$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa File: e0124a56-00b3-397d-94b4-a8fccac56c0c.roa (raw, json) Hash identifier: CG2yL8JhigFjnBxdcoSJ33w3ivif2x9byGbPrPrf/7I= Subject key identifier: D3:46:2B:B3:78:8D:C7:F4:5A:F9:22:5E:99:AC:CB:12:A6:D1:8B:D4 Certificate issuer: /CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f Certificate serial: 010D0C9F4328584AA85BBBCCC17885D46E703410 Authority key identifier: 4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 2 IP address blocks: 128.4.0.0/16 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:bb:cc:c1:78:85:d4:6e:70:34:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=a65c28ed-2fa7-453d-aecf-ad799409b8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1c:1b:d0:f0:e6:32:f3:e4:c4:e5:2a:f1:2b: f8:97:c4:9f:c3:74:fe:34:90:82:93:66:1c:68:81: 37:8c:79:0f:9c:b1:0a:77:58:63:1d:4a:db:df:28: 2a:83:4f:cc:b2:a6:52:9b:b6:eb:82:18:97:81:34: de:dc:8c:01:e8:24:d8:0f:95:ed:5c:89:0f:f1:5d: 24:78:1d:30:ee:d9:49:0c:f7:74:ae:69:1a:44:18: c9:9a:6d:ef:46:bf:e5:cc:7a:6a:37:d6:29:6e:2d: 91:c3:2b:9b:d9:f4:a6:fd:e6:d0:10:47:f2:d8:68: be:0b:df:58:30:62:9b:36:08:0b:c4:32:ac:49:1a: 85:17:3b:25:26:36:b8:de:d1:f2:5f:c3:55:c3:28: 28:14:c3:9c:d3:71:00:51:88:9c:02:47:2a:b8:21: 66:35:59:b8:f8:a8:f7:7a:26:d4:c5:9c:a5:81:bd: 56:5c:73:5c:22:5a:ea:be:10:c6:2d:ca:47:1e:95: cc:ca:a3:a1:5a:24:63:47:e5:14:9e:4f:a9:d4:e5: af:36:1a:15:58:32:fd:64:ad:9b:9a:76:7b:0b:71: 8b:10:6e:53:e6:e8:f6:04:d8:4f:3d:31:4b:ba:ce: 46:ae:7d:63:be:ab:4a:ba:be:59:7a:26:65:5d:2a: 4c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:46:2B:B3:78:8D:C7:F4:5A:F9:22:5E:99:AC:CB:12:A6:D1:8B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl X509v3 Authority Key Identifier: keyid:4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer sbgp-ipAddrBlock: critical IPv4: 128.4.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:fe:b8:90:5b:52:18:c1:f7:b5:01:5e:3d:66:01:03:89:a1: 40:9d:75:f7:0d:86:d2:65:ba:ba:7d:0d:41:c1:50:9e:e7:8f: cb:6e:60:4f:56:c5:3f:9a:3f:0c:0b:59:39:a0:b8:57:fd:a2: d7:89:ac:14:02:46:d2:3a:bd:5a:83:40:57:44:5c:5d:92:f4: 70:23:0a:f7:84:2f:45:ae:2b:14:6d:cf:9c:d4:5a:33:d0:98: 51:16:4d:47:0f:bc:b8:1a:f3:29:cf:4b:b2:dc:7a:e8:3b:cf: bf:5e:4e:6f:f9:5c:0b:d5:13:9b:7c:0a:03:bd:70:e3:39:15: 43:62:22:24:79:17:e5:d8:ee:51:02:9e:d0:8a:fc:92:8f:23: 63:7e:56:b4:7d:34:d6:11:07:d8:16:46:f7:f2:ae:71:2d:f0: 99:a6:77:be:bf:12:95:ff:b2:0b:0d:dc:b7:03:14:79:7e:f4: 0f:55:3b:26:e0:ed:1a:83:9c:1e:09:3e:05:71:85:80:11:1c: 5d:89:b3:6e:35:f0:15:ce:ae:91:e6:0f:74:dd:ca:2d:4f:3b: 65:1b:12:15:10:8e:66:ad:b7:f1:ec:5c:d0:cb:92:f3:37:5c: b7:89:81:45:f0:8b:98:7d:a3:51:71:41:e1:ef:f2:06:8a:9a: ed:cc:da:4a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqoW7vMwXiF1G5wNBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ0ZDE2ODgtZjhjOC00Y2U4LWI0OTQtZjA0YmYyZTM2 MDZmMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk YTY1YzI4ZWQtMmZhNy00NTNkLWFlY2YtYWQ3OTk0MDliOGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxwb0PDmMvPkxOUq8Sv4l8Sfw3T+NJCCk2Yc aIE3jHkPnLEKd1hjHUrb3ygqg0/MsqZSm7brghiXgTTe3IwB6CTYD5XtXIkP8V0k eB0w7tlJDPd0rmkaRBjJmm3vRr/lzHpqN9Ypbi2Rwyub2fSm/ebQEEfy2Gi+C99Y MGKbNggLxDKsSRqFFzslJja43tHyX8NVwygoFMOc03EAUYicAkcquCFmNVm4+Kj3 eibUxZylgb1WXHNcIlrqvhDGLcpHHpXMyqOhWiRjR+UUnk+p1OWvNhoVWDL9ZK2b mnZ7C3GLEG5T5uj2BNhPPTFLus5Grn1jvqtKur5ZeiZlXSpMuwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNNGK7N4jcf0WvkiXpmsyxKm0YvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNDRk MTY4OC1mOGM4LTRjZTgtYjQ5NC1mMDRiZjJlMzYwNmYvZTAxMjRhNTYtMDBiMy0z OTdkLTk0YjQtYThmY2NhYzU2YzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTQ0ZDE2ODgtZjhjOC00Y2U4LWI0 OTQtZjA0YmYyZTM2MDZmL2U0NGQxNjg4LWY4YzgtNGNlOC1iNDk0LWYwNGJmMmUz NjA2Zi5jcmwwHwYDVR0jBBgwFoAUTbwiaOwwLGXGptIvsMYSS6Gs2qowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNDRkMTY4OC1mOGM4LTRjZTgtYjQ5NC1mMDRi ZjJlMzYwNmYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgAQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGP64kFtSGMH3tQFePWYBA4mhQJ119w2G0mW6un0NQcFQnuePy25gT1bF P5o/DAtZOaC4V/2i14msFAJG0jq9WoNAV0RcXZL0cCMK94QvRa4rFG3PnNRaM9CY URZNRw+8uBrzKc9Lstx66DvPv15Ob/lcC9UTm3wKA71w4zkVQ2IiJHkX5djuUQKe 0Ir8ko8jY35WtH001hEH2BZG9/KucS3wmaZ3vr8Slf+yCw3ctwMUeX70D1U7JuDt GoOcHgk+BXGFgBEcXYmzbjXwFc6ukeYPdN3KLU87ZRsSFRCOZq238exc0MuS8zdc t4mBRfCLmH2jUXFB4e/yBoqa7czaSg== -----END CERTIFICATE-----Generated at Wed Aug 6 18:32:11 2025 by rpki-client