$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8314e157-ca19-3d88-a49f-29b1a8143240.roa File: 8314e157-ca19-3d88-a49f-29b1a8143240.roa (raw, json) Hash identifier: DiNZ7a4TiQRosl5Ni68LkKDsDhmXFF4MmLTIk4MNH00= Subject key identifier: 04:2E:CB:C3:1A:ED:54:B3:8C:FF:63:65:4A:AD:CA:5C:9F:95:3F:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF08A451498705DF19D3370 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8314e157-ca19-3d88-a49f-29b1a8143240.roa Signing time: Thu 24 Jul 2025 12:38:57 +0000 ROA not before: Thu 24 Jul 2025 12:38:57 +0000 ROA not after: Wed 22 Oct 2025 12:38:57 +0000 asID: 396621 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:8a:45:14:98:70:5d:f1:9d:33:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:57 2025 GMT Not After : Oct 22 12:38:57 2025 GMT Subject: CN=ffb79dc2-cbf1-4b6d-81ca-fe647a619e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:98:87:1f:85:c5:4e:01:34:ce:7a:93:0a: 0b:f8:7e:16:97:22:80:99:f5:76:07:aa:17:07:df: 25:0b:7d:69:db:40:ca:3f:ed:5b:63:70:05:32:42: 5d:59:cc:64:7c:11:37:13:51:7f:e4:82:d2:a4:0a: 15:95:e5:bc:05:f6:cf:fd:b9:b5:cd:0e:38:8e:78: 2e:4f:96:2a:b8:5f:00:ed:36:0c:2d:89:20:68:fe: 4c:52:bf:ee:07:19:2f:29:df:86:f1:cc:1b:d2:70: a9:61:95:c3:d6:83:9e:28:23:d3:11:0d:09:c5:a5: 63:cb:ff:03:6c:20:5f:e3:fd:6c:fb:ae:39:c6:f5: 1c:43:53:6a:38:02:26:4d:60:49:1f:a0:98:c3:78: 75:18:e7:0b:d5:c8:8a:db:ad:d8:1c:2d:73:79:a9: f0:d4:2c:d0:d2:16:b6:5d:c6:03:a8:7f:79:5d:d5: 8c:f1:e0:40:5f:90:ff:06:31:0a:bc:dd:bc:0a:79: 5e:ea:75:4b:b8:72:63:4e:34:cb:8f:44:1e:4f:7d: cd:ef:aa:56:06:9d:04:e6:d8:8e:73:6b:c3:03:01: d2:84:3a:92:3c:48:50:10:26:31:a2:50:40:06:48: 6e:bc:af:ec:d9:c3:22:df:c5:8d:b6:d5:c6:cb:f3: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2E:CB:C3:1A:ED:54:B3:8C:FF:63:65:4A:AD:CA:5C:9F:95:3F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8314e157-ca19-3d88-a49f-29b1a8143240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:97:2b:bc:b3:7b:01:01:ec:42:b9:0b:67:32:eb:4a:2e:1f: e6:55:62:af:e1:b9:ea:b8:a2:a3:d2:b7:b2:ff:0b:28:56:c7: 13:47:ac:4d:7d:2c:f5:db:71:08:6b:42:d8:9e:c0:98:0d:bf: 19:bb:ad:b4:ef:3c:e9:84:c4:b8:4c:cd:45:25:b1:20:f8:9e: 9c:86:b4:a5:91:b2:d3:6c:3e:84:75:48:a8:9e:bc:68:25:5d: dd:eb:40:b6:3d:cb:f2:50:a3:f1:da:2d:fd:b0:4e:e5:6b:80: b2:6f:c3:50:f6:3a:84:d3:bc:7c:47:7c:44:b7:75:51:03:ce: e6:58:d8:45:ac:f2:39:12:b0:42:8c:37:48:74:e8:1f:3f:ff: 10:47:cf:1e:8d:c2:b1:b2:61:b0:30:20:55:63:9d:b6:11:62: bf:29:a2:9e:31:41:14:1c:64:e2:79:eb:0f:73:64:6e:09:16: 5f:64:cd:67:05:98:63:a6:2f:2a:a1:2f:47:a3:ce:57:ff:ec: e9:b1:57:c4:d3:f1:92:55:57:6c:da:07:c0:a9:f4:d1:c3:e0: b5:8b:dd:56:0d:49:ab:90:14:d8:7c:e2:74:67:8a:ac:6c:5c: 53:d5:74:00:2c:de:8d:e5:3e:51:2f:68:c3:ef:65:eb:f5:10: 60:50:e2:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IpFFJhwXfGdM3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1N1oXDTI1MTAyMjEyMzg1N1owLzEtMCsGA1UEAxMk ZmZiNzlkYzItY2JmMS00YjZkLTgxY2EtZmU2NDdhNjE5ZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9SYhx+FxU4BNM56kwoL+H4WlyKAmfV2B6oX B98lC31p20DKP+1bY3AFMkJdWcxkfBE3E1F/5ILSpAoVleW8BfbP/bm1zQ44jngu T5YquF8A7TYMLYkgaP5MUr/uBxkvKd+G8cwb0nCpYZXD1oOeKCPTEQ0JxaVjy/8D bCBf4/1s+645xvUcQ1NqOAImTWBJH6CYw3h1GOcL1ciK263YHC1zeanw1CzQ0ha2 XcYDqH95XdWM8eBAX5D/BjEKvN28Cnle6nVLuHJjTjTLj0QeT33N76pWBp0E5tiO c2vDAwHShDqSPEhQECYxolBABkhuvK/s2cMi38WNttXGy/MWuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQuy8Ma7VSzjP9jZUqtylyflT+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODMxNGUxNTctY2ExOS0z ZDg4LWE0OWYtMjliMWE4MTQzMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOXK7yzewEB7EK5C2cy60ouH+ZVYq/hueq4oqPSt7L/CyhWxxNHrE19 LPXbcQhrQtiewJgNvxm7rbTvPOmExLhMzUUlsSD4npyGtKWRstNsPoR1SKievGgl Xd3rQLY9y/JQo/HaLf2wTuVrgLJvw1D2OoTTvHxHfES3dVEDzuZY2EWs8jkSsEKM N0h06B8//xBHzx6NwrGyYbAwIFVjnbYRYr8pop4xQRQcZOJ56w9zZG4JFl9kzWcF mGOmLyqhL0ejzlf/7OmxV8TT8ZJVV2zaB8Cp9NHD4LWL3VYNSauQFNh84nRniqxs XFPVdAAs3o3lPlEvaMPvZev1EGBQ4qI= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:11 2025 by rpki-client