$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d948cd7c-dd3e-3991-922a-683b9d77f25d.roa File: d948cd7c-dd3e-3991-922a-683b9d77f25d.roa (raw, json) Hash identifier: QEzV2kwNEctzEKjEBBhloFtWbZEPRtf7uruIdOYtIbc= Subject key identifier: 15:C0:61:41:34:4A:D6:47:5C:B4:06:19:1E:A6:67:3F:70:F8:80:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF082661887DA7B473AC040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d948cd7c-dd3e-3991-922a-683b9d77f25d.roa Signing time: Thu 24 Jul 2025 12:38:53 +0000 ROA not before: Thu 24 Jul 2025 12:38:53 +0000 ROA not after: Wed 22 Oct 2025 12:38:53 +0000 asID: 396550 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:82:66:18:87:da:7b:47:3a:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:53 2025 GMT Not After : Oct 22 12:38:53 2025 GMT Subject: CN=dbe73bf7-c5fb-4369-a076-cff10aba90da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:eb:41:26:fb:a9:3a:c5:aa:2d:ec:71:58: d4:1b:37:66:a5:bb:7f:8c:11:f8:ba:0f:24:e9:ae: 18:f0:a4:9d:85:2f:9e:57:c9:93:f8:40:e0:e0:6e: 35:35:18:fb:d4:da:61:b1:4b:b7:6c:4e:ad:00:b3: 4c:1f:37:9a:e2:1f:5a:41:78:b5:de:75:bb:c7:b2: 45:2c:a4:56:76:cb:de:13:0c:e6:65:84:2c:fd:87: 92:1b:ba:32:72:6e:6a:74:d9:49:d4:ba:d6:20:d7: f3:6a:c1:74:a0:14:2b:2a:b4:1d:74:43:9d:c2:0c: 8c:55:36:e7:92:0d:29:be:a6:3d:07:71:fb:81:a1: ea:b0:59:b8:c2:36:93:84:6c:c9:1c:5a:2f:62:fb: 93:f4:ca:b6:2d:f7:c7:ed:f2:da:56:d8:f5:e6:f4: 38:79:f5:aa:5e:85:83:5e:82:85:61:00:14:eb:3b: 57:1d:95:d4:71:41:82:7b:8e:8e:d3:01:56:0a:ac: 96:fb:a1:51:6c:e7:fe:40:d6:e2:0e:a4:c4:a4:2a: b6:e0:4a:0f:6c:03:53:8a:50:eb:7c:45:a4:d0:a1: dd:8e:78:b2:3a:79:f5:69:d0:c9:72:9a:32:ac:6c: 3c:7b:67:26:7d:d2:01:a3:18:e7:57:5a:06:21:75: 3a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C0:61:41:34:4A:D6:47:5C:B4:06:19:1E:A6:67:3F:70:F8:80:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d948cd7c-dd3e-3991-922a-683b9d77f25d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:4c:ed:5f:bd:f3:0c:22:ce:47:24:52:b4:cf:2e:ef:83:61: 19:5f:eb:69:35:03:ed:46:8e:63:0c:d5:13:dd:f5:32:48:c4: e8:e2:e1:5f:65:34:2c:17:97:bc:50:a1:07:cd:db:06:1a:ec: 84:31:ac:cf:1a:7d:27:88:8a:b2:fe:bd:6b:bc:6a:a8:30:de: 11:3e:37:72:27:46:be:7a:5f:8b:ad:a7:fe:8f:51:fe:e3:e9: 64:5f:45:ca:ad:4d:39:0e:97:1e:f6:bb:51:ab:fa:4d:e1:a0: 9f:53:fd:e8:14:d5:9d:be:38:a3:19:06:e9:51:73:65:95:45: 31:c3:c0:e7:37:c2:79:c7:f3:d2:2a:24:b8:ab:f1:13:8a:27: 7d:2f:80:37:a4:47:66:61:46:9f:51:23:fb:9c:86:82:11:bf: 2b:d5:57:22:a0:b4:29:b5:49:8f:88:13:23:1b:5e:f3:ad:a9: 50:1b:86:ed:62:51:a3:40:16:46:9f:d3:b7:b2:f8:d4:63:7b: 0b:3c:af:70:2d:26:82:66:11:d1:64:4d:f3:19:8f:ad:88:f5: 83:9a:50:ff:b7:96:67:13:4c:23:93:56:f9:8c:22:35:78:60: d2:b9:f0:8b:f0:a6:83:7c:2f:87:89:8c:59:8d:0d:09:9b:dc: 10:be:8b:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IJmGIfae0c6wEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1M1oXDTI1MTAyMjEyMzg1M1owLzEtMCsGA1UEAxMk ZGJlNzNiZjctYzVmYi00MzY5LWEwNzYtY2ZmMTBhYmE5MGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUnrQSb7qTrFqi3scVjUGzdmpbt/jBH4ug8k 6a4Y8KSdhS+eV8mT+EDg4G41NRj71NphsUu3bE6tALNMHzea4h9aQXi13nW7x7JF LKRWdsveEwzmZYQs/YeSG7oycm5qdNlJ1LrWINfzasF0oBQrKrQddEOdwgyMVTbn kg0pvqY9B3H7gaHqsFm4wjaThGzJHFovYvuT9Mq2LffH7fLaVtj15vQ4efWqXoWD XoKFYQAU6ztXHZXUcUGCe46O0wFWCqyW+6FRbOf+QNbiDqTEpCq24EoPbANTilDr fEWk0KHdjniyOnn1adDJcpoyrGw8e2cmfdIBoxjnV1oGIXU61QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXAYUE0StZHXLQGGR6mZz9w+IBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDk0OGNkN2MtZGQzZS0z OTkxLTkyMmEtNjgzYjlkNzdmMjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1M7V+98wwizkckUrTPLu+DYRlf62k1A+1GjmMM1RPd9TJIxOji4V9l NCwXl7xQoQfN2wYa7IQxrM8afSeIirL+vWu8aqgw3hE+N3InRr56X4utp/6PUf7j 6WRfRcqtTTkOlx72u1Gr+k3hoJ9T/egU1Z2+OKMZBulRc2WVRTHDwOc3wnnH89Iq JLir8ROKJ30vgDekR2ZhRp9RI/uchoIRvyvVVyKgtCm1SY+IEyMbXvOtqVAbhu1i UaNAFkaf07ey+NRjews8r3AtJoJmEdFkTfMZj62I9YOaUP+3lmcTTCOTVvmMIjV4 YNK58IvwpoN8L4eJjFmNDQmb3BC+i1M= -----END CERTIFICATE-----Generated at Mon Aug 4 22:22:39 2025 by rpki-client