$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c508dc1-2029-308b-8afb-8a8db9252857.roa File: 5c508dc1-2029-308b-8afb-8a8db9252857.roa (raw, json) Hash identifier: itlkcwOEs8TjhVScqJwYXcqs5EpQfuWEz/wFlWkzSak= Subject key identifier: 3A:5F:7D:0E:B6:83:66:57:0D:89:E1:60:24:95:4A:A0:ED:9A:B3:C5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF082B31777BD1D3C1CEA40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c508dc1-2029-308b-8afb-8a8db9252857.roa Signing time: Thu 24 Jul 2025 12:38:53 +0000 ROA not before: Thu 24 Jul 2025 12:38:53 +0000 ROA not after: Wed 22 Oct 2025 12:38:53 +0000 asID: 396695 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:82:b3:17:77:bd:1d:3c:1c:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:53 2025 GMT Not After : Oct 22 12:38:53 2025 GMT Subject: CN=3721017a-a9c2-43e4-97a1-25a47b12f44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:a0:2e:18:d0:cb:7c:0a:ec:dd:c8:a9:83: b2:77:81:03:65:b7:07:63:50:44:47:a4:b7:e8:06: 74:04:cb:25:be:7d:b8:f6:db:06:9a:2f:dd:85:00: be:ec:27:51:93:e8:38:03:43:63:8c:a2:74:08:9a: 10:e8:76:c7:a7:05:54:a4:70:cf:57:34:71:a1:7c: 9c:7d:5d:2e:c0:a0:40:e6:85:bf:f8:f9:ae:b9:c5: 1c:a7:3b:13:ed:57:d9:47:d5:b8:e0:fc:f1:03:74: 1e:3c:e2:b8:f8:7d:33:1f:bd:88:e2:74:a3:8b:e8: a4:3e:38:29:f7:c4:41:77:53:eb:b3:a4:62:53:72: 58:69:d8:77:73:40:83:32:e7:6e:de:5f:cb:99:c3: 04:e8:16:8d:fe:91:c0:a4:11:ae:47:20:3e:d9:34: cf:42:12:c9:34:ae:be:a6:b3:64:64:89:2f:dd:3b: 0b:df:e6:d8:ab:7e:ed:9f:6e:3e:02:83:63:14:58: be:c7:cd:46:42:93:7f:c4:1d:61:3e:a2:7c:f4:ba: 8a:98:8f:55:36:3d:4e:f2:67:49:2c:6b:85:8f:9e: 44:46:ec:d2:d2:f8:ab:bf:71:4c:2a:f6:e3:d8:ec: 90:2d:ad:17:71:ca:db:b1:52:81:23:77:90:dd:0a: 45:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5F:7D:0E:B6:83:66:57:0D:89:E1:60:24:95:4A:A0:ED:9A:B3:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c508dc1-2029-308b-8afb-8a8db9252857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a7:1e:26:eb:76:b3:0d:80:d5:70:13:a4:df:16:7a:ba:bb: 9d:46:7d:88:9d:35:41:c6:43:83:12:52:d4:e5:e7:a7:03:f5: db:c6:5d:04:f9:cb:13:1e:4a:b6:a4:f8:51:5c:68:bd:40:66: dd:fa:48:b8:98:8e:3c:dd:62:75:9b:d5:d3:4a:23:a5:3c:db: 04:cc:12:74:e9:e8:d2:d1:12:71:c2:82:ad:ea:2f:51:ac:76: dd:c2:26:68:8b:93:bc:5c:49:6b:92:52:2e:c6:3c:30:aa:46: 48:09:18:66:2c:d4:87:79:6d:3a:e1:37:fe:cb:e6:76:31:4d: 3a:6f:5d:c0:34:03:ef:35:2a:85:7a:ca:6f:3c:04:c3:ba:ad: d7:18:ae:83:05:43:1a:7a:9b:dd:6c:36:47:87:7b:7a:3e:5a: 60:5d:28:11:2d:77:eb:d7:1b:ea:86:74:41:2c:c3:f0:bb:fc: 09:f2:77:c9:a1:cd:1e:46:96:36:de:82:4b:65:19:6d:0c:3f: 89:8c:69:52:bf:3e:1b:55:29:c4:13:e0:2b:a4:fa:1c:f3:42: b0:25:c7:a1:47:bf:83:23:2e:8a:ea:26:cf:5b:5e:4d:fc:4a: 33:d9:87:fb:63:9f:ea:53:c5:9f:65:84:cf:5f:72:dc:a2:d5: f7:c6:e3:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IKzF3e9HTwc6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1M1oXDTI1MTAyMjEyMzg1M1owLzEtMCsGA1UEAxMk MzcyMTAxN2EtYTljMi00M2U0LTk3YTEtMjVhNDdiMTJmNDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMugLhjQy3wK7N3IqYOyd4EDZbcHY1BER6S3 6AZ0BMslvn249tsGmi/dhQC+7CdRk+g4A0NjjKJ0CJoQ6HbHpwVUpHDPVzRxoXyc fV0uwKBA5oW/+PmuucUcpzsT7VfZR9W44PzxA3QePOK4+H0zH72I4nSji+ikPjgp 98RBd1Prs6RiU3JYadh3c0CDMudu3l/LmcME6BaN/pHApBGuRyA+2TTPQhLJNK6+ prNkZIkv3TsL3+bYq37tn24+AoNjFFi+x81GQpN/xB1hPqJ89LqKmI9VNj1O8mdJ LGuFj55ERuzS0virv3FMKvbj2OyQLa0XccrbsVKBI3eQ3QpFEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpffQ62g2ZXDYnhYCSVSqDtmrPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWM1MDhkYzEtMjAyOS0z MDhiLThhZmItOGE4ZGI5MjUyODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+nHibrdrMNgNVwE6TfFnq6u51GfYidNUHGQ4MSUtTl56cD9dvGXQT5 yxMeSrak+FFcaL1AZt36SLiYjjzdYnWb1dNKI6U82wTMEnTp6NLREnHCgq3qL1Gs dt3CJmiLk7xcSWuSUi7GPDCqRkgJGGYs1Id5bTrhN/7L5nYxTTpvXcA0A+81KoV6 ym88BMO6rdcYroMFQxp6m91sNkeHe3o+WmBdKBEtd+vXG+qGdEEsw/C7/Anyd8mh zR5GljbegktlGW0MP4mMaVK/PhtVKcQT4Cuk+hzzQrAlx6FHv4MjLorqJs9bXk38 SjPZh/tjn+pTxZ9lhM9fctyi1ffG4yM= -----END CERTIFICATE-----Generated at Sat Jul 26 11:50:59 2025 by rpki-client