$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb8f5ab4-bc1f-3c29-a734-6a405401769c.roa File: cb8f5ab4-bc1f-3c29-a734-6a405401769c.roa (raw, json) Hash identifier: LbqCNwGxyA6fuJjUjZgk1GYDk2Fe6l75k42smTo+HjY= Subject key identifier: 56:F9:1C:C0:BF:2A:D2:DA:2A:38:BD:74:F1:DC:19:C7:75:A5:EF:93 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF07EFC378F55965AEB12F4 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb8f5ab4-bc1f-3c29-a734-6a405401769c.roa Signing time: Thu 24 Jul 2025 12:38:52 +0000 ROA not before: Thu 24 Jul 2025 12:38:52 +0000 ROA not after: Wed 22 Oct 2025 12:38:52 +0000 asID: 396654 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:7e:fc:37:8f:55:96:5a:eb:12:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:52 2025 GMT Not After : Oct 22 12:38:52 2025 GMT Subject: CN=c6538d06-aba6-430b-a3d8-aa6e5c328812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:67:85:8d:10:16:f4:cf:13:1f:97:ea:6c: ca:26:7d:33:13:52:9f:10:b4:0c:0e:61:02:2d:74: 74:eb:d2:df:e0:eb:d3:32:f0:74:65:00:a2:5e:74: a6:ee:3b:9e:73:e8:e4:34:97:d9:2b:33:e1:ab:ab: 15:e7:31:b5:b3:71:35:bd:d1:1c:41:2f:ec:b3:a4: ab:c4:5f:6d:2d:52:32:89:22:d0:ba:c7:3b:4a:08: 63:bb:90:7e:5b:b4:38:dc:e3:a7:ea:67:cd:fa:99: 3f:81:0c:3c:d8:64:ea:40:88:e7:bb:c2:d6:24:09: 2c:e3:c5:11:52:c6:a7:40:44:69:bb:bf:c3:05:2e: 8e:aa:eb:da:02:ba:b6:d6:94:d3:9c:e2:e9:a1:2a: aa:bd:93:05:8b:e1:1e:da:1f:ce:65:fa:73:50:1e: 43:b1:e8:13:4a:f9:b9:5e:33:85:d3:8e:04:ae:2d: 23:44:87:2a:5a:b3:93:9a:ff:6e:32:6d:34:48:88: b9:f0:08:48:2f:e5:5a:4c:de:57:27:0c:6d:bd:10: 8c:37:5e:2b:b2:45:6a:59:7c:08:5c:d1:4b:0b:92: 2e:e3:7d:3c:cd:f5:31:88:d6:ca:3d:1e:63:21:72: dc:ed:b4:3b:5e:79:9c:2b:a2:15:01:34:ea:23:1a: 7c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F9:1C:C0:BF:2A:D2:DA:2A:38:BD:74:F1:DC:19:C7:75:A5:EF:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb8f5ab4-bc1f-3c29-a734-6a405401769c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:7d:d2:7e:fc:98:23:e7:2a:a5:9e:64:08:6c:d3:b1:6f:17: bd:41:6d:7e:06:99:df:d7:9c:32:94:bb:02:66:2d:d7:6e:41: 58:bc:3f:5e:7d:9f:6c:a1:6b:0c:12:ed:d9:2b:9b:f2:93:89: 51:81:d4:47:7b:50:fb:ae:5e:21:75:9a:4a:eb:d4:b9:2c:e2: 38:64:3e:0f:6d:ce:ef:9d:c0:cb:6c:9f:90:05:b7:02:d6:61: 71:51:5f:6b:18:9e:ca:2a:c6:b0:5e:7b:64:ee:45:2d:fe:65: 25:e2:da:81:2f:7f:4f:b3:6a:2b:13:97:18:e8:c1:af:fa:a9: 6d:55:f9:7f:fc:db:7d:11:72:f7:32:e4:d5:75:ff:ad:3d:bb: 82:d6:68:ac:29:c2:bc:b9:bc:89:79:c7:54:24:87:f4:5f:c8: 43:d0:11:6c:13:a3:9a:92:6f:e8:e0:8e:36:90:e7:e3:36:90: 37:d7:df:cc:e0:85:e6:f2:f8:4e:fc:3a:66:e9:32:10:da:cc: ff:dc:3c:78:4c:11:69:7d:f1:04:f5:50:71:dc:f3:d7:09:f1: 77:9d:01:b9:81:95:45:ac:f0:9d:c4:c3:96:55:ec:08:76:7a: 64:2f:65:f3:d4:be:8d:2b:ae:0d:f4:b2:4b:53:96:1c:86:4e: 95:0e:eb:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8H78N49VllrrEvQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MloXDTI1MTAyMjEyMzg1MlowLzEtMCsGA1UEAxMk YzY1MzhkMDYtYWJhNi00MzBiLWEzZDgtYWE2ZTVjMzI4ODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT5nhY0QFvTPEx+X6mzKJn0zE1KfELQMDmEC LXR069Lf4OvTMvB0ZQCiXnSm7juec+jkNJfZKzPhq6sV5zG1s3E1vdEcQS/ss6Sr xF9tLVIyiSLQusc7Sghju5B+W7Q43OOn6mfN+pk/gQw82GTqQIjnu8LWJAks48UR UsanQERpu7/DBS6OquvaArq21pTTnOLpoSqqvZMFi+Ee2h/OZfpzUB5DsegTSvm5 XjOF044Eri0jRIcqWrOTmv9uMm00SIi58AhIL+VaTN5XJwxtvRCMN14rskVqWXwI XNFLC5Iu4308zfUxiNbKPR5jIXLc7bQ7XnmcK6IVATTqIxp8LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFb5HMC/KtLaKji9dPHcGcd1pe+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2I4ZjVhYjQtYmMxZi0z YzI5LWE3MzQtNmE0MDU0MDE3NjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ90n78mCPnKqWeZAhs07FvF71BbX4Gmd/XnDKUuwJmLdduQVi8P159 n2yhawwS7dkrm/KTiVGB1Ed7UPuuXiF1mkrr1Lks4jhkPg9tzu+dwMtsn5AFtwLW YXFRX2sYnsoqxrBee2TuRS3+ZSXi2oEvf0+zaisTlxjowa/6qW1V+X/8230Rcvcy 5NV1/609u4LWaKwpwry5vIl5x1Qkh/RfyEPQEWwTo5qSb+jgjjaQ5+M2kDfX38zg heby+E78OmbpMhDazP/cPHhMEWl98QT1UHHc89cJ8XedAbmBlUWs8J3Ew5ZV7Ah2 emQvZfPUvo0rrg30sktTlhyGTpUO63Q= -----END CERTIFICATE-----Generated at Sat Jul 26 21:06:28 2025 by rpki-client