$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b0ddc21-d666-355f-bb33-f862a1a973f0.roa File: 3b0ddc21-d666-355f-bb33-f862a1a973f0.roa (raw, json) Hash identifier: asIdZptwYtrUrksY0WsHHMirY0nbjBxyhyZCOE5az1Y= Subject key identifier: C1:88:F7:ED:40:E9:1F:65:12:21:03:53:34:94:46:46:0E:EC:72:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A89A62CDDEEB8BD29FEAE4E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b0ddc21-d666-355f-bb33-f862a1a973f0.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 397202 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:2c:dd:ee:b8:bd:29:fe:ae:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=e14205b9-26c4-42e5-8240-80f9d52ae528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:31:0f:81:22:c2:c2:9e:c3:77:2b:21:4c: f1:31:97:3d:9b:e1:44:61:2b:99:54:62:50:70:57: d8:8b:3d:6c:be:4a:2a:28:ac:a8:45:55:f7:53:de: 1e:e0:31:92:ca:b6:92:6a:26:09:38:b3:9c:fb:eb: ad:5d:91:b7:90:40:5e:ba:e7:43:98:19:06:42:53: 39:f0:3c:7b:4b:4c:c7:63:8b:31:95:62:62:79:63: 88:c5:10:31:a4:56:78:03:22:8e:82:ba:17:db:69: 58:5d:ec:96:97:e3:17:4d:6c:95:88:fd:36:60:79: 74:76:bb:1f:9a:71:4b:b5:83:a0:e6:85:bb:7b:b6: 1d:f2:6a:c1:7d:2f:be:4f:99:d1:d6:c6:fe:e0:9f: af:a5:e8:f0:67:a4:56:44:7e:60:ab:08:f1:42:29: ee:d3:a9:65:4d:90:e3:66:3c:e7:ec:fc:56:46:42: 8d:5c:14:e9:f5:e2:90:56:28:fe:7f:d9:06:f3:af: be:42:1e:36:5d:82:e9:39:43:20:e4:aa:5a:aa:77: 04:ca:7b:1f:e1:e2:0c:26:b3:be:20:9b:8e:12:fa: d8:e6:19:ea:86:a0:6e:30:3c:cd:ea:03:1c:39:25: b1:de:4d:30:0f:1c:7b:48:6a:52:8d:7b:f5:fa:44: 9a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:88:F7:ED:40:E9:1F:65:12:21:03:53:34:94:46:46:0E:EC:72:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b0ddc21-d666-355f-bb33-f862a1a973f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:fc:a4:3c:6c:8c:31:78:d8:1e:a5:e7:a1:ca:15:f1:e4:3c: c0:47:74:dc:33:5f:1d:a2:b5:04:cb:46:61:d7:78:d9:0d:a8: 87:48:b1:df:50:cb:9e:e6:6e:76:12:a7:06:dd:24:23:17:2a: 74:2a:73:e3:be:ed:c6:d7:6e:73:3d:22:35:aa:ea:a0:5e:d4: 18:db:55:ac:b2:71:fd:2f:3c:4d:9c:aa:35:75:95:ae:90:5d: cf:ce:50:64:3d:42:1b:7b:d0:9d:ad:b9:7e:9f:8d:5a:bd:c1: 42:a8:5b:5b:91:8d:ec:dc:dc:81:83:6d:1e:10:19:b2:84:d7: fd:9c:4d:66:26:59:51:b1:a3:ce:1b:dd:48:3f:88:9e:5a:e1: fb:eb:9d:2f:a1:62:d4:a4:97:a1:3b:1a:35:cd:de:1d:ce:38: 07:93:54:0e:00:36:7e:66:8d:6b:33:2b:a0:e3:11:97:38:4e: d4:f5:69:73:31:f5:73:22:97:85:3b:e2:10:92:f0:1d:6d:d7: fb:85:f2:5c:cb:74:70:87:c2:70:67:54:b3:24:ae:4e:0a:31: e8:d6:2f:ca:8b:19:ff:fc:d1:39:33:b4:85:be:96:2b:d6:11: f8:f7:96:0e:40:b6:de:aa:c7:ca:2a:4d:0b:e8:d5:d5:8f:80: 80:ee:c9:e8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqJpizd7ri9Kf6uTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk ZTE0MjA1YjktMjZjNC00MmU1LTgyNDAtODBmOWQ1MmFlNTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi10xD4EiwsKew3crIUzxMZc9m+FEYSuZVGJQ cFfYiz1svkoqKKyoRVX3U94e4DGSyraSaiYJOLOc++utXZG3kEBeuudDmBkGQlM5 8Dx7S0zHY4sxlWJieWOIxRAxpFZ4AyKOgroX22lYXeyWl+MXTWyViP02YHl0drsf mnFLtYOg5oW7e7Yd8mrBfS++T5nR1sb+4J+vpejwZ6RWRH5gqwjxQinu06llTZDj Zjzn7PxWRkKNXBTp9eKQVij+f9kG86++Qh42XYLpOUMg5KpaqncEynsf4eIMJrO+ IJuOEvrY5hnqhqBuMDzN6gMcOSWx3k0wDxx7SGpSjXv1+kSaXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMGI9+1A6R9lEiEDUzSURkYO7HJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2IwZGRjMjEtZDY2Ni0z NTVmLWJiMzMtZjg2MmExYTk3M2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAV/KQ8bIwxeNgepeehyhXx5DzAR3TcM18dorUEy0Zh13jZDaiHSLHf UMue5m52EqcG3SQjFyp0KnPjvu3G125zPSI1quqgXtQY21WssnH9LzxNnKo1dZWu kF3PzlBkPUIbe9Cdrbl+n41avcFCqFtbkY3s3NyBg20eEBmyhNf9nE1mJllRsaPO G91IP4ieWuH7650voWLUpJehOxo1zd4dzjgHk1QOADZ+Zo1rMyug4xGXOE7U9Wlz MfVzIpeFO+IQkvAdbdf7hfJcy3Rwh8JwZ1SzJK5OCjHo1i/Kixn//NE5M7SFvpYr 1hH495YOQLbeqsfKKk0L6NXVj4CA7sno -----END CERTIFICATE-----Generated at Sat Jul 26 00:25:27 2025 by rpki-client