$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a4e7c1-226c-398d-b857-557de6defc6d.roa File: b4a4e7c1-226c-398d-b857-557de6defc6d.roa (raw, json) Hash identifier: Gpee0EbO8o8downA/ibwL2xH4UJGvYklZTslaYxL+tc= Subject key identifier: C1:D8:17:A8:90:A2:7E:05:B2:8A:E8:D7:35:F7:41:91:4F:35:F6:74 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A89A6164980EAB19A3C60BD40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a4e7c1-226c-398d-b857-557de6defc6d.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 396609 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:16:49:80:ea:b1:9a:3c:60:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=2ddade52-ccb7-45c0-8523-f61f829783ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:c1:74:73:f6:55:0c:56:19:60:bc:57:9e: 91:0d:23:93:e1:ca:89:b3:f0:d7:c4:b4:ff:fb:ae: 68:d4:2f:ec:06:fd:ba:75:19:68:48:44:b2:80:eb: de:fe:3b:68:c4:71:00:26:75:f4:32:bf:99:b3:7d: 3d:53:e9:9c:16:cf:dd:81:76:5e:3c:02:73:5d:89: c0:ae:d8:43:8e:d9:c4:d0:20:32:bb:43:de:46:6f: e1:52:bb:25:55:51:28:63:c1:38:fb:eb:07:96:5d: a6:a1:66:c7:af:a3:29:bc:19:a4:50:48:ab:0d:32: e0:46:46:80:a3:d8:a3:b3:7f:91:79:18:2c:d9:13: 3d:97:49:36:ca:59:dc:d0:1d:03:a6:57:9a:ed:c6: 06:63:8d:dc:81:ae:c0:a4:9a:68:cc:59:bb:20:93: a8:e7:ec:75:c2:71:75:e7:6a:88:6f:0a:36:1c:fd: 7f:12:71:6b:53:aa:67:2d:ce:72:55:5c:9f:8c:2f: 99:d9:9a:0a:89:33:9f:44:71:ed:a7:8a:b1:13:10: 34:d9:c0:0f:26:7d:7e:62:4e:15:d6:43:e0:9f:48: e6:15:35:85:e9:4b:1b:6f:67:29:4c:e9:62:3b:85: c1:84:87:ab:47:48:b9:b1:50:bc:9c:f5:35:78:ef: 8a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D8:17:A8:90:A2:7E:05:B2:8A:E8:D7:35:F7:41:91:4F:35:F6:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a4e7c1-226c-398d-b857-557de6defc6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:2b:4c:4e:da:07:4a:89:a6:85:98:1f:99:a2:b5:8b:bb:9f: 11:e7:10:6a:ed:63:25:86:49:1e:a2:89:7b:b4:1b:cd:80:64: c8:d5:97:b4:b2:4e:0e:ab:f8:b9:88:a9:35:6d:c6:b2:c2:a5: 40:54:c4:56:6f:a7:4d:d8:9c:2b:27:69:f2:f2:69:0b:88:0c: a7:1e:e9:b1:fe:2a:98:5e:1f:10:f1:a0:6d:ab:5f:db:af:fb: d9:6c:e5:63:be:7e:4e:e1:65:d5:e5:db:7c:d8:10:15:ac:1d: ed:ca:c4:ed:45:57:65:ac:53:8f:22:79:47:dc:38:7c:fc:68: ab:1a:00:ec:4d:cc:57:9a:7f:00:fc:86:a6:17:06:22:ee:83: c9:af:db:25:9f:72:72:a9:b8:53:99:2b:e5:e6:77:80:28:17: 2a:0c:6e:17:3e:09:ff:aa:6e:01:0a:24:ad:67:a9:c3:e2:7a: 52:e1:e3:a2:ce:c9:d3:0c:a7:25:49:0a:bc:5e:4d:cb:bc:31: d7:4f:bf:b0:e4:41:b0:70:92:b8:4a:b7:3a:71:55:c1:bc:54: d7:ab:2d:85:b4:58:fe:44:1f:2b:f6:6f:2d:84:27:a0:15:a3: 4e:6f:0d:b3:0e:53:33:6b:67:b6:74:65:e7:91:a1:87:9c:cf: 1f:7a:cb:fb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqJphZJgOqxmjxgvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk MmRkYWRlNTItY2NiNy00NWMwLTg1MjMtZjYxZjgyOTc4M2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoDBdHP2VQxWGWC8V56RDSOT4cqJs/DXxLT/ +65o1C/sBv26dRloSESygOve/jtoxHEAJnX0Mr+Zs309U+mcFs/dgXZePAJzXYnA rthDjtnE0CAyu0PeRm/hUrslVVEoY8E4++sHll2moWbHr6MpvBmkUEirDTLgRkaA o9ijs3+ReRgs2RM9l0k2ylnc0B0Dplea7cYGY43cga7ApJpozFm7IJOo5+x1wnF1 52qIbwo2HP1/EnFrU6pnLc5yVVyfjC+Z2ZoKiTOfRHHtp4qxExA02cAPJn1+Yk4V 1kPgn0jmFTWF6Usbb2cpTOliO4XBhIerR0i5sVC8nPU1eO+KawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMHYF6iQon4Fsoro1zX3QZFPNfZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjRhNGU3YzEtMjI2Yy0z OThkLWI4NTctNTU3ZGU2ZGVmYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOK0xO2gdKiaaFmB+ZorWLu58R5xBq7WMlhkkeool7tBvNgGTI1Ze0 sk4Oq/i5iKk1bcaywqVAVMRWb6dN2JwrJ2ny8mkLiAynHumx/iqYXh8Q8aBtq1/b r/vZbOVjvn5O4WXV5dt82BAVrB3tysTtRVdlrFOPInlH3Dh8/GirGgDsTcxXmn8A /IamFwYi7oPJr9sln3JyqbhTmSvl5neAKBcqDG4XPgn/qm4BCiStZ6nD4npS4eOi zsnTDKclSQq8Xk3LvDHXT7+w5EGwcJK4Src6cVXBvFTXqy2FtFj+RB8r9m8thCeg FaNObw2zDlMza2e2dGXnkaGHnM8fesv7 -----END CERTIFICATE-----Generated at Wed Jul 23 17:19:52 2025 by rpki-client