$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1da723-18c3-399f-9eab-e845b5b54a7d.roa File: 3a1da723-18c3-399f-9eab-e845b5b54a7d.roa (raw, json) Hash identifier: +u9pldlx9KeOfwKKH7EkPRW+WqXhk+DaxG2u85Rhrr8= Subject key identifier: 21:0C:DF:62:6F:80:69:50:D3:2F:F9:3F:B8:43:37:0F:9F:26:0B:9D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A89A616B19B07C8CC0DBA1700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1da723-18c3-399f-9eab-e845b5b54a7d.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 36627 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:16:b1:9b:07:c8:cc:0d:ba:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=4980e4d6-45f9-4ecd-bc70-3465a138ceaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:b1:60:96:16:27:32:ff:d0:2f:eb:7d:3d: 7f:ab:a6:50:91:42:03:da:d7:2a:38:d1:cd:f1:97: 6d:1e:8d:8f:4a:f3:20:99:46:61:30:6b:bb:46:e6: 0a:fd:59:61:6d:89:f2:bf:6f:de:09:c0:63:29:5e: 3e:94:1e:23:85:7b:94:32:97:f2:58:fe:c1:39:5e: b1:25:fc:fa:0b:16:ee:6f:6e:5d:08:2d:94:b1:5c: 8d:24:ff:d9:43:6f:d6:6b:f5:2d:0b:6c:3d:e0:ab: 8e:7f:20:21:f2:df:17:d2:85:44:78:0d:9f:09:20: e8:f7:d1:9d:31:61:20:57:a6:b9:82:90:07:ed:4b: 9b:5e:09:a3:7d:20:49:9e:1d:8c:08:53:bc:c2:08: dd:3d:45:03:ee:44:37:9a:61:24:d0:5f:37:cf:38: 3f:24:05:0f:7d:c6:e0:46:69:d6:ef:bf:f3:5f:55: 92:0e:12:69:91:7d:47:38:88:6b:d0:12:27:88:1e: 6a:ef:67:b7:14:b7:2c:fc:6f:61:5a:e7:95:bb:8e: df:5d:32:db:af:f1:64:e5:e2:21:bc:79:66:54:18: f5:9a:69:31:d9:0b:21:3d:03:92:3c:b2:65:9f:e5: 60:05:a8:37:a9:fe:a5:14:39:34:4b:b0:14:2a:8d: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0C:DF:62:6F:80:69:50:D3:2F:F9:3F:B8:43:37:0F:9F:26:0B:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1da723-18c3-399f-9eab-e845b5b54a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:06:0e:e5:d8:39:a5:f4:5a:6a:03:f1:fd:af:b6:60:c3:e2: b4:a5:8d:44:4f:7d:7e:08:b5:c6:e9:fe:ef:21:a0:ec:cc:79: 56:22:04:d7:73:0f:2e:0a:79:8a:13:cb:64:22:ec:cd:48:ce: 6f:f1:e7:71:e6:7c:36:3c:f0:36:f5:05:ef:b5:87:b3:78:0e: 60:09:0d:14:f1:bf:53:26:1c:a0:8e:14:6e:97:1b:95:75:cf: 14:a9:c0:8f:a8:f8:b5:d8:ee:62:73:fa:d5:78:4c:a4:35:76: b8:7e:f6:49:67:8a:a1:15:70:99:40:b2:be:04:0e:77:e3:10: c0:b3:81:ad:0d:08:78:6f:c6:f8:49:83:86:b3:fc:78:8e:a7: 98:0b:d8:1d:84:f5:4c:05:ad:a5:c3:10:a3:a5:f2:74:70:9a: 82:31:1b:aa:91:1a:98:a2:74:58:5d:c7:4a:cc:3c:d4:72:c1: 47:f3:0c:c6:b6:48:0f:e6:5a:61:c7:19:0b:d9:8f:87:d1:e4: 91:c6:72:58:ab:84:0e:07:68:dc:8c:0b:c2:ed:44:24:35:d1: 3f:b6:4c:38:23:03:92:f4:c4:6e:49:44:94:b8:d5:29:84:e0: cb:e7:24:ae:91:90:93:45:8e:97:dc:02:d9:cc:12:99:50:43: aa:3e:4c:61 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqJphaxmwfIzA26FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk NDk4MGU0ZDYtNDVmOS00ZWNkLWJjNzAtMzQ2NWExMzhjZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FmxYJYWJzL/0C/rfT1/q6ZQkUID2tcqONHN 8ZdtHo2PSvMgmUZhMGu7RuYK/VlhbYnyv2/eCcBjKV4+lB4jhXuUMpfyWP7BOV6x Jfz6Cxbub25dCC2UsVyNJP/ZQ2/Wa/UtC2w94KuOfyAh8t8X0oVEeA2fCSDo99Gd MWEgV6a5gpAH7UubXgmjfSBJnh2MCFO8wgjdPUUD7kQ3mmEk0F83zzg/JAUPfcbg RmnW77/zX1WSDhJpkX1HOIhr0BIniB5q72e3FLcs/G9hWueVu47fXTLbr/Fk5eIh vHlmVBj1mmkx2QshPQOSPLJln+VgBag3qf6lFDk0S7AUKo0IEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCEM32JvgGlQ0y/5P7hDNw+fJgudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2ExZGE3MjMtMThjMy0z OTlmLTllYWItZTg0NWI1YjU0YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC/Bg7l2Dml9FpqA/H9r7Zgw+K0pY1ET31+CLXG6f7vIaDszHlWIgTX cw8uCnmKE8tkIuzNSM5v8edx5nw2PPA29QXvtYezeA5gCQ0U8b9TJhygjhRulxuV dc8UqcCPqPi12O5ic/rVeEykNXa4fvZJZ4qhFXCZQLK+BA534xDAs4GtDQh4b8b4 SYOGs/x4jqeYC9gdhPVMBa2lwxCjpfJ0cJqCMRuqkRqYonRYXcdKzDzUcsFH8wzG tkgP5lphxxkL2Y+H0eSRxnJYq4QOB2jcjAvC7UQkNdE/tkw4IwOS9MRuSUSUuNUp hODL5ySukZCTRY6X3ALZzBKZUEOqPkxh -----END CERTIFICATE-----Generated at Wed Jul 23 17:14:58 2025 by rpki-client