$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/657e7ed7-63bc-3d89-bea6-d6024fd36e7c.roa File: 657e7ed7-63bc-3d89-bea6-d6024fd36e7c.roa (raw, json) Hash identifier: CQTD7QLz6tSXC7VTdnWFccDI94F0VGsUUUxjwfUxLwg= Subject key identifier: 36:E9:B0:0F:DF:A2:21:F6:3E:D8:46:44:06:83:8E:0C:92:4B:D3:8E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF087209DB78A20BBC31F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/657e7ed7-63bc-3d89-bea6-d6024fd36e7c.roa Signing time: Thu 24 Jul 2025 12:38:55 +0000 ROA not before: Thu 24 Jul 2025 12:38:55 +0000 ROA not after: Wed 22 Oct 2025 12:38:55 +0000 asID: 396696 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:87:20:9d:b7:8a:20:bb:c3:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:55 2025 GMT Not After : Oct 22 12:38:55 2025 GMT Subject: CN=ed8023ac-ed70-431e-b601-e3757dbdc66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:33:79:80:79:82:65:4f:b5:be:1e:7f:88:bf: 23:31:fa:96:3f:68:87:6b:98:7d:b8:84:7f:59:32: e7:2d:37:40:16:ef:2f:76:67:3d:7e:36:34:ad:cf: f3:b3:56:c1:7b:5f:c3:2b:f5:b5:f6:61:fe:1e:04: e6:80:2a:1f:67:5f:e1:83:57:ad:ac:1f:16:9d:e0: 45:fe:73:3b:8a:50:2f:94:a9:51:3e:4c:8e:da:e8: 75:57:41:df:90:e3:d9:9b:41:d5:5b:74:1d:21:cb: 18:29:61:37:ae:2e:0d:f7:9f:a1:ab:0c:b0:e8:96: c8:0b:ea:d3:2d:31:0d:a8:c3:c3:ea:d1:22:b3:53: 48:d1:31:95:f0:47:e6:6f:3c:bc:64:cd:87:f6:96: 92:3c:a9:53:8c:fc:b5:2e:26:e9:93:a4:a3:22:c6: 50:2c:bd:51:e6:51:ed:c2:20:eb:24:40:81:08:5a: 5f:0d:dc:d0:8a:56:ad:6e:88:4c:1f:57:fd:30:bf: d7:c9:b3:42:2d:e3:55:64:c3:f1:66:31:cf:03:fa: 69:c6:fd:8c:d0:c6:59:31:d8:de:78:15:c8:17:d6: f3:54:da:e6:ad:44:f9:2a:a3:fd:74:1c:d5:0c:6d: 00:e3:7f:b9:21:0f:93:e5:87:20:64:a3:a4:43:a7: d4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E9:B0:0F:DF:A2:21:F6:3E:D8:46:44:06:83:8E:0C:92:4B:D3:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/657e7ed7-63bc-3d89-bea6-d6024fd36e7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:14:50:80:a5:83:14:b1:79:0f:73:58:ac:52:ed:59:8b:37: 80:ef:8d:3d:76:07:bc:2c:ef:d4:fe:49:7c:f7:83:4a:22:57: c8:15:56:a3:17:8c:5c:0c:db:f5:fb:de:b9:2a:04:57:7b:6a: 9f:04:38:4a:a7:14:77:4e:02:a1:63:30:36:a4:b2:f4:6b:e0: 84:d9:ac:e0:a8:d3:cf:d3:af:e9:c7:5b:44:b0:24:ad:15:55: 6c:f2:4a:e4:6b:2f:d8:2d:64:ad:9d:7b:48:97:bf:08:f3:d7: aa:c0:de:b7:c9:00:79:a0:6b:11:48:d6:b6:b5:b4:f0:34:12: 7d:d6:e4:cb:dd:1c:a3:94:49:85:e7:e2:5d:fa:d3:7e:ba:4c: b0:fc:c5:8c:a2:49:b2:7c:3b:31:28:43:68:64:3c:f1:36:7c: f8:cd:78:02:22:78:0d:e0:77:b9:44:dc:64:9a:cc:10:4c:25: 25:b0:ca:2b:bd:11:e4:e4:0a:83:ad:74:11:15:62:fa:65:92: 68:14:36:30:09:43:17:73:a5:dd:42:c0:32:42:9a:46:ce:5f: 46:ef:d9:04:35:54:5d:19:78:33:48:f5:d6:5b:19:65:5f:f1: ae:11:90:79:6a:fb:c1:23:a3:ac:ca:dc:88:4d:ea:05:54:4a: 62:c9:5c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IcgnbeKILvDH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1NVoXDTI1MTAyMjEyMzg1NVowLzEtMCsGA1UEAxMk ZWQ4MDIzYWMtZWQ3MC00MzFlLWI2MDEtZTM3NTdkYmRjNjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDN5gHmCZU+1vh5/iL8jMfqWP2iHa5h9uIR/ WTLnLTdAFu8vdmc9fjY0rc/zs1bBe1/DK/W19mH+HgTmgCofZ1/hg1etrB8WneBF /nM7ilAvlKlRPkyO2uh1V0HfkOPZm0HVW3QdIcsYKWE3ri4N95+hqwyw6JbIC+rT LTENqMPD6tEis1NI0TGV8Efmbzy8ZM2H9paSPKlTjPy1Libpk6SjIsZQLL1R5lHt wiDrJECBCFpfDdzQilatbohMH1f9ML/XybNCLeNVZMPxZjHPA/ppxv2M0MZZMdje eBXIF9bzVNrmrUT5KqP9dBzVDG0A43+5IQ+T5YcgZKOkQ6fUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbpsA/foiH2PthGRAaDjgySS9OOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjU3ZTdlZDctNjNiYy0z ZDg5LWJlYTYtZDYwMjRmZDM2ZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgUUIClgxSxeQ9zWKxS7VmLN4DvjT12B7ws79T+SXz3g0oiV8gVVqMX jFwM2/X73rkqBFd7ap8EOEqnFHdOAqFjMDaksvRr4ITZrOCo08/Tr+nHW0SwJK0V VWzySuRrL9gtZK2de0iXvwjz16rA3rfJAHmgaxFI1ra1tPA0En3W5MvdHKOUSYXn 4l360366TLD8xYyiSbJ8OzEoQ2hkPPE2fPjNeAIieA3gd7lE3GSazBBMJSWwyiu9 EeTkCoOtdBEVYvplkmgUNjAJQxdzpd1CwDJCmkbOX0bv2QQ1VF0ZeDNI9dZbGWVf 8a4RkHlq+8Ejo6zK3IhN6gVUSmLJXPE= -----END CERTIFICATE-----Generated at Sun Jul 27 10:29:02 2025 by rpki-client