$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41702d2b-ad3b-3838-9ece-bb7daff6f4e5.roa File: 41702d2b-ad3b-3838-9ece-bb7daff6f4e5.roa (raw, json) Hash identifier: A1N4HYurcKFdviCZwD03pEqrnD8bsCitxz2JRjHVbdE= Subject key identifier: 10:C4:72:9C:6C:66:0B:6F:0C:39:2C:E5:1B:A5:5D:4A:FC:95:8D:10 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF088C435AC5339D1FE4D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41702d2b-ad3b-3838-9ece-bb7daff6f4e5.roa Signing time: Thu 24 Jul 2025 12:38:56 +0000 ROA not before: Thu 24 Jul 2025 12:38:56 +0000 ROA not after: Wed 22 Oct 2025 12:38:56 +0000 asID: 396717 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:88:c4:35:ac:53:39:d1:fe:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:56 2025 GMT Not After : Oct 22 12:38:56 2025 GMT Subject: CN=37240633-b35a-44d1-a722-b1aee6bb6193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8c:c1:83:de:e7:cd:b9:e8:67:7c:65:ca:b7: 93:04:fc:c5:59:28:df:5c:d8:80:15:d8:94:c8:35: f3:57:a4:0e:ee:d6:71:3a:4a:22:04:20:f2:6e:92: d7:c9:c8:bc:0b:8f:84:27:87:97:50:7c:68:7a:98: 0d:60:f3:52:fb:20:18:2d:93:66:49:dc:bb:23:71: 71:8a:52:28:7b:43:f0:2f:59:aa:d3:39:0b:a8:62: e0:97:8b:63:7c:ca:cc:2f:9f:e2:c4:1a:cc:f0:7e: 30:af:64:5b:a7:01:3f:c4:cf:c8:68:61:97:55:c8: b7:fb:13:38:aa:09:1e:41:03:a2:61:d2:cf:42:59: 13:de:f6:90:92:2b:7f:ea:da:50:b8:1c:81:97:36: 57:52:fc:db:ae:b9:c0:3c:1c:2c:f6:db:fc:49:c2: 32:40:5a:28:5d:82:2e:dc:d0:28:e5:56:78:7f:7c: 08:3a:e0:ac:77:7e:6c:0a:40:a4:ee:35:d2:55:f4: a4:95:13:c0:8a:cb:5a:b4:55:a8:e8:a9:76:20:a8: c4:83:10:14:7f:d3:e2:29:d7:0b:fb:00:3c:4c:21: 2e:29:49:b3:4b:4b:92:98:de:50:df:90:2b:42:bd: 6f:8d:9b:f4:cb:63:81:6b:ab:fb:95:d4:83:fd:98: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C4:72:9C:6C:66:0B:6F:0C:39:2C:E5:1B:A5:5D:4A:FC:95:8D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41702d2b-ad3b-3838-9ece-bb7daff6f4e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:07:71:c5:b1:95:b7:53:69:ad:04:bc:04:b6:40:14:30:18: 09:e7:9c:0c:49:ec:47:9e:5d:68:26:f4:dd:4e:3b:61:9e:5a: 87:9b:b6:0b:04:61:9d:9f:fa:e8:df:f7:37:bc:d3:e2:f8:30: 7b:7a:b4:54:ec:4d:27:1a:ff:e5:3c:88:ba:cd:ec:35:57:e1: 73:d6:75:7f:a4:80:d2:72:88:7a:93:4b:c9:d9:a4:0b:21:18: 98:75:60:46:16:1a:0a:26:f3:7b:23:5b:5f:06:27:ea:98:f1: f8:3e:97:c1:1d:2c:06:3d:82:12:3a:4e:e2:6b:94:15:b5:25: 33:3c:04:d3:e5:20:1b:75:77:cb:be:92:4b:22:77:f0:07:fc: 55:24:bd:25:94:9d:bf:a3:1b:d2:6a:7f:99:a0:53:71:b0:e5: 8b:d4:2f:db:12:8d:9a:d2:4b:6b:b9:04:49:79:bc:c1:5e:43: 50:21:2d:35:c2:21:6c:fb:18:c2:2c:19:05:8f:3f:7c:1e:ff: 91:d8:c6:23:08:76:e1:ff:28:46:1b:65:36:ec:41:65:70:40: b8:b5:f5:c9:e6:9b:1e:f7:73:15:6b:35:96:bb:08:a4:df:ce: d7:3e:e0:33:1c:22:66:a9:29:f1:63:41:b3:32:08:ed:62:8c: ed:2c:6a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IjENaxTOdH+TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1NloXDTI1MTAyMjEyMzg1NlowLzEtMCsGA1UEAxMk MzcyNDA2MzMtYjM1YS00NGQxLWE3MjItYjFhZWU2YmI2MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YzBg97nzbnoZ3xlyreTBPzFWSjfXNiAFdiU yDXzV6QO7tZxOkoiBCDybpLXyci8C4+EJ4eXUHxoepgNYPNS+yAYLZNmSdy7I3Fx ilIoe0PwL1mq0zkLqGLgl4tjfMrML5/ixBrM8H4wr2RbpwE/xM/IaGGXVci3+xM4 qgkeQQOiYdLPQlkT3vaQkit/6tpQuByBlzZXUvzbrrnAPBws9tv8ScIyQFooXYIu 3NAo5VZ4f3wIOuCsd35sCkCk7jXSVfSklRPAistatFWo6Kl2IKjEgxAUf9PiKdcL +wA8TCEuKUmzS0uSmN5Q35ArQr1vjZv0y2OBa6v7ldSD/ZiF1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDEcpxsZgtvDDks5RulXUr8lY0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDE3MDJkMmItYWQzYi0z ODM4LTllY2UtYmI3ZGFmZjZmNGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcHccWxlbdTaa0EvAS2QBQwGAnnnAxJ7EeeXWgm9N1OO2GeWoebtgsE YZ2f+ujf9ze80+L4MHt6tFTsTSca/+U8iLrN7DVX4XPWdX+kgNJyiHqTS8nZpAsh GJh1YEYWGgom83sjW18GJ+qY8fg+l8EdLAY9ghI6TuJrlBW1JTM8BNPlIBt1d8u+ kksid/AH/FUkvSWUnb+jG9Jqf5mgU3Gw5YvUL9sSjZrSS2u5BEl5vMFeQ1AhLTXC IWz7GMIsGQWPP3we/5HYxiMIduH/KEYbZTbsQWVwQLi19cnmmx73cxVrNZa7CKTf ztc+4DMcImapKfFjQbMyCO1ijO0saoI= -----END CERTIFICATE-----Generated at Sat Jul 26 11:34:16 2025 by rpki-client