$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53665cd5-c811-3cd9-bbcd-8ac4395de98c.roa File: 53665cd5-c811-3cd9-bbcd-8ac4395de98c.roa (raw, json) Hash identifier: YEljIFSj3OYC3vzjaTgWIwOWGnh86H7IpJvFbucqWgE= Subject key identifier: 8F:E4:D1:A8:13:E7:76:DC:51:0E:9D:BC:1C:0B:0C:B8:3A:73:FF:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF07C6C5189059C7BCD6280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53665cd5-c811-3cd9-bbcd-8ac4395de98c.roa Signing time: Thu 24 Jul 2025 12:38:50 +0000 ROA not before: Thu 24 Jul 2025 12:38:50 +0000 ROA not after: Wed 22 Oct 2025 12:38:50 +0000 asID: 396688 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:7c:6c:51:89:05:9c:7b:cd:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:50 2025 GMT Not After : Oct 22 12:38:50 2025 GMT Subject: CN=1ae5e2f3-78f6-4c05-8031-52cf3baa4bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:8d:24:0c:38:9c:f8:a0:92:a0:7c:3a:22: c9:23:eb:e4:73:85:de:c3:02:41:5f:c1:02:6d:2b: 0e:cd:2d:f4:df:1b:44:eb:b8:dd:33:ec:bc:8f:8e: 0d:8d:61:76:02:e0:fc:55:1a:98:ef:c7:9c:bd:02: 01:6d:f4:5a:0c:fe:f1:fd:7c:43:4e:e7:e2:1c:b2: f0:f3:3f:16:74:8f:81:d3:28:da:1e:76:85:a1:8c: a6:fd:fd:74:fd:58:c7:03:b6:af:5e:d1:b1:d5:f2: 47:16:7a:ef:d0:72:e5:7a:52:85:96:4e:50:7f:14: a4:b1:a4:4d:9b:10:97:d3:f3:a0:ac:57:b1:43:98: 03:14:8f:65:4d:29:ea:0b:87:9f:15:58:63:eb:29: 37:b9:0b:56:fb:f8:d7:ca:2f:e6:27:db:ff:c8:ec: 7f:dd:b1:d2:0a:bb:03:d4:06:c7:6c:6b:1b:99:02: 8d:40:85:ea:87:45:a4:ec:ec:9a:ac:79:ce:09:01: b4:ea:44:7f:36:ea:0f:de:e7:63:33:b9:9d:7e:10: 8d:54:f7:43:46:d6:37:80:f5:01:24:89:7d:42:1d: ef:45:38:b2:a3:c1:25:e8:c8:f2:09:84:ad:b0:6c: d3:d8:da:8f:be:bb:cb:52:01:86:5e:5d:f8:ba:c8: 25:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E4:D1:A8:13:E7:76:DC:51:0E:9D:BC:1C:0B:0C:B8:3A:73:FF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53665cd5-c811-3cd9-bbcd-8ac4395de98c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e6:84:3e:ae:1d:e8:15:2d:a2:d8:29:18:90:42:97:31:d5: e9:3b:bb:d7:ac:3a:df:9b:28:2d:6d:d8:6a:44:a4:5a:39:84: 8c:bc:6a:87:18:78:d4:b7:7f:3d:11:8e:9d:1e:42:22:8e:cc: ef:8b:49:f7:83:85:a1:a8:83:86:63:e2:11:64:73:d6:7b:58: 63:e5:67:08:d0:4e:ea:67:9b:25:64:35:9a:d0:7f:e2:d8:ac: d8:80:d6:18:94:e4:ca:d4:90:43:29:9a:8f:b1:d4:f9:06:10: a2:53:46:54:16:53:cf:27:c8:f1:bd:0d:42:2f:bb:d6:89:08: cf:63:3e:2e:2a:c1:46:64:0a:4c:fa:c5:31:82:f0:da:a7:e3: 4c:c4:97:67:53:50:20:65:ac:f7:dd:3d:79:75:b0:b3:02:40: 8d:3f:fd:32:9e:82:97:a3:ef:b3:e0:88:46:69:16:22:f7:a2: da:7f:2c:1a:14:7f:55:08:19:23:a9:2c:d9:3b:1f:a1:07:c5: 85:79:c8:ce:2e:f7:57:ca:b8:c6:b0:86:ae:91:a5:91:24:c6: c5:98:62:df:18:ab:f8:e9:3b:1a:fa:a0:2d:ed:c6:ef:60:ce: 82:97:26:6f:c6:5b:ee:a8:5e:f7:e0:01:b0:f4:c1:5d:ab:e7: 8d:4a:a9:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8HxsUYkFnHvNYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MFoXDTI1MTAyMjEyMzg1MFowLzEtMCsGA1UEAxMk MWFlNWUyZjMtNzhmNi00YzA1LTgwMzEtNTJjZjNiYWE0YmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLaNJAw4nPigkqB8OiLJI+vkc4XewwJBX8EC bSsOzS303xtE67jdM+y8j44NjWF2AuD8VRqY78ecvQIBbfRaDP7x/XxDTufiHLLw 8z8WdI+B0yjaHnaFoYym/f10/VjHA7avXtGx1fJHFnrv0HLlelKFlk5QfxSksaRN mxCX0/OgrFexQ5gDFI9lTSnqC4efFVhj6yk3uQtW+/jXyi/mJ9v/yOx/3bHSCrsD 1AbHbGsbmQKNQIXqh0Wk7OyarHnOCQG06kR/NuoP3udjM7mdfhCNVPdDRtY3gPUB JIl9Qh3vRTiyo8El6MjyCYStsGzT2NqPvrvLUgGGXl34usglKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/k0agT53bcUQ6dvBwLDLg6c/+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTM2NjVjZDUtYzgxMS0z Y2Q5LWJiY2QtOGFjNDM5NWRlOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErmhD6uHegVLaLYKRiQQpcx1ek7u9esOt+bKC1t2GpEpFo5hIy8aocY eNS3fz0Rjp0eQiKOzO+LSfeDhaGog4Zj4hFkc9Z7WGPlZwjQTupnmyVkNZrQf+LY rNiA1hiU5MrUkEMpmo+x1PkGEKJTRlQWU88nyPG9DUIvu9aJCM9jPi4qwUZkCkz6 xTGC8Nqn40zEl2dTUCBlrPfdPXl1sLMCQI0//TKegpej77PgiEZpFiL3otp/LBoU f1UIGSOpLNk7H6EHxYV5yM4u91fKuMawhq6RpZEkxsWYYt8Yq/jpOxr6oC3txu9g zoKXJm/GW+6oXvfgAbD0wV2r541KqdI= -----END CERTIFICATE-----Generated at Sat Jul 26 14:54:56 2025 by rpki-client