$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33a64204-875e-3cf6-b95f-35d2e6148d01.roa File: 33a64204-875e-3cf6-b95f-35d2e6148d01.roa (raw, json) Hash identifier: CsOyA4gC/3kJr/cPzR3hKbSLncxD7IlWyuvXUmMCHbI= Subject key identifier: CD:5B:11:D2:96:DB:44:5D:97:8D:0C:CB:86:96:14:6D:22:4D:27:ED Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584A9A6636A5A91B806CE3371380 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33a64204-875e-3cf6-b95f-35d2e6148d01.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 62610 IP address blocks: 128.1.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:36:a5:a9:1b:80:6c:e3:37:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=21e28af4-cbc2-4684-a043-96899020b3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d2:24:8b:01:02:2f:3e:e2:26:87:10:24:53: 94:06:34:f7:b5:0b:ac:12:2d:a5:0b:54:64:f3:d2: d8:fe:1c:82:c5:b0:8d:04:aa:0c:71:8f:88:3d:26: cf:c3:8b:59:41:05:06:f1:a0:d2:78:89:fd:c9:13: 1c:ed:73:8b:16:85:d7:3f:e8:67:eb:bf:6c:c6:c8: b5:bf:96:19:43:04:4d:00:a2:a2:12:d4:b7:3a:32: 9e:37:e6:6d:5b:5f:64:f5:c6:dc:c4:bc:66:30:a5: c0:2a:51:f3:94:cc:33:5d:22:d5:4f:1d:4f:a8:aa: a7:a2:4b:c6:5d:03:ee:0c:7c:ac:46:c7:26:fd:e6: 7b:08:c9:a7:d2:ab:1f:9c:fb:6c:d6:65:af:cb:48: ac:bf:ff:01:22:02:e2:0a:17:82:ac:ce:a2:f7:0b: 79:65:0f:2e:a1:c4:8f:9b:73:fe:c6:3f:8a:1d:02: 92:8c:5b:ed:f2:4a:e4:e0:8a:79:3b:58:f6:56:a3: 4a:34:e5:54:a6:af:10:f9:4c:3d:83:4b:d5:64:4e: 75:70:8b:f0:44:e0:e0:30:7f:9a:ee:f7:82:5d:c2: 6d:e9:02:90:9f:21:f9:6d:7e:46:e7:7f:00:30:d4: 0e:50:f1:e9:cb:c7:c7:f7:60:34:39:67:db:fe:44: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5B:11:D2:96:DB:44:5D:97:8D:0C:CB:86:96:14:6D:22:4D:27:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33a64204-875e-3cf6-b95f-35d2e6148d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:bf:72:fb:e8:3e:67:94:d2:89:e6:b1:f1:b6:95:41:39:58: 5e:25:f7:84:bf:ae:ec:10:68:3b:b6:bc:a4:9d:36:4a:1d:67: d7:96:6d:3e:29:5b:7d:4a:80:2a:05:71:93:a7:4e:b3:4d:83: 1c:82:6a:89:c0:9f:87:2e:c7:28:8a:94:b2:b5:4a:2a:0d:95: 69:1a:a2:26:5d:18:33:cc:f1:cc:c1:d9:23:41:f6:d3:e8:86: c6:d9:6c:36:bd:7f:70:5a:fa:1d:34:f0:d2:71:4a:7d:38:98: f2:30:33:87:24:94:2b:6c:41:91:73:74:ef:46:79:59:65:cd: 40:01:b0:f5:a5:72:fb:f9:1b:fb:e4:b3:01:8d:e1:69:1a:d0: c5:a8:a6:71:d2:09:f8:a3:e7:39:2f:20:7b:2c:44:2e:b9:01: 0b:36:e0:c1:ba:73:15:66:d4:85:37:5e:02:5a:e0:50:90:a5: e4:78:6c:5d:95:a0:e2:8f:1d:31:10:d2:f6:06:c9:d0:57:09: 8d:f9:15:8b:d0:cf:92:b4:50:74:03:f3:a5:50:58:e3:24:dd: 35:1c:90:67:8a:84:be:29:db:4b:fe:85:c0:aa:5e:d4:4e:7f: db:98:6f:71:9d:18:50:46:80:ee:91:a5:8b:86:1f:5f:3e:70: b2:42:b5:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjalqRuAbOM3E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk MjFlMjhhZjQtY2JjMi00Njg0LWEwNDMtOTY4OTkwMjBiM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdIkiwECLz7iJocQJFOUBjT3tQusEi2lC1Rk 89LY/hyCxbCNBKoMcY+IPSbPw4tZQQUG8aDSeIn9yRMc7XOLFoXXP+hn679sxsi1 v5YZQwRNAKKiEtS3OjKeN+ZtW19k9cbcxLxmMKXAKlHzlMwzXSLVTx1PqKqnokvG XQPuDHysRscm/eZ7CMmn0qsfnPts1mWvy0isv/8BIgLiCheCrM6i9wt5ZQ8uocSP m3P+xj+KHQKSjFvt8krk4Ip5O1j2VqNKNOVUpq8Q+Uw9g0vVZE51cIvwRODgMH+a 7veCXcJt6QKQnyH5bX5G538AMNQOUPHpy8fH92A0OWfb/kTMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1bEdKW20Rdl40My4aWFG0iTSftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMzNhNjQyMDQtODc1ZS0z Y2Y2LWI5NWYtMzVkMmU2MTQ4ZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu/cvvoPmeU0onmsfG2lUE5WF4l94S/ruwQaDu2vKSdNkodZ9eWbT4p W31KgCoFcZOnTrNNgxyCaonAn4cuxyiKlLK1SioNlWkaoiZdGDPM8czB2SNB9tPo hsbZbDa9f3Ba+h008NJxSn04mPIwM4cklCtsQZFzdO9GeVllzUABsPWlcvv5G/vk swGN4Wka0MWopnHSCfij5zkvIHssRC65AQs24MG6cxVm1IU3XgJa4FCQpeR4bF2V oOKPHTEQ0vYGydBXCY35FYvQz5K0UHQD86VQWOMk3TUckGeKhL4p20v+hcCqXtRO f9uYb3GdGFBGgO6RpYuGH18+cLJCtcc= -----END CERTIFICATE-----Generated at Mon Aug 4 16:05:59 2025 by rpki-client