$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d52a2a3-1c55-3a40-8d8d-7a2fd2dc36ab.roa File: 6d52a2a3-1c55-3a40-8d8d-7a2fd2dc36ab.roa (raw, json) Hash identifier: kmI19nVtS3PNDFmnaSZ9TSn6zqg+4tD9Fd6L9+luvsY= Subject key identifier: 47:E9:8F:EF:B3:87:24:2A:91:29:C8:32:37:3A:7B:BF:E2:00:88:18 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF078FEA7CCBB58847FF280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d52a2a3-1c55-3a40-8d8d-7a2fd2dc36ab.roa Signing time: Thu 24 Jul 2025 12:38:49 +0000 ROA not before: Thu 24 Jul 2025 12:38:49 +0000 ROA not after: Wed 22 Oct 2025 12:38:49 +0000 asID: 396655 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:78:fe:a7:cc:bb:58:84:7f:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:49 2025 GMT Not After : Oct 22 12:38:49 2025 GMT Subject: CN=49a724f8-6965-4524-a3a0-57fad4f4d51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:9d:76:15:1e:59:a2:22:cc:52:a2:7e:91: 3b:2a:48:8e:07:8c:b7:55:ec:53:8e:d5:97:c2:28: bc:c1:31:ae:a8:f0:3f:db:a3:7c:dc:42:5f:5e:3a: c6:01:8c:41:6a:d2:8d:d0:ec:3d:3c:8d:4c:5d:4e: 1f:6c:a2:86:e1:b4:d2:9f:31:8f:e0:ad:5c:8c:65: 65:0a:04:bc:32:f5:53:b9:f8:42:5a:f9:44:60:32: 3f:64:96:70:40:0c:12:9c:2b:0b:ba:27:6b:8d:a6: 99:c8:bb:da:b4:35:97:61:a5:91:4f:71:f7:d8:3c: ca:82:88:22:e5:90:c1:70:c4:45:be:bd:4a:1e:30: 3c:d9:96:09:36:c3:a8:59:ec:b7:15:8b:fa:98:26: 55:55:96:a4:e3:10:6f:7f:02:3c:d4:f2:a1:07:20: a2:cc:6a:8c:b8:8b:df:79:dd:ec:17:8f:5b:40:95: 1a:2c:1a:4c:1e:eb:8a:d9:56:3d:88:91:d6:5f:46: 82:e2:d6:aa:10:24:7d:a5:da:dc:c5:f8:cc:55:28: 14:82:1a:61:16:79:b8:81:23:61:22:3e:fe:a7:89: f4:fc:20:eb:5a:f8:51:3b:c5:62:93:b6:b4:6b:cf: 0c:d9:d4:4f:20:34:5d:23:90:2b:14:39:dd:86:6f: aa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E9:8F:EF:B3:87:24:2A:91:29:C8:32:37:3A:7B:BF:E2:00:88:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d52a2a3-1c55-3a40-8d8d-7a2fd2dc36ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:6f:d9:e3:8f:8d:ef:67:d6:b4:33:3c:92:b6:40:3d:1c:b4: f2:5b:40:a9:e1:e7:b7:d1:12:e1:91:6d:fa:4c:55:d1:ee:6f: f2:c2:c1:6f:f0:89:05:f7:ac:cb:1a:da:1f:80:aa:4d:3a:99: db:dc:14:8c:b5:1b:a8:71:0a:b8:1c:fb:35:d0:97:cf:da:b7: 60:0c:65:1c:35:35:77:02:91:8c:4a:50:24:bd:d0:3d:6c:52: 3d:ea:c7:e1:a1:f9:d1:2f:fa:35:cf:ee:f1:2c:28:82:df:db: 65:a6:9a:57:64:f0:34:ab:7d:02:f2:b5:d1:ed:b9:ce:47:28: 7e:52:b6:55:23:c7:bb:4c:92:e7:a6:22:fd:db:de:1c:5b:06: 1e:98:9a:90:03:9e:d6:f1:6f:8d:26:8f:a5:4e:70:d3:cc:87: 3d:d1:d4:67:55:98:3c:c3:97:ad:7d:f5:8e:d2:6c:d5:42:bb: f0:5b:00:37:18:6e:94:ab:86:eb:5e:94:96:72:21:d7:4b:35: c8:f1:7a:fb:82:4f:11:35:44:5e:d7:2f:01:19:59:64:a3:a3: b4:08:ce:30:61:11:90:a6:77:7c:ad:34:4d:98:d6:a3:c4:f0: d6:3e:9f:3f:35:67:07:43:0d:6b:a7:ae:26:14:1f:1f:91:c8: 66:f9:19:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8Hj+p8y7WIR/8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg0OVoXDTI1MTAyMjEyMzg0OVowLzEtMCsGA1UEAxMk NDlhNzI0ZjgtNjk2NS00NTI0LWEzYTAtNTdmYWQ0ZjRkNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnruddhUeWaIizFKifpE7KkiOB4y3VexTjtWX wii8wTGuqPA/26N83EJfXjrGAYxBatKN0Ow9PI1MXU4fbKKG4bTSnzGP4K1cjGVl CgS8MvVTufhCWvlEYDI/ZJZwQAwSnCsLuidrjaaZyLvatDWXYaWRT3H32DzKgogi 5ZDBcMRFvr1KHjA82ZYJNsOoWey3FYv6mCZVVZak4xBvfwI81PKhByCizGqMuIvf ed3sF49bQJUaLBpMHuuK2VY9iJHWX0aC4taqECR9pdrcxfjMVSgUghphFnm4gSNh Ij7+p4n0/CDrWvhRO8Vik7a0a88M2dRPIDRdI5ArFDndhm+qywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfpj++zhyQqkSnIMjc6e7/iAIgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmQ1MmEyYTMtMWM1NS0z YTQwLThkOGQtN2EyZmQyZGMzNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZv2eOPje9n1rQzPJK2QD0ctPJbQKnh57fREuGRbfpMVdHub/LCwW/w iQX3rMsa2h+Aqk06mdvcFIy1G6hxCrgc+zXQl8/at2AMZRw1NXcCkYxKUCS90D1s Uj3qx+Gh+dEv+jXP7vEsKILf22Wmmldk8DSrfQLytdHtuc5HKH5StlUjx7tMkuem Iv3b3hxbBh6YmpADntbxb40mj6VOcNPMhz3R1GdVmDzDl6199Y7SbNVCu/BbADcY bpSrhutelJZyIddLNcjxevuCTxE1RF7XLwEZWWSjo7QIzjBhEZCmd3ytNE2Y1qPE 8NY+nz81ZwdDDWunriYUHx+RyGb5GXo= -----END CERTIFICATE-----Generated at Sun Jul 27 08:06:24 2025 by rpki-client