$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ee87ba0-6e6c-3046-9435-0071ddbc60be.roa File: 0ee87ba0-6e6c-3046-9435-0071ddbc60be.roa (raw, json) Hash identifier: SDHynyxCsiXJ8qtaqLJZgU9oefeFWRsoPfQ8nuJnLJM= Subject key identifier: 97:7E:F1:38:B4:E3:76:0C:F3:DD:16:08:98:DD:76:B3:C6:1F:11:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF080CF8223284443F6F1B8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ee87ba0-6e6c-3046-9435-0071ddbc60be.roa Signing time: Thu 24 Jul 2025 12:38:52 +0000 ROA not before: Thu 24 Jul 2025 12:38:52 +0000 ROA not after: Wed 22 Oct 2025 12:38:52 +0000 asID: 396694 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:80:cf:82:23:28:44:43:f6:f1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:52 2025 GMT Not After : Oct 22 12:38:52 2025 GMT Subject: CN=f231a408-8473-4621-ae31-fedf00d1705e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:5a:9f:1c:5a:75:95:f9:4d:ed:a9:74:ca: 6d:31:f1:69:da:52:8c:84:41:b5:c0:6b:9e:f6:da: 2a:1f:ab:48:6f:74:3c:71:dd:8d:b5:ef:67:51:76: a5:1b:f9:8e:35:b9:64:1b:c6:94:8e:10:91:08:23: 39:71:71:ba:af:44:60:21:e7:2a:68:11:11:ed:28: 2c:5b:26:40:9e:bb:a9:11:ae:7f:9a:a9:42:fc:f2: 7a:bc:ed:90:1f:47:06:fd:6f:6f:2a:f2:f4:60:36: 31:39:0d:52:7b:7c:6f:c9:25:03:dd:5c:c0:18:93: d3:1f:4c:f4:72:52:4e:57:fd:33:88:28:bb:11:57: b8:06:7b:06:50:ee:25:73:0c:f7:82:d9:5b:d2:86: a5:9c:8c:1b:e6:82:03:d4:ea:93:eb:d1:ae:9f:aa: a8:cf:9d:c4:d5:11:c8:bb:7b:a6:f0:a3:65:c5:55: 2d:ef:f9:33:b3:45:ef:75:f4:c6:80:2c:d4:51:27: 7f:17:5f:48:05:76:60:c3:ce:3b:6d:13:74:1c:a6: 6e:d5:b2:5b:a0:bc:18:3e:a1:da:37:59:c8:51:7d: 9f:31:f4:77:2c:84:f9:5b:ab:9b:06:15:c9:8d:47: 87:5c:a9:38:5c:aa:ec:ba:90:99:01:a8:32:12:17: 33:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7E:F1:38:B4:E3:76:0C:F3:DD:16:08:98:DD:76:B3:C6:1F:11:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ee87ba0-6e6c-3046-9435-0071ddbc60be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:27:6c:e0:e0:41:81:2c:41:1f:13:4f:e9:f5:f2:01:92:25: 1c:dc:97:b1:4a:54:51:07:71:c4:62:b9:85:bb:ea:86:7b:28: ef:22:d6:ac:00:26:50:eb:39:b3:2c:cd:2e:41:76:a9:48:f0: 7d:57:6b:a9:d6:63:1b:cc:1e:71:31:a8:4b:05:2c:1b:d5:fd: f1:f0:38:2f:b9:c4:32:13:4c:34:b2:5e:e4:57:6a:a9:d7:0a: aa:1b:ba:c2:22:f6:9f:e2:27:0d:14:cb:79:9e:c7:68:7f:76: 35:2d:8e:ab:bc:d5:ea:d2:cf:70:cb:6b:9f:1c:13:ef:69:6a: 6e:b7:11:86:7a:56:39:f7:cd:34:55:f4:f2:fe:05:60:f6:aa: 43:b3:f6:09:23:89:5d:4a:03:17:64:c0:3e:92:c0:5b:c1:c2: f0:aa:84:1b:4a:53:2f:28:76:72:67:1f:62:7a:5b:40:1a:3c: 6c:95:60:5e:85:11:91:19:ba:14:d0:1d:54:5f:c7:c3:18:6c: 2c:b6:36:ab:88:0b:fc:7b:f2:44:28:31:12:91:27:ca:e3:bb: 0d:bb:c1:1d:e5:68:cf:ef:f7:72:46:5e:4b:ca:32:de:41:83: a2:66:c6:6b:95:9d:cd:bb:cc:47:c4:c6:a0:0f:4b:77:07:fa: dd:98:ff:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IDPgiMoREP28bgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MloXDTI1MTAyMjEyMzg1MlowLzEtMCsGA1UEAxMk ZjIzMWE0MDgtODQ3My00NjIxLWFlMzEtZmVkZjAwZDE3MDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYhanxxadZX5Te2pdMptMfFp2lKMhEG1wGue 9toqH6tIb3Q8cd2Nte9nUXalG/mONblkG8aUjhCRCCM5cXG6r0RgIecqaBER7Sgs WyZAnrupEa5/mqlC/PJ6vO2QH0cG/W9vKvL0YDYxOQ1Se3xvySUD3VzAGJPTH0z0 clJOV/0ziCi7EVe4BnsGUO4lcwz3gtlb0oalnIwb5oID1OqT69Gun6qoz53E1RHI u3um8KNlxVUt7/kzs0XvdfTGgCzUUSd/F19IBXZgw847bRN0HKZu1bJboLwYPqHa N1nIUX2fMfR3LIT5W6ubBhXJjUeHXKk4XKrsupCZAagyEhczsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd+8Ti043YM890WCJjddrPGHxGRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGVlODdiYTAtNmU2Yy0z MDQ2LTk0MzUtMDA3MWRkYmM2MGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8nbODgQYEsQR8TT+n18gGSJRzcl7FKVFEHccRiuYW76oZ7KO8i1qwA JlDrObMszS5BdqlI8H1Xa6nWYxvMHnExqEsFLBvV/fHwOC+5xDITTDSyXuRXaqnX CqobusIi9p/iJw0Uy3mex2h/djUtjqu81erSz3DLa58cE+9pam63EYZ6Vjn3zTRV 9PL+BWD2qkOz9gkjiV1KAxdkwD6SwFvBwvCqhBtKUy8odnJnH2J6W0AaPGyVYF6F EZEZuhTQHVRfx8MYbCy2NquIC/x78kQoMRKRJ8rjuw27wR3laM/v93JGXkvKMt5B g6JmxmuVnc27zEfExqAPS3cH+t2Y/1Q= -----END CERTIFICATE-----Generated at Sat Jul 26 00:15:14 2025 by rpki-client