$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa File: cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa (raw, json) Hash identifier: mCax1WKIpQ7qnJbA1giwUJ4CpZM2bO6aoQAeifoemBc= Subject key identifier: 4F:AF:DB:D3:59:E5:FD:AA:BD:BA:EE:96:48:CA:B9:1A:DF:1B:27:4F Certificate issuer: /CN=319d5f20-2367-457b-970b-7f1c1a60fcae Certificate serial: 010D0C9F4328584AAB26585DCED3A3D5A5380620 Authority key identifier: 9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 14630 IP address blocks: 142.148.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:58:5d:ce:d3:a3:d5:a5:38:06:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=319d5f20-2367-457b-970b-7f1c1a60fcae Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=5f9e0666-9034-410f-afec-76a5b5d9f5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:30:9b:f5:48:1c:2b:0c:51:9d:c3:14:23: 02:72:5a:18:18:b4:c6:63:de:7a:b9:c2:b9:6c:81: 55:a2:e4:42:13:91:61:5e:23:34:a4:8b:fb:fc:0f: 7c:cb:a5:4b:31:11:79:b4:a5:75:9b:56:ed:6a:59: c1:0f:b8:89:2b:ee:c4:f8:ca:31:df:93:44:65:c2: 34:c3:7e:f0:43:5b:33:73:e3:9d:b6:9f:a8:6e:a0: 5d:d7:51:5f:f9:54:ec:c3:8f:ce:c8:05:2f:e7:e3: 8c:a8:7e:b2:b1:f0:d2:da:9e:5e:fd:06:5c:16:9e: ea:93:cd:1e:f3:04:b3:4e:f2:b2:43:6e:02:db:ff: e6:85:d3:89:b7:aa:e4:f5:59:21:8c:a4:7c:07:3c: 7d:f2:36:3a:83:eb:a5:23:5a:a5:21:e4:05:06:d7: a0:a8:1f:e5:a4:03:ff:c3:db:3c:2f:3c:c6:09:5b: d5:66:76:62:b5:fc:ef:d2:6b:94:29:89:e3:4b:68: 19:1b:65:8a:e1:63:2d:4a:c8:a6:4b:36:bb:46:51: 78:16:f3:75:ea:2e:c7:30:e2:05:95:23:f3:47:c3: 1e:95:32:8d:f5:78:c7:00:4f:a3:ca:4d:31:27:6a: 18:62:e6:60:e0:da:bf:4a:7b:91:65:d6:b6:3d:28: 53:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AF:DB:D3:59:E5:FD:AA:BD:BA:EE:96:48:CA:B9:1A:DF:1B:27:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl X509v3 Authority Key Identifier: keyid:9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer sbgp-ipAddrBlock: critical IPv4: 142.148.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d7:d2:8a:1c:40:68:04:7c:06:23:06:c1:f0:bb:2e:7d:2f: 8c:c8:d7:eb:8f:b7:56:9e:ea:7d:52:ab:88:dd:34:f4:25:47: 1e:cd:08:6e:ed:56:bf:a1:10:e3:96:be:ac:79:1b:f1:b7:c8: 0e:fd:a3:ad:f9:57:2a:b6:97:19:91:82:50:a3:52:dc:45:97: c7:2e:e0:2e:17:ac:b5:46:a1:d2:ba:6d:2c:c1:e0:89:12:1d: a2:d3:ab:95:f2:df:2c:c7:28:d0:2f:6e:7a:53:f8:3c:5f:eb: ad:e8:ec:10:c8:d2:47:d1:66:71:74:f6:da:83:a1:bb:a2:f2: 3f:79:37:5c:db:55:e4:6b:b9:66:b6:87:34:f9:ad:76:c2:eb: 74:ac:f7:81:10:f1:04:0d:ea:51:4b:2e:6b:d3:1e:c4:12:74: 72:7f:0d:65:85:8e:c9:3f:b6:9d:20:b2:b6:93:4a:0f:51:78: b8:07:41:0a:9f:5a:5e:e5:6b:c6:19:0f:8e:87:a5:9c:7f:50: 14:48:ac:31:63:37:ec:70:0c:87:70:f3:f0:e3:e2:37:ea:8b: f9:0f:ab:a8:15:92:75:00:74:9b:22:cf:c1:36:5e:96:38:05: 90:58:4f:da:f7:f5:27:d6:1a:33:10:56:49:7b:5c:9b:2f:bf: dc:42:6f:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlhdztOj1aU4BiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE5ZDVmMjAtMjM2Ny00NTdiLTk3MGItN2YxYzFhNjBm Y2FlMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NWY5ZTA2NjYtOTAzNC00MTBmLWFmZWMtNzZhNWI1ZDlmNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBwwm/VIHCsMUZ3DFCMCcloYGLTGY956ucK5 bIFVouRCE5FhXiM0pIv7/A98y6VLMRF5tKV1m1btalnBD7iJK+7E+Mox35NEZcI0 w37wQ1szc+Odtp+obqBd11Ff+VTsw4/OyAUv5+OMqH6ysfDS2p5e/QZcFp7qk80e 8wSzTvKyQ24C2//mhdOJt6rk9VkhjKR8Bzx98jY6g+ulI1qlIeQFBtegqB/lpAP/ w9s8LzzGCVvVZnZitfzv0muUKYnjS2gZG2WK4WMtSsimSza7RlF4FvN16i7HMOIF lSPzR8MelTKN9XjHAE+jyk0xJ2oYYuZg4Nq/SnuRZda2PShTlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+v29NZ5f2qvbrulkjKuRrfGydPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTlk NWYyMC0yMzY3LTQ1N2ItOTcwYi03ZjFjMWE2MGZjYWUvY2FjMTJmMjctZTNhZi0z ODAzLWE2OWMtZTFkYjVjYmM0ZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzE5ZDVmMjAtMjM2Ny00NTdiLTk3 MGItN2YxYzFhNjBmY2FlLzMxOWQ1ZjIwLTIzNjctNDU3Yi05NzBiLTdmMWMxYTYw ZmNhZS5jcmwwHwYDVR0jBBgwFoAUnFErFXqHY+TuXE7m8ya3OGcc4kswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTlkNWYyMC0yMzY3LTQ1N2ItOTcwYi03ZjFj MWE2MGZjYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjpSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnX0oocQGgEfAYjBsHwuy59L4zI1+uPt1ae6n1Sq4jdNPQlRx7NCG7t Vr+hEOOWvqx5G/G3yA79o635Vyq2lxmRglCjUtxFl8cu4C4XrLVGodK6bSzB4IkS HaLTq5Xy3yzHKNAvbnpT+Dxf663o7BDI0kfRZnF09tqDobui8j95N1zbVeRruWa2 hzT5rXbC63Ss94EQ8QQN6lFLLmvTHsQSdHJ/DWWFjsk/tp0gsraTSg9ReLgHQQqf Wl7la8YZD46HpZx/UBRIrDFjN+xwDIdw8/Dj4jfqi/kPq6gVknUAdJsiz8E2XpY4 BZBYT9r39SfWGjMQVkl7XJsvv9xCb+U= -----END CERTIFICATE-----Generated at Mon Aug 4 18:35:26 2025 by rpki-client