$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79143ffe-4d99-359f-a7c7-928a9034ac1e.roa File: 79143ffe-4d99-359f-a7c7-928a9034ac1e.roa (raw, json) Hash identifier: NsHJ5iCgiuSyU6sknsIvP6tqpeUEAGfOv27NfFThZhc= Subject key identifier: F9:6F:4A:20:8B:AA:C0:68:EA:BD:2B:A6:C6:6C:62:84:EC:02:43:39 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF0832B70433096FFD03A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79143ffe-4d99-359f-a7c7-928a9034ac1e.roa Signing time: Thu 24 Jul 2025 12:38:54 +0000 ROA not before: Thu 24 Jul 2025 12:38:54 +0000 ROA not after: Wed 22 Oct 2025 12:38:54 +0000 asID: 26415 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:83:2b:70:43:30:96:ff:d0:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:54 2025 GMT Not After : Oct 22 12:38:54 2025 GMT Subject: CN=6c57428c-ba06-4666-9c74-78284e97fe0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3f:a8:d4:67:f9:e1:c8:a6:5d:63:38:ed:43: bb:35:98:c9:95:5b:dd:5e:53:e1:43:c4:6e:53:b4: 2a:03:2e:49:5a:af:f0:fc:43:eb:c2:cd:24:89:04: 05:d1:39:b4:c0:aa:48:d0:cb:d2:d3:2b:a5:2b:1b: de:f9:f7:66:af:fb:99:e1:4e:91:69:d3:11:a3:c2: 13:86:a0:f8:66:1d:da:3b:f7:b2:fb:8d:14:f8:79: 63:87:da:47:09:24:07:72:8e:e9:dc:d2:71:ef:c2: 13:4a:50:7f:cf:e5:bf:90:f8:02:29:ba:03:92:54: 5c:c4:ba:59:92:b9:06:a9:05:c0:8f:71:c6:c9:86: 43:05:b4:7f:a6:7e:f3:3b:0a:53:27:b1:31:04:24: ab:b0:fb:50:4b:d9:ea:04:e8:9a:93:c9:e6:88:db: 24:d1:fb:21:f0:a7:00:08:a2:54:9c:e3:0d:93:c1: 0d:44:78:76:e9:51:9f:37:8e:fd:05:5e:35:01:2d: a2:fb:9c:2d:71:ca:72:88:37:00:56:58:2c:01:77: b2:d0:fb:67:63:05:d9:65:29:bf:78:3d:1d:ed:50: 5d:2f:b1:8c:fe:f9:9e:a8:16:e9:5f:c6:81:9a:14: 8f:68:e5:a9:2c:7d:04:4b:8e:3c:6c:c2:01:ff:91: 81:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6F:4A:20:8B:AA:C0:68:EA:BD:2B:A6:C6:6C:62:84:EC:02:43:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79143ffe-4d99-359f-a7c7-928a9034ac1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:75:c0:c3:42:65:e4:e3:4e:ee:c4:39:15:39:87:c9:93:e8: 1f:cc:4e:0b:11:9d:f1:a4:cf:40:33:58:56:59:4d:8a:3c:6c: 06:91:f7:35:91:22:3e:95:c7:66:7b:de:fd:37:40:8c:5f:7b: b0:40:8f:2c:f3:20:8f:31:93:73:9b:54:f3:e6:99:3e:45:4a: 21:b6:87:c0:72:fd:4b:04:14:1f:31:82:58:a7:02:f2:cc:a3: bf:b2:a4:ed:62:b3:9f:92:27:9f:43:95:36:8a:1b:75:9f:18: af:c1:b4:bb:88:bf:8b:1c:4a:fb:24:b8:21:35:e7:94:44:ba: 49:c0:ba:b7:69:be:60:1c:b0:3d:4a:e5:37:9a:4f:1a:98:7d: d4:32:48:fa:7b:73:3d:52:58:33:78:81:83:94:9e:c4:bd:22: 4a:7a:d8:3b:fb:1b:14:b5:f2:56:40:32:3f:b1:f6:e7:08:cb: 6b:8b:80:b9:54:80:6b:e0:7a:32:f6:e8:f2:e8:9c:3b:f3:be: 0f:19:d9:ba:14:f0:be:51:9d:10:84:42:bd:cc:2c:94:cb:f7: 4c:aa:d2:56:4f:02:4a:a2:00:e0:99:68:ee:cc:b9:90:08:a7: df:a7:a3:eb:bd:57:e8:dc:91:ed:01:9d:ce:13:78:9d:d5:dc: 58:38:7c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IMrcEMwlv/QOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1NFoXDTI1MTAyMjEyMzg1NFowLzEtMCsGA1UEAxMk NmM1NzQyOGMtYmEwNi00NjY2LTljNzQtNzgyODRlOTdmZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD+o1Gf54cimXWM47UO7NZjJlVvdXlPhQ8Ru U7QqAy5JWq/w/EPrws0kiQQF0Tm0wKpI0MvS0yulKxve+fdmr/uZ4U6RadMRo8IT hqD4Zh3aO/ey+40U+Hljh9pHCSQHco7p3NJx78ITSlB/z+W/kPgCKboDklRcxLpZ krkGqQXAj3HGyYZDBbR/pn7zOwpTJ7ExBCSrsPtQS9nqBOiak8nmiNsk0fsh8KcA CKJUnOMNk8ENRHh26VGfN479BV41AS2i+5wtccpyiDcAVlgsAXey0PtnYwXZZSm/ eD0d7VBdL7GM/vmeqBbpX8aBmhSPaOWpLH0ES448bMIB/5GBuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlvSiCLqsBo6r0rpsZsYoTsAkM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzkxNDNmZmUtNGQ5OS0z NTlmLWE3YzctOTI4YTkwMzRhYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt1wMNCZeTjTu7EORU5h8mT6B/MTgsRnfGkz0AzWFZZTYo8bAaR9zWR Ij6Vx2Z73v03QIxfe7BAjyzzII8xk3ObVPPmmT5FSiG2h8By/UsEFB8xglinAvLM o7+ypO1is5+SJ59DlTaKG3WfGK/BtLuIv4scSvskuCE155REuknAurdpvmAcsD1K 5TeaTxqYfdQySPp7cz1SWDN4gYOUnsS9Ikp62Dv7GxS18lZAMj+x9ucIy2uLgLlU gGvgejL26PLonDvzvg8Z2boU8L5RnRCEQr3MLJTL90yq0lZPAkqiAOCZaO7MuZAI p9+no+u9V+jcke0Bnc4TeJ3V3Fg4fLc= -----END CERTIFICATE-----Generated at Sun Jul 27 00:56:49 2025 by rpki-client