$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85497cef-91a5-381c-a19b-effb204a9361.roa File: 85497cef-91a5-381c-a19b-effb204a9361.roa (raw, json) Hash identifier: 4+WeUaSrVKBQsE5r76jB4dyrmO0SPlDo3X4uu55i6L0= Subject key identifier: 32:D0:FC:94:25:41:28:F5:09:81:44:9E:5F:0C:82:B4:7B:C9:41:0F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF08C9FE8997E9E4BE230C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85497cef-91a5-381c-a19b-effb204a9361.roa Signing time: Thu 24 Jul 2025 12:38:58 +0000 ROA not before: Thu 24 Jul 2025 12:38:58 +0000 ROA not after: Wed 22 Oct 2025 12:38:58 +0000 asID: 396740 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:8c:9f:e8:99:7e:9e:4b:e2:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:58 2025 GMT Not After : Oct 22 12:38:58 2025 GMT Subject: CN=53926042-70e4-477a-91c7-9c1af1eee9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:94:9c:23:38:fa:43:de:1a:a8:eb:ea:dc:dd: f2:fe:eb:c5:c5:94:45:44:41:13:52:55:e6:4b:21: d2:ce:15:b5:a6:4d:51:48:f9:f1:45:47:21:63:e5: 22:97:ef:53:cc:88:4c:35:d9:a1:f7:5d:02:d1:d3: 83:96:2f:c9:54:e8:00:d2:f9:39:64:e9:67:b0:8c: 7c:e9:79:c4:9d:39:72:61:ea:19:11:14:9c:6c:99: 85:7d:90:e2:cb:36:81:06:6a:b8:5a:93:cb:75:d9: d9:a0:53:04:b3:8c:d0:8c:ed:fe:74:06:d2:30:f2: 67:91:b6:d8:25:72:f9:1e:8b:8a:7d:99:ca:cc:f6: 74:20:58:13:9b:be:41:a7:17:c6:c3:88:84:26:c8: c5:1d:93:88:84:d3:46:99:2d:08:ea:86:5d:d1:87: 74:4c:06:53:d1:4b:a7:9c:e0:4f:28:68:83:03:07: 20:8e:eb:29:5d:83:33:99:d9:25:c7:4b:a1:64:93: 89:6b:71:b7:98:c0:11:e0:b4:f5:87:30:e1:41:0c: cd:5b:aa:a1:a3:51:f2:bd:63:3c:ea:5a:21:86:17: 1a:a4:29:e7:d8:73:31:ad:c1:f4:4b:c3:94:91:2b: ab:a2:89:db:30:76:c5:db:54:43:8a:1c:b8:e0:6d: 11:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D0:FC:94:25:41:28:F5:09:81:44:9E:5F:0C:82:B4:7B:C9:41:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85497cef-91a5-381c-a19b-effb204a9361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:b2:88:d2:24:b7:1e:d7:f1:bc:1f:9f:88:03:44:e5:a3:7d: b1:f3:22:fe:8b:9d:52:d6:70:3c:e6:51:74:11:1f:fe:9e:39: 3b:3f:19:26:4c:34:3d:5f:aa:22:00:5f:ed:bd:d8:f3:57:78: 4c:07:32:4c:3f:71:79:f2:3a:70:f9:30:8a:06:e3:ca:5b:bb: b6:f3:39:45:c2:de:c4:e4:2c:03:d1:ec:12:b2:13:45:3d:59: 9d:6a:e7:63:40:81:45:76:12:f0:be:10:71:0c:56:d4:af:c2: fe:03:6d:4a:2e:6c:d7:76:bc:b9:05:78:58:04:6e:84:6b:e1: 32:6e:11:f7:f1:f9:8f:a8:50:03:e7:5f:11:5d:96:1e:ab:09: ad:b5:a7:aa:ee:17:44:df:98:e7:80:7a:3b:68:3d:a1:62:83: e8:57:cb:ab:89:a2:b3:f0:96:3e:3a:d1:9c:70:e8:71:c8:c6: 88:7c:b9:fc:5b:6b:b5:3e:f5:b5:4b:8a:55:40:aa:a6:bb:60: c0:2b:41:70:ec:97:8d:a5:d5:b1:83:ad:c8:49:14:d8:72:03: dd:5c:3e:71:44:0a:a8:15:07:5b:14:1f:af:34:3c:55:91:3b: ba:32:19:d8:6d:27:68:33:63:ad:1c:03:f4:a2:50:b0:8e:f9: 1a:11:95:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8Iyf6Jl+nkviMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1OFoXDTI1MTAyMjEyMzg1OFowLzEtMCsGA1UEAxMk NTM5MjYwNDItNzBlNC00NzdhLTkxYzctOWMxYWYxZWVlOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJScIzj6Q94aqOvq3N3y/uvFxZRFREETUlXm SyHSzhW1pk1RSPnxRUchY+Uil+9TzIhMNdmh910C0dODli/JVOgA0vk5ZOlnsIx8 6XnEnTlyYeoZERScbJmFfZDiyzaBBmq4WpPLddnZoFMEs4zQjO3+dAbSMPJnkbbY JXL5HouKfZnKzPZ0IFgTm75BpxfGw4iEJsjFHZOIhNNGmS0I6oZd0Yd0TAZT0Uun nOBPKGiDAwcgjuspXYMzmdklx0uhZJOJa3G3mMAR4LT1hzDhQQzNW6qho1HyvWM8 6lohhhcapCnn2HMxrcH0S8OUkSuroonbMHbF21RDihy44G0R4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLQ/JQlQSj1CYFEnl8MgrR7yUEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODU0OTdjZWYtOTFhNS0z ODFjLWExOWItZWZmYjIwNGE5MzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqyiNIktx7X8bwfn4gDROWjfbHzIv6LnVLWcDzmUXQRH/6eOTs/GSZM ND1fqiIAX+292PNXeEwHMkw/cXnyOnD5MIoG48pbu7bzOUXC3sTkLAPR7BKyE0U9 WZ1q52NAgUV2EvC+EHEMVtSvwv4DbUoubNd2vLkFeFgEboRr4TJuEffx+Y+oUAPn XxFdlh6rCa21p6ruF0TfmOeAejtoPaFig+hXy6uJorPwlj460Zxw6HHIxoh8ufxb a7U+9bVLilVAqqa7YMArQXDsl42l1bGDrchJFNhyA91cPnFECqgVB1sUH680PFWR O7oyGdhtJ2gzY60cA/SiULCO+RoRleo= -----END CERTIFICATE-----Generated at Sat Jul 26 00:07:06 2025 by rpki-client