$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37e08c07-f293-323a-a7f3-ab3a8210a62c.roa File: 37e08c07-f293-323a-a7f3-ab3a8210a62c.roa (raw, json) Hash identifier: 3PNCJ8oq/flg9422qh/JqwXwSdsEv/W8Fps0Ubukp+U= Subject key identifier: 90:A8:AB:5A:FC:EB:E8:00:4F:B0:63:AD:0A:19:91:A8:CA:37:4C:0D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A89A60EEF56012451B82E2C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37e08c07-f293-323a-a7f3-ab3a8210a62c.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 396568 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:0e:ef:56:01:24:51:b8:2e:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=a28b717c-90e2-4a2c-8979-f2c8c809d538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:e6:be:b1:ad:ec:ad:07:8e:89:a8:aa:28: 5e:bb:2a:8d:0b:39:f7:39:98:f6:8e:8c:aa:a8:cb: 40:9d:77:97:18:5c:55:0b:79:0e:5b:63:98:ea:78: 05:94:b8:0c:39:63:d6:02:ea:12:44:02:66:13:6a: b8:48:dd:40:29:b0:77:f7:c2:c6:8f:56:18:62:c3: 4c:07:31:bd:0b:ae:04:c0:eb:ba:d0:d3:89:40:e9: 1a:d7:8b:37:29:76:1f:65:fe:a7:7d:39:27:15:2a: 90:33:76:0c:61:6c:5d:de:8d:fd:b5:23:8b:85:bb: 1d:b0:43:95:b8:24:f8:2b:ed:fb:fe:82:c9:50:84: 69:26:c8:35:5d:33:43:91:bc:24:15:de:13:56:36: 2f:d7:9f:c1:de:09:b2:8c:a6:6d:9a:48:fd:b5:fe: 2d:bd:99:f0:52:b0:d8:43:3c:bf:7c:5b:ee:c5:2e: f4:1b:00:e1:01:0e:e8:2f:3a:45:06:f1:bf:3c:f4: f3:48:f0:ee:3b:fb:cd:01:9b:af:68:87:c9:c3:92: 02:60:dc:61:9d:e7:c9:ae:4e:56:89:8b:ba:b9:37: 7d:87:76:24:1e:4a:7a:f0:11:9e:ce:27:53:b9:13: 61:2e:35:be:44:a8:19:ff:57:1b:0a:7e:85:db:0e: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A8:AB:5A:FC:EB:E8:00:4F:B0:63:AD:0A:19:91:A8:CA:37:4C:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37e08c07-f293-323a-a7f3-ab3a8210a62c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:88:13:c1:7e:b8:77:cb:39:03:4d:b1:76:2b:14:9e:12:3e: 17:0f:52:8a:a2:8c:0c:b8:6a:01:18:31:8b:10:1a:34:f3:4e: 8f:10:b0:be:26:04:32:85:16:1d:88:2e:6a:1f:e5:d5:31:8d: b4:f3:7f:a5:00:28:88:d5:61:bd:f6:52:4f:42:5e:17:ea:62: 28:a5:36:50:63:69:f6:5c:31:27:e0:e0:88:2c:10:15:34:9e: cf:d9:75:e6:1e:4a:71:c1:53:18:2f:63:c3:7d:3e:49:dd:11: cb:44:85:30:32:e2:09:b5:48:59:34:e1:60:95:f5:3d:e9:6b: c4:f0:7f:f7:b4:9d:f7:1e:f7:73:9d:58:c5:e0:3a:c4:9f:f4: fb:32:78:19:9d:27:26:a9:88:86:71:b0:8e:fb:32:fd:29:73: 90:dd:29:3a:df:43:38:30:d7:63:04:30:f6:93:80:2d:bb:0f: 70:72:f3:ba:12:7d:be:41:70:c3:74:e2:27:ce:b6:2e:99:ca: 9b:b1:96:d6:95:59:32:40:28:af:26:3c:6f:ee:0b:b2:70:1d: 61:b6:b5:f2:17:8c:5c:f9:41:03:b6:12:73:50:3b:65:5f:41: 1c:8f:7c:7f:71:a0:52:d0:d8:67:5a:99:e4:be:82:ad:3d:4c: d6:7d:83:f1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqJpg7vVgEkUbguLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk YTI4YjcxN2MtOTBlMi00YTJjLTg5NzktZjJjOGM4MDlkNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrXmvrGt7K0HjomoqiheuyqNCzn3OZj2joyq qMtAnXeXGFxVC3kOW2OY6ngFlLgMOWPWAuoSRAJmE2q4SN1AKbB398LGj1YYYsNM BzG9C64EwOu60NOJQOka14s3KXYfZf6nfTknFSqQM3YMYWxd3o39tSOLhbsdsEOV uCT4K+37/oLJUIRpJsg1XTNDkbwkFd4TVjYv15/B3gmyjKZtmkj9tf4tvZnwUrDY Qzy/fFvuxS70GwDhAQ7oLzpFBvG/PPTzSPDuO/vNAZuvaIfJw5ICYNxhnefJrk5W iYu6uTd9h3YkHkp68BGezidTuRNhLjW+RKgZ/1cbCn6F2w78FQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJCoq1r86+gAT7BjrQoZkajKN0wNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzdlMDhjMDctZjI5My0z MjNhLWE3ZjMtYWIzYTgyMTBhNjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoiBPBfrh3yzkDTbF2KxSeEj4XD1KKoowMuGoBGDGLEBo0806PELC+ JgQyhRYdiC5qH+XVMY2083+lACiI1WG99lJPQl4X6mIopTZQY2n2XDEn4OCILBAV NJ7P2XXmHkpxwVMYL2PDfT5J3RHLRIUwMuIJtUhZNOFglfU96WvE8H/3tJ33Hvdz nVjF4DrEn/T7MngZnScmqYiGcbCO+zL9KXOQ3Sk630M4MNdjBDD2k4Atuw9wcvO6 En2+QXDDdOInzrYumcqbsZbWlVkyQCivJjxv7guycB1htrXyF4xc+UEDthJzUDtl X0Ecj3x/caBS0NhnWpnkvoKtPUzWfYPx -----END CERTIFICATE-----Generated at Sat Jul 26 00:25:29 2025 by rpki-client