$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e15ac8c1-3088-368d-979b-9d68905e2638.roa File: e15ac8c1-3088-368d-979b-9d68905e2638.roa (raw, json) Hash identifier: KkWqkslPCmWIx2COFs7rJKp7DuYAfLWqFvv0QgfOffw= Subject key identifier: 42:9B:3F:EE:59:DE:A9:39:28:64:F9:F5:D6:E7:AB:61:0F:69:D4:95 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF0819194DF9A62B5E576D8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e15ac8c1-3088-368d-979b-9d68905e2638.roa Signing time: Thu 24 Jul 2025 12:38:53 +0000 ROA not before: Thu 24 Jul 2025 12:38:53 +0000 ROA not after: Wed 22 Oct 2025 12:38:53 +0000 asID: 20362 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:81:91:94:df:9a:62:b5:e5:76:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:53 2025 GMT Not After : Oct 22 12:38:53 2025 GMT Subject: CN=e9f931e5-d31e-49a9-bf17-fc29fbaf2ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:84:c6:8e:49:79:c8:9a:cc:c5:33:4d:c4:ed: f5:41:cc:f5:c7:dc:4f:d2:4a:2e:e3:40:28:f8:3c: ad:72:9b:8d:65:92:99:c0:f3:57:c3:c7:15:3e:f2: 07:67:11:f0:4a:58:06:af:88:ed:2b:20:a1:63:67: e2:29:b8:f9:b6:04:a6:ea:8e:fe:73:b4:3b:cf:1e: ea:a2:ca:02:81:80:2f:3d:7d:fd:14:de:4d:44:18: 90:50:59:14:f6:53:c4:79:77:81:c8:43:cc:99:7a: 37:4a:a9:ea:a7:a5:86:ce:42:37:4a:9e:5d:9b:ae: 03:61:df:a3:af:5a:4f:82:cb:86:9f:6a:f0:21:6c: cc:be:7e:0c:77:b4:0f:bf:fa:61:b3:9e:24:00:9f: 1e:84:60:bc:b3:84:4d:f9:ae:81:02:6d:b8:b4:5d: 05:85:4d:bd:94:e8:c2:d9:04:4b:2d:4b:a9:12:25: aa:33:c7:f2:0f:3b:7a:ff:bc:db:d0:c9:d6:f0:ec: c6:54:c0:55:15:b1:b0:ff:b6:46:f6:c1:99:68:68: ab:84:fe:29:07:ea:d3:15:6f:ab:41:d1:70:fc:75: d6:0c:62:92:99:83:53:35:bf:38:23:1e:1e:3c:44: f9:66:23:f3:57:fc:82:7a:6b:32:eb:f1:a8:27:7c: b4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9B:3F:EE:59:DE:A9:39:28:64:F9:F5:D6:E7:AB:61:0F:69:D4:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e15ac8c1-3088-368d-979b-9d68905e2638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f7:44:26:b5:82:fa:52:37:cc:bd:a3:71:ed:ef:29:65:81: 3d:90:f7:41:de:ab:fd:5c:d8:8f:74:dc:90:d0:36:70:39:2f: 0a:ff:4e:3e:1e:89:bd:8b:d8:4f:aa:f3:29:b5:8e:aa:45:a0: 2f:78:bf:6c:72:c6:46:c7:ea:bb:dd:9a:0d:50:1b:7f:48:0b: 62:6b:88:8e:c2:fe:7d:ae:fa:0d:7f:d6:39:fe:0f:35:d8:7f: b9:7b:27:0d:56:78:8f:39:24:a9:ce:3b:b4:87:1c:ba:aa:4e: e4:7a:9a:67:21:01:93:76:46:6e:a0:9e:88:eb:28:d8:bd:c1: 7f:ab:02:67:20:42:78:44:a3:4f:f9:6e:df:02:01:78:47:fc: 8e:78:28:6e:27:9c:fa:e9:80:88:3e:df:32:04:aa:5f:3a:70: 82:54:c4:61:83:4d:71:41:50:b4:1e:9e:27:6a:93:a3:93:11: ed:c6:e0:17:01:28:36:3f:c1:f5:d1:19:69:1e:80:bb:7b:d3: d8:c2:ea:65:8f:cd:5b:e7:b9:12:4d:2a:61:87:e4:2c:2d:ea: 79:5e:9f:0c:3c:72:49:98:72:e0:95:fa:ac:be:03:be:62:81: 6c:dc:ec:44:ac:78:2f:d8:0c:da:07:d2:48:53:ea:aa:ac:ed: 5a:c3:08:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IGRlN+aYrXldtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1M1oXDTI1MTAyMjEyMzg1M1owLzEtMCsGA1UEAxMk ZTlmOTMxZTUtZDMxZS00OWE5LWJmMTctZmMyOWZiYWYyZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYTGjkl5yJrMxTNNxO31Qcz1x9xP0kou40Ao +DytcpuNZZKZwPNXw8cVPvIHZxHwSlgGr4jtKyChY2fiKbj5tgSm6o7+c7Q7zx7q osoCgYAvPX39FN5NRBiQUFkU9lPEeXeByEPMmXo3Sqnqp6WGzkI3Sp5dm64DYd+j r1pPgsuGn2rwIWzMvn4Md7QPv/phs54kAJ8ehGC8s4RN+a6BAm24tF0FhU29lOjC 2QRLLUupEiWqM8fyDzt6/7zb0MnW8OzGVMBVFbGw/7ZG9sGZaGirhP4pB+rTFW+r QdFw/HXWDGKSmYNTNb84Ix4ePET5ZiPzV/yCemsy6/GoJ3y0GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKbP+5Z3qk5KGT59dbnq2EPadSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTE1YWM4YzEtMzA4OC0z NjhkLTk3OWItOWQ2ODkwNWUyNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH73RCa1gvpSN8y9o3Ht7yllgT2Q90Heq/1c2I903JDQNnA5Lwr/Tj4e ib2L2E+q8ym1jqpFoC94v2xyxkbH6rvdmg1QG39IC2JriI7C/n2u+g1/1jn+DzXY f7l7Jw1WeI85JKnOO7SHHLqqTuR6mmchAZN2Rm6gnojrKNi9wX+rAmcgQnhEo0/5 bt8CAXhH/I54KG4nnPrpgIg+3zIEql86cIJUxGGDTXFBULQenidqk6OTEe3G4BcB KDY/wfXRGWkegLt709jC6mWPzVvnuRJNKmGH5Cwt6nlenww8ckmYcuCV+qy+A75i gWzc7ESseC/YDNoH0khT6qqs7VrDCAQ= -----END CERTIFICATE-----Generated at Fri Aug 8 00:49:24 2025 by rpki-client