$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2644b1e5-c37b-3085-9123-bab2612b0d5e.roa File: 2644b1e5-c37b-3085-9123-bab2612b0d5e.roa (raw, json) Hash identifier: R2EsiOWf/FF81Sc5y2/o/1vscduLyMA0KOcHNZz2H5M= Subject key identifier: 4D:52:BF:98:F1:D0:5B:E5:07:E4:60:10:0B:37:8B:06:E1:B6:7B:73 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF08C8AC5A47E994D26FB40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2644b1e5-c37b-3085-9123-bab2612b0d5e.roa Signing time: Thu 24 Jul 2025 12:38:58 +0000 ROA not before: Thu 24 Jul 2025 12:38:58 +0000 ROA not after: Wed 22 Oct 2025 12:38:58 +0000 asID: 396743 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:8c:8a:c5:a4:7e:99:4d:26:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:58 2025 GMT Not After : Oct 22 12:38:58 2025 GMT Subject: CN=f614cee4-633a-4b98-acb3-a10811713351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f3:53:b5:86:46:38:28:f0:96:eb:79:f2:29: fa:61:75:a4:8b:8a:7a:7b:fc:a9:69:7d:b6:4f:38: d0:84:50:91:72:51:25:7f:92:28:ec:10:23:a4:f9: 52:2f:8d:f8:55:da:52:df:c3:5e:c0:e8:a5:88:9d: fd:68:9b:3c:0c:91:47:7b:32:f9:e2:ae:10:7a:ca: 8e:27:88:c2:22:fa:90:b3:28:b4:cb:87:85:c6:dd: 48:eb:cc:24:fa:b3:25:4f:12:97:cd:58:02:75:36: 30:f2:6d:d1:89:0c:91:23:27:dc:c5:8e:cf:5b:ce: c3:b9:13:8b:01:dc:5c:81:07:90:d7:b4:e3:00:6b: e9:6d:72:de:37:8a:0b:0e:9a:42:a7:80:06:2c:91: b1:3b:7f:96:d9:0e:2c:6d:7d:af:a3:e1:ba:96:94: 6e:0e:cc:f0:ef:0a:95:73:7b:38:0a:8a:4e:55:8e: 41:b6:36:23:a7:3c:f7:8c:6c:d6:26:99:73:4b:f3: 63:91:15:21:b7:d5:fb:ae:5a:dd:95:b3:75:ce:82: b6:9e:73:32:0d:d4:5b:98:e3:fc:ae:01:60:2d:cb: b1:1a:a7:89:af:39:75:0e:db:07:22:0e:c2:38:bf: 1f:ec:f8:11:ad:21:2c:e6:7d:3e:ab:5f:48:f5:74: e9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:52:BF:98:F1:D0:5B:E5:07:E4:60:10:0B:37:8B:06:E1:B6:7B:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2644b1e5-c37b-3085-9123-bab2612b0d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d4:17:3e:0d:a5:33:10:b0:67:3f:65:37:18:b0:3b:d4:43: 2b:09:00:93:59:17:78:31:d4:67:3e:e6:27:04:62:98:dd:c4: df:60:1c:ad:24:33:c3:99:02:8c:0b:ed:ba:2d:7c:d2:18:bd: a1:c6:6b:ce:de:27:ba:28:eb:64:21:70:a6:58:58:ff:cb:f1: 42:ef:70:3e:b5:75:7d:af:29:01:92:1e:73:42:c2:31:d2:14: b9:6f:55:0b:e9:17:bc:63:7b:f6:3e:53:5e:29:7f:3b:98:6a: 85:ed:19:c4:0b:30:a5:0b:88:e2:f0:a0:46:b9:cf:f6:76:6f: c9:79:8f:b8:b0:c2:83:9b:ae:c9:75:ac:3a:17:db:8c:f8:be: a1:23:3e:96:b2:3c:1a:66:42:80:e6:ab:b4:81:27:c5:b9:33: 99:43:1f:2d:d1:c2:ed:0a:52:82:e9:2b:28:78:e5:b0:fc:59: b7:84:29:d4:db:5f:ae:ae:ba:8e:1f:02:a0:27:be:0a:73:c2: 13:36:b1:79:81:b6:03:94:2f:b6:a3:78:0d:4c:c1:be:4d:b9: 4d:c7:4c:7a:86:f4:49:e0:ba:b8:30:8c:37:d7:eb:12:f2:a0: 27:59:99:91:58:c9:ad:24:5c:6f:cd:37:a2:50:9d:94:c5:78: 98:a0:ff:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IyKxaR+mU0m+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1OFoXDTI1MTAyMjEyMzg1OFowLzEtMCsGA1UEAxMk ZjYxNGNlZTQtNjMzYS00Yjk4LWFjYjMtYTEwODExNzEzMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfNTtYZGOCjwlut58in6YXWki4p6e/ypaX22 TzjQhFCRclElf5Io7BAjpPlSL434VdpS38NewOiliJ39aJs8DJFHezL54q4QesqO J4jCIvqQsyi0y4eFxt1I68wk+rMlTxKXzVgCdTYw8m3RiQyRIyfcxY7PW87DuROL AdxcgQeQ17TjAGvpbXLeN4oLDppCp4AGLJGxO3+W2Q4sbX2vo+G6lpRuDszw7wqV c3s4CopOVY5BtjYjpzz3jGzWJplzS/NjkRUht9X7rlrdlbN1zoK2nnMyDdRbmOP8 rgFgLcuxGqeJrzl1DtsHIg7COL8f7PgRrSEs5n0+q19I9XTpuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1Sv5jx0FvlB+RgEAs3iwbhtntzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjY0NGIxZTUtYzM3Yi0z MDg1LTkxMjMtYmFiMjYxMmIwZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPUFz4NpTMQsGc/ZTcYsDvUQysJAJNZF3gx1Gc+5icEYpjdxN9gHK0k M8OZAowL7botfNIYvaHGa87eJ7oo62QhcKZYWP/L8ULvcD61dX2vKQGSHnNCwjHS FLlvVQvpF7xje/Y+U14pfzuYaoXtGcQLMKULiOLwoEa5z/Z2b8l5j7iwwoObrsl1 rDoX24z4vqEjPpayPBpmQoDmq7SBJ8W5M5lDHy3Rwu0KUoLpKyh45bD8WbeEKdTb X66uuo4fAqAnvgpzwhM2sXmBtgOUL7ajeA1Mwb5NuU3HTHqG9EngurgwjDfX6xLy oCdZmZFYya0kXG/NN6JQnZTFeJig/5I= -----END CERTIFICATE-----Generated at Sat Jul 26 20:14:22 2025 by rpki-client