$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3241b04c-52fd-3ff0-aeb8-b89ce9257fe2.roa File: 3241b04c-52fd-3ff0-aeb8-b89ce9257fe2.roa (raw, json) Hash identifier: 4lsPOsJilglLNqotSdwst8xx/nxRr7JNKPmvh9UCpWU= Subject key identifier: 5D:E1:32:31:11:71:BD:1B:D0:64:D2:13:CB:E1:AE:47:18:38:52:7D Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584A9A6636B8188C23DB81477B80 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3241b04c-52fd-3ff0-aeb8-b89ce9257fe2.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 62610 IP address blocks: 128.1.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:36:b8:18:8c:23:db:81:47:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=d651cc94-6424-49be-ac8b-67e7be11d110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d8:ca:5f:bd:24:28:cb:e9:e8:d2:20:7e:7a: f4:7a:6a:dc:20:c4:17:ac:28:ff:a6:db:9c:06:62: ae:a9:b4:44:ac:97:50:15:f0:c6:d8:e5:df:0a:6e: 66:42:d1:0b:05:cd:30:e4:ac:bf:27:5c:85:d5:2a: 9a:ca:e6:17:f1:18:47:e0:ee:cc:1b:81:9c:39:e9: 62:43:73:7a:6e:dc:e4:cf:f0:2f:d8:f7:5f:fd:dd: a3:ea:0f:31:f7:42:06:be:ba:82:8b:45:3f:1d:4e: 9a:2c:12:f3:60:bf:27:d2:01:a7:d7:93:ea:c6:cd: 9d:00:97:58:ff:3e:26:e1:cc:07:af:a5:f3:4a:66: 95:5d:d7:8f:65:0c:a1:ba:12:71:cb:f6:bf:ea:d6: 87:e0:e0:52:30:2b:9e:81:0f:fa:a7:a0:ec:15:95: 91:4d:d1:b8:4a:a8:ad:8f:1a:2b:2d:81:cd:b2:e9: 13:28:10:66:d0:ca:ea:e3:28:81:5c:20:19:e9:79: c0:3d:78:de:3f:25:2b:d7:ce:a0:aa:a2:c7:4c:b9: d1:06:ed:c1:8b:a5:d8:1e:fc:ef:04:6e:6b:a6:08: d1:6f:0a:67:4d:ed:e9:e5:ab:8f:2e:90:4f:44:7a: d7:80:ca:b3:3f:1e:6e:cf:dd:12:92:fc:1c:db:52: 32:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E1:32:31:11:71:BD:1B:D0:64:D2:13:CB:E1:AE:47:18:38:52:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3241b04c-52fd-3ff0-aeb8-b89ce9257fe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f0:cf:ac:60:e3:dc:f2:14:7c:1d:e5:2b:76:37:61:60:41: f5:8e:e5:f4:27:30:4a:2e:28:a9:02:1b:3c:16:d2:02:b9:f7: aa:a6:a8:b8:45:2d:81:96:1b:a9:cd:ae:f7:c8:30:49:aa:9d: e2:c3:d7:f5:aa:77:74:76:e1:24:28:28:ad:1a:da:b6:bc:12: 42:10:ac:5f:f8:61:96:b9:88:d5:49:49:d2:c9:39:9b:17:b3: 78:40:75:e4:6a:8b:63:10:54:9c:83:aa:d3:52:9a:cf:1f:b3: 24:39:4c:66:8f:c7:d1:70:f4:bd:d2:1a:3c:73:28:ad:b7:c4: 2a:a3:bf:f5:b5:a8:0b:15:8e:d8:55:48:eb:95:40:ef:37:2a: a5:a4:c4:ce:df:4f:b6:14:48:c3:7f:af:95:3a:c1:8a:85:c9: e3:eb:35:b8:89:66:9c:d9:f0:33:90:d0:b9:72:ac:69:1e:80: a5:48:c9:2b:b0:83:dd:f6:41:bf:64:19:3e:19:0c:b8:2a:df: 83:f8:ea:e3:bd:4c:03:42:2a:02:84:8d:49:e9:a9:00:c6:95: 4f:54:9a:17:3a:7b:f7:67:4a:18:27:fc:29:53:0f:0b:2a:21: ae:16:2b:1a:db:d4:d0:6c:6b:3e:39:97:45:71:54:0d:39:06: d2:b4:b5:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZja4GIwj24FHe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDY1MWNjOTQtNjQyNC00OWJlLWFjOGItNjdlN2JlMTFkMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitjKX70kKMvp6NIgfnr0emrcIMQXrCj/ptuc BmKuqbRErJdQFfDG2OXfCm5mQtELBc0w5Ky/J1yF1SqayuYX8RhH4O7MG4GcOeli Q3N6btzkz/Av2Pdf/d2j6g8x90IGvrqCi0U/HU6aLBLzYL8n0gGn15Pqxs2dAJdY /z4m4cwHr6XzSmaVXdePZQyhuhJxy/a/6taH4OBSMCuegQ/6p6DsFZWRTdG4Sqit jxorLYHNsukTKBBm0Mrq4yiBXCAZ6XnAPXjePyUr186gqqLHTLnRBu3Bi6XYHvzv BG5rpgjRbwpnTe3p5auPLpBPRHrXgMqzPx5uz90Skvwc21IybQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3hMjERcb0b0GTSE8vhrkcYOFJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMzI0MWIwNGMtNTJmZC0z ZmYwLWFlYjgtYjg5Y2U5MjU3ZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfwz6xg49zyFHwd5St2N2FgQfWO5fQnMEouKKkCGzwW0gK596qmqLhF LYGWG6nNrvfIMEmqneLD1/Wqd3R24SQoKK0a2ra8EkIQrF/4YZa5iNVJSdLJOZsX s3hAdeRqi2MQVJyDqtNSms8fsyQ5TGaPx9Fw9L3SGjxzKK23xCqjv/W1qAsVjthV SOuVQO83KqWkxM7fT7YUSMN/r5U6wYqFyePrNbiJZpzZ8DOQ0LlyrGkegKVIySuw g932Qb9kGT4ZDLgq34P46uO9TANCKgKEjUnpqQDGlU9Umhc6e/dnShgn/ClTDwsq Ia4WKxrb1NBsaz45l0VxVA05BtK0tfY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:37:06 2025 by rpki-client