$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf127a14-1052-3586-9b71-8dee6b8ff992.roa File: bf127a14-1052-3586-9b71-8dee6b8ff992.roa (raw, json) Hash identifier: 2O8+Qvy3nF97bnunbgfdvZnZp499Sbe18PfhH2lU2bY= Subject key identifier: E4:8B:8C:5C:A9:C4:7E:DC:3F:4B:F2:CA:6A:04:50:4C:22:6C:FA:20 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A89A60FCBF7C08D3DCD7EEDC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf127a14-1052-3586-9b71-8dee6b8ff992.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 396577 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:0f:cb:f7:c0:8d:3d:cd:7e:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=3a9f4ca4-81d7-4a39-aea0-02c31ed2fd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f1:cc:62:09:02:2c:cb:e7:c6:a9:4a:df:f5: 3b:14:01:e9:3c:58:59:6f:5f:d8:de:a6:6d:cc:1f: 6a:37:14:f2:f3:f5:02:f4:8f:7e:bd:0b:bd:b0:6c: 07:4f:00:4d:a2:57:4e:35:51:54:8b:65:e7:f7:bb: 05:59:d7:b0:87:e7:82:f5:1f:44:fb:da:da:e2:8b: c8:9b:4e:b8:7f:91:35:30:d1:f6:89:74:42:c9:e7: 09:38:3e:4e:f9:b0:f5:59:c1:1c:b4:ce:e8:c2:3a: ee:43:25:4a:6e:3f:6e:ca:33:a6:78:e9:8f:9c:0d: 13:3e:7d:4a:bf:b5:28:52:03:94:af:a5:91:c2:6d: e9:32:9a:cd:a9:46:d9:17:91:d8:20:1e:ef:f0:5a: d4:94:2f:0c:9f:c1:e4:05:5f:9a:5f:51:ed:99:92: 70:dc:7d:af:10:58:dd:bc:c8:a0:07:54:74:ae:d1: 4d:7f:f1:e1:5a:b2:56:fb:e2:8c:cc:46:62:4a:50: 99:ab:26:3e:35:41:3b:3c:21:95:f0:d0:aa:c4:45: c6:b9:bb:43:a3:b4:1a:0e:9b:d5:31:f1:df:c6:75: 29:81:dc:75:e9:93:93:d8:54:a9:d6:65:10:86:15: 4c:a1:88:92:8e:76:84:75:eb:cf:f3:71:92:67:d8: e5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8B:8C:5C:A9:C4:7E:DC:3F:4B:F2:CA:6A:04:50:4C:22:6C:FA:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf127a14-1052-3586-9b71-8dee6b8ff992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:69:96:8d:67:9b:fa:7e:ab:8d:f4:ca:d0:ca:5a:6e:c1:7b: 2b:90:b6:b7:75:58:3a:61:e0:81:56:3c:d0:d8:98:ec:59:d8: a6:19:d4:70:0b:0b:c2:27:a6:01:5c:8d:e1:4f:ae:4a:ba:b7: 46:6b:e6:7f:33:56:c7:4c:19:3c:f8:ed:1d:14:3b:78:65:38: 41:7a:fb:15:2f:a9:9c:99:0d:d0:e8:41:c0:94:60:20:98:96: 50:ee:7c:cc:b9:38:05:00:f7:4d:48:79:a0:41:2a:b0:fe:31: e3:24:98:4d:f2:e8:cb:99:50:10:26:f3:76:c2:0b:fc:cb:a9: 39:fb:80:96:40:30:52:01:a1:51:74:e8:17:f1:0b:20:7c:6b: 3e:bd:8c:b2:cd:4d:06:e9:6d:11:6e:21:70:8e:af:93:7b:12: c2:44:9f:ac:80:4d:1d:b6:b6:a8:27:95:28:a4:da:59:25:1b: fe:66:97:44:a5:e5:cd:2a:d5:e3:d7:e4:25:db:d5:ac:bb:4d: 90:f6:5d:97:24:24:72:9f:8d:8c:b7:ca:20:a3:ca:84:30:f6: b8:f1:00:17:b1:3f:ea:e9:7e:98:24:16:6b:b9:ce:e1:cc:6d: 8c:9d:d8:f7:38:12:b2:33:c2:ab:e9:ba:0e:2d:63:02:cc:4d: eb:87:9b:16 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqJpg/L98CNPc1+7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk M2E5ZjRjYTQtODFkNy00YTM5LWFlYTAtMDJjMzFlZDJmZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofHMYgkCLMvnxqlK3/U7FAHpPFhZb1/Y3qZt zB9qNxTy8/UC9I9+vQu9sGwHTwBNoldONVFUi2Xn97sFWdewh+eC9R9E+9ra4ovI m064f5E1MNH2iXRCyecJOD5O+bD1WcEctM7owjruQyVKbj9uyjOmeOmPnA0TPn1K v7UoUgOUr6WRwm3pMprNqUbZF5HYIB7v8FrUlC8Mn8HkBV+aX1HtmZJw3H2vEFjd vMigB1R0rtFNf/HhWrJW++KMzEZiSlCZqyY+NUE7PCGV8NCqxEXGubtDo7QaDpvV MfHfxnUpgdx16ZOT2FSp1mUQhhVMoYiSjnaEdevP83GSZ9jlLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOSLjFypxH7cP0vyymoEUEwibPogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYxMjdhMTQtMTA1Mi0z NTg2LTliNzEtOGRlZTZiOGZmOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCaZaNZ5v6fquN9MrQylpuwXsrkLa3dVg6YeCBVjzQ2JjsWdimGdRw CwvCJ6YBXI3hT65KurdGa+Z/M1bHTBk8+O0dFDt4ZThBevsVL6mcmQ3Q6EHAlGAg mJZQ7nzMuTgFAPdNSHmgQSqw/jHjJJhN8ujLmVAQJvN2wgv8y6k5+4CWQDBSAaFR dOgX8QsgfGs+vYyyzU0G6W0RbiFwjq+TexLCRJ+sgE0dtraoJ5UopNpZJRv+ZpdE peXNKtXj1+Ql29Wsu02Q9l2XJCRyn42Mt8ogo8qEMPa48QAXsT/q6X6YJBZruc7h zG2Mndj3OBKyM8Kr6boOLWMCzE3rh5sW -----END CERTIFICATE-----Generated at Thu Jul 24 23:21:40 2025 by rpki-client