d1:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:52 2025 GMT Not After : Oct 22 12:38:52 2025 GMT Subject: CN=a27e9f45-dc9b-4503-b1cb-8e52b3436f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:9a:cd:fb:b4:82:36:71:0c:dd:97:0a:8b: 18:e9:6a:3a:48:e6:40:70:5d:c9:63:55:5a:cb:ea: 4f:b2:af:ff:b0:b0:bf:4b:e4:5f:4e:1b:72:24:f0: 91:0a:6d:6a:a0:f2:75:68:28:2e:af:da:c3:9a:96: d4:ef:d1:96:6b:11:21:6d:28:11:45:bc:18:ac:2f: 6e:f1:94:29:e3:7c:86:0e:9c:5b:a7:45:5d:04:4a: 07:33:fa:e7:57:76:ae:cb:6f:53:93:01:44:84:f9: ed:01:89:ca:ce:21:b2:6c:8b:f1:53:08:00:f0:23: 08:c5:dd:40:b7:76:91:66:90:c9:f4:27:49:e9:7c: dc:20:cc:79:bc:9c:56:d0:d2:3d:00:c7:1a:ec:ee: 1b:29:65:32:5b:47:74:5a:38:3b:ff:2b:64:80:ea: 5e:c3:a0:25:8f:7b:be:ad:44:40:eb:56:bc:d9:c2: 65:bf:75:b6:7b:09:d4:0e:9d:69:b5:24:93:32:7b: bb:99:e4:77:4b:8c:43:57:24:5b:a6:eb:fa:f0:78: 3d:c5:e2:fb:14:14:c7:d0:32:94:a3:8b:1c:81:ad: 6d:0b:6c:79:ea:af:73:a5:7f:f1:62:24:39:8e:ee: c8:69:dd:be:be:d0:9d:95:73:79:c3:7f:64:33:3c: 54:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:EA:4E:0E:A9:F2:F4:59:E5:CA:7A:8F:5B:B0:9D:37:0C:C7:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3a1da72-da25-3268-afb9-3292055ce3df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:77:53:1b:cf:1e:71:0d:68:f7:05:53:96:c7:ac:96:48:b1: 0c:02:dc:58:b8:67:1c:65:2d:7a:2e:38:92:dd:5d:70:f5:a0: 87:85:48:d4:1d:51:db:e6:5a:cb:62:fa:e4:b8:7e:93:34:26: 81:b1:f1:6c:fb:48:4c:3a:21:10:f9:9f:16:46:e6:9f:3e:7a: c4:04:e9:8a:ba:1d:17:25:ac:3e:5f:28:1d:4e:78:f8:5c:84: b8:2b:79:6b:32:ac:f7:f6:c2:4f:4f:35:33:54:75:86:c1:a2: 0e:15:ad:5f:d9:df:d0:a6:c0:3b:01:55:89:9f:bf:b0:1c:b6: 18:8e:ab:7c:c0:33:e7:57:9d:46:84:39:fc:b9:c6:dc:0f:80: 22:fc:0b:53:32:11:bd:46:31:ac:b1:8d:4d:96:b2:d2:72:e2: 33:9f:dd:6f:b4:62:a3:be:4c:34:c3:0b:91:1f:86:39:ee:22: d8:10:aa:6e:74:0d:09:ae:21:1d:c6:a8:81:3d:74:28:53:0a: 93:dd:e3:db:c5:16:f8:2a:8f:77:fd:c6:5f:a9:98:ac:2f:83: bb:1d:3c:2e:56:36:05:c8:e3:60:2b:84:d9:75:15:2e:08:24: 8e:31:20:a6:c8:38:2b:d0:63:27:06:82:13:07:45:bc:e2:ca: 5a:5d:1a:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8H+yY+XTpUXRdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MloXDTI1MTAyMjEyMzg1MlowLzEtMCsGA1UEAxMk YTI3ZTlmNDUtZGM5Yi00NTAzLWIxY2ItOGU1MmIzNDM2ZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltqazfu0gjZxDN2XCosY6Wo6SOZAcF3JY1Va y+pPsq//sLC/S+RfThtyJPCRCm1qoPJ1aCgur9rDmpbU79GWaxEhbSgRRbwYrC9u 8ZQp43yGDpxbp0VdBEoHM/rnV3auy29TkwFEhPntAYnKziGybIvxUwgA8CMIxd1A t3aRZpDJ9CdJ6XzcIMx5vJxW0NI9AMca7O4bKWUyW0d0Wjg7/ytkgOpew6Alj3u+ rURA61a82cJlv3W2ewnUDp1ptSSTMnu7meR3S4xDVyRbpuv68Hg9xeL7FBTH0DKU o4scga1tC2x56q9zpX/xYiQ5ju7Iad2+vtCdlXN5w39kMzxUywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCD6k4OqfL0WeXKeo9bsJ03DMeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDNhMWRhNzItZGEyNS0z MjY4LWFmYjktMzI5MjA1NWNlM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ3UxvPHnENaPcFU5bHrJZIsQwC3Fi4ZxxlLXouOJLdXXD1oIeFSNQd UdvmWsti+uS4fpM0JoGx8Wz7SEw6IRD5nxZG5p8+esQE6Yq6HRclrD5fKB1OePhc hLgreWsyrPf2wk9PNTNUdYbBog4VrV/Z39CmwDsBVYmfv7ActhiOq3zAM+dXnUaE Ofy5xtwPgCL8C1MyEb1GMayxjU2WstJy4jOf3W+0YqO+TDTDC5EfhjnuItgQqm50 DQmuIR3GqIE9dChTCpPd49vFFvgqj3f9xl+pmKwvg7sdPC5WNgXI42ArhNl1FS4I JI4xIKbIOCvQYycGghMHRbziylpdGg4= -----END CERTIFICATE-----Generated at Fri Aug 8 00:07:15 2025 by rpki-client