$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0bfecaa-bbd2-344c-9996-12aab4ce06b9.roa File: d0bfecaa-bbd2-344c-9996-12aab4ce06b9.roa (raw, json) Hash identifier: 6EiPGNSwfjoa7Qe8DdjHFTZ4Wf/XRRTZbzXCNrB0rDI= Subject key identifier: 1B:E7:CB:6A:9E:8B:71:14:EA:27:E1:44:8D:23:6C:B6:A5:B2:08:FC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF089B9CC6D8B6D93A1EC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0bfecaa-bbd2-344c-9996-12aab4ce06b9.roa Signing time: Thu 24 Jul 2025 12:38:57 +0000 ROA not before: Thu 24 Jul 2025 12:38:57 +0000 ROA not after: Wed 22 Oct 2025 12:38:57 +0000 asID: 396700 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:89:b9:cc:6d:8b:6d:93:a1:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:57 2025 GMT Not After : Oct 22 12:38:57 2025 GMT Subject: CN=ba7c0e08-e95e-4647-9a2c-b76f47011577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fe:eb:86:33:6c:30:d9:15:f9:e2:3b:be:47: 98:52:91:da:f4:d3:48:ce:af:56:00:3e:f7:4e:e4: 26:b5:de:d8:9d:65:93:0c:4e:60:5d:7c:4b:37:a0: 1c:97:0d:b8:7e:91:c7:a0:5e:a0:33:83:96:9e:c0: 17:fe:e0:0d:1f:bf:f5:f1:61:f4:a3:90:8e:05:fc: ff:50:de:30:e3:48:76:b4:eb:21:d9:6d:62:6f:b8: dc:16:14:8e:52:2d:49:dd:55:31:7b:7b:8c:b9:05: 8a:c8:29:c5:93:f0:ca:29:f4:1b:01:f3:5c:7c:29: 76:07:bf:25:de:a9:56:9a:9c:ee:e6:23:c8:9b:06: 29:84:ea:99:76:83:70:de:33:61:17:c7:54:9a:88: a6:cc:d4:4c:45:8f:7d:7d:0a:53:8b:34:8b:99:5e: bc:ac:b3:01:d5:d8:0f:3a:e3:2e:1d:b6:c5:33:02: 7e:ec:a6:50:ca:3a:08:aa:e5:e7:3d:a0:4d:8c:c6: 6a:6b:c1:0f:b9:e9:90:2f:63:97:69:b6:54:83:02: 5d:20:b0:ee:d0:4b:b7:7d:06:98:d1:8b:20:5a:7d: 33:eb:5a:bf:c3:4c:9e:c4:87:86:22:b7:e2:fa:57: 2e:c2:7a:c9:09:d8:17:dc:c1:0b:25:bc:45:83:1a: a5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E7:CB:6A:9E:8B:71:14:EA:27:E1:44:8D:23:6C:B6:A5:B2:08:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0bfecaa-bbd2-344c-9996-12aab4ce06b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:07:4f:a5:4c:04:2c:8e:15:44:5e:c0:d7:e1:9d:9f:f9:c6: 0a:97:23:15:b4:89:ef:75:66:22:f1:29:f3:99:33:ce:c5:6d: 69:70:5c:f9:0a:06:f5:00:f7:7e:e8:37:1b:fd:a5:5c:ab:a4: a7:d7:1f:84:f0:50:76:79:fd:71:d0:e5:87:74:2e:7f:72:d7: e3:2e:9b:34:01:e1:25:fa:20:fa:3f:13:ab:b1:b7:69:af:24: 30:f5:7c:5a:66:a8:67:41:67:73:f4:58:ec:85:5a:9a:63:3d: bd:0e:0c:24:ca:40:3a:6e:1c:3a:c8:e8:6f:1d:bc:2e:fc:77: df:5d:70:f5:cc:f2:a5:21:9b:66:43:01:0b:b3:34:f3:e2:91: 76:e2:7c:63:ef:4d:df:e1:e7:01:10:d7:d5:f2:a0:b4:3c:68: 4b:c8:f5:e0:e8:f6:a6:68:18:cf:c4:ff:ee:48:f4:a9:53:db: 24:df:0f:6d:6f:84:8e:3f:a0:0a:a6:f0:f8:33:ce:45:49:9f: 24:7b:d4:c7:0f:7e:15:ff:0b:a1:a0:c0:1b:9b:8d:b3:f5:48: e9:0b:81:e6:c2:4f:23:ba:9b:87:ea:e5:ed:35:9a:e3:0d:68: 9f:13:b2:99:30:d5:22:ff:1e:42:23:a8:82:e2:b9:fb:9a:96: ff:a7:d0:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8Im5zG2LbZOh7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1N1oXDTI1MTAyMjEyMzg1N1owLzEtMCsGA1UEAxMk YmE3YzBlMDgtZTk1ZS00NjQ3LTlhMmMtYjc2ZjQ3MDExNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv7rhjNsMNkV+eI7vkeYUpHa9NNIzq9WAD73 TuQmtd7YnWWTDE5gXXxLN6Aclw24fpHHoF6gM4OWnsAX/uANH7/18WH0o5COBfz/ UN4w40h2tOsh2W1ib7jcFhSOUi1J3VUxe3uMuQWKyCnFk/DKKfQbAfNcfCl2B78l 3qlWmpzu5iPImwYphOqZdoNw3jNhF8dUmoimzNRMRY99fQpTizSLmV68rLMB1dgP OuMuHbbFMwJ+7KZQyjoIquXnPaBNjMZqa8EPuemQL2OXabZUgwJdILDu0Eu3fQaY 0YsgWn0z61q/w0yexIeGIrfi+lcuwnrJCdgX3MELJbxFgxql5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvny2qei3EU6ifhRI0jbLalsgj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBiZmVjYWEtYmJkMi0z NDRjLTk5OTYtMTJhYWI0Y2UwNmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMHT6VMBCyOFURewNfhnZ/5xgqXIxW0ie91ZiLxKfOZM87FbWlwXPkK BvUA937oNxv9pVyrpKfXH4TwUHZ5/XHQ5Yd0Ln9y1+MumzQB4SX6IPo/E6uxt2mv JDD1fFpmqGdBZ3P0WOyFWppjPb0ODCTKQDpuHDrI6G8dvC78d99dcPXM8qUhm2ZD AQuzNPPikXbifGPvTd/h5wEQ19XyoLQ8aEvI9eDo9qZoGM/E/+5I9KlT2yTfD21v hI4/oAqm8PgzzkVJnyR71McPfhX/C6GgwBubjbP1SOkLgebCTyO6m4fq5e01muMN aJ8Tspkw1SL/HkIjqILiufualv+n0Jg= -----END CERTIFICATE-----Generated at Sun Jul 27 00:56:38 2025 by rpki-client