$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc6a7f63-0c2c-3b4d-b0e8-9aa237c56d3d.roa File: dc6a7f63-0c2c-3b4d-b0e8-9aa237c56d3d.roa (raw, json) Hash identifier: nBkyE1DCzPB4D/jTv89jdekwPtU6OTZr39G52ghEngQ= Subject key identifier: AB:AF:07:2C:96:D5:A8:3E:6C:72:79:38:AE:53:7B:14:26:BA:B0:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF07B5B1911C145248D2280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc6a7f63-0c2c-3b4d-b0e8-9aa237c56d3d.roa Signing time: Thu 24 Jul 2025 12:38:50 +0000 ROA not before: Thu 24 Jul 2025 12:38:50 +0000 ROA not after: Wed 22 Oct 2025 12:38:50 +0000 asID: 396739 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:7b:5b:19:11:c1:45:24:8d:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:50 2025 GMT Not After : Oct 22 12:38:50 2025 GMT Subject: CN=436cace0-13d4-40b6-9de1-785fa29b53e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3a:cc:fb:a9:a5:63:c2:aa:96:17:c9:c0:fa: 45:5b:cc:2f:15:33:bc:6d:1d:3d:0c:a6:83:0c:fa: ce:e1:ed:e0:9b:dc:10:81:ff:69:61:08:a5:0a:17: 78:5c:5b:5d:d9:f6:a7:95:8f:9c:bd:0c:25:aa:d3: ca:c0:7c:ef:31:a2:5d:b8:68:8a:2a:d8:b4:ba:f5: 48:14:47:53:64:06:90:cf:7d:d0:0a:70:56:63:b3: 2c:48:dc:ef:93:03:1b:b7:3d:76:4e:96:33:1a:3d: a5:9f:a6:28:eb:3b:1a:0f:60:46:6f:3c:52:d2:23: 41:8d:96:4f:f1:1c:3f:ea:5b:d0:2b:cb:0b:a8:0c: 17:09:e5:f5:a6:55:6c:ed:d2:fc:3f:d2:fa:34:e7: e9:53:c3:61:f9:b4:88:cf:15:cb:f6:b3:30:6a:1c: 36:10:4f:6d:7b:f0:bd:9e:b8:6b:43:61:48:fd:23: 11:76:8d:20:57:84:8b:7a:91:48:14:f7:e8:17:a7: 4f:53:2a:e1:64:b5:9b:88:22:f9:c6:a3:31:15:a9: 22:ad:4a:f4:c7:6d:dd:fa:c3:5f:50:84:50:47:4d: 64:da:65:b1:09:12:79:f5:aa:70:36:38:b4:4c:26: fb:38:8c:7e:de:16:f6:88:89:26:a9:5a:8d:18:b7: c6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AF:07:2C:96:D5:A8:3E:6C:72:79:38:AE:53:7B:14:26:BA:B0:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc6a7f63-0c2c-3b4d-b0e8-9aa237c56d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:77:97:b4:01:b1:a7:4d:6b:c5:bc:7e:cb:50:ad:db:c3:f4: 0b:b4:6f:bb:13:9b:a2:4b:43:5b:75:2a:b0:d3:df:2c:88:28: ae:21:46:b3:4e:0b:52:3e:51:27:ac:9e:d7:fd:a0:5a:04:6c: c8:b4:4a:48:02:5b:25:22:4c:f6:0e:f5:e4:cc:7d:d7:e1:c9: d9:b6:4e:f5:dd:78:dd:c3:64:e1:c1:c6:13:92:37:ff:6f:19: 4d:c6:35:98:cf:3f:17:fd:c7:7e:72:6d:f8:09:81:b4:fa:8f: fb:af:b8:3d:8b:31:68:a3:f6:b2:8f:02:bc:53:19:e8:0f:49: 7f:42:ef:d8:f5:79:49:9d:4c:27:ee:bc:83:b3:91:7d:c4:df: 97:33:4f:0d:c2:88:f5:94:a3:7c:88:57:fc:ff:b4:4e:cf:50: 00:94:45:69:93:09:8f:bc:a2:d9:b0:a0:07:2f:62:0f:5f:18: 81:dd:2c:c4:82:ce:26:aa:a9:00:64:e3:e4:b1:d5:c6:2e:cd: 83:c7:30:20:c2:45:4e:16:e7:41:c8:0d:ef:9b:93:88:92:e8: 7d:9c:74:b9:f0:b6:9a:27:4f:b9:9f:a8:93:b2:65:37:cf:29: 42:40:1e:4e:18:d3:5a:12:00:5f:8c:43:3c:78:97:8b:4e:54: 51:72:28:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8HtbGRHBRSSNIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MFoXDTI1MTAyMjEyMzg1MFowLzEtMCsGA1UEAxMk NDM2Y2FjZTAtMTNkNC00MGI2LTlkZTEtNzg1ZmEyOWI1M2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjrM+6mlY8KqlhfJwPpFW8wvFTO8bR09DKaD DPrO4e3gm9wQgf9pYQilChd4XFtd2fanlY+cvQwlqtPKwHzvMaJduGiKKti0uvVI FEdTZAaQz33QCnBWY7MsSNzvkwMbtz12TpYzGj2ln6Yo6zsaD2BGbzxS0iNBjZZP 8Rw/6lvQK8sLqAwXCeX1plVs7dL8P9L6NOfpU8Nh+bSIzxXL9rMwahw2EE9te/C9 nrhrQ2FI/SMRdo0gV4SLepFIFPfoF6dPUyrhZLWbiCL5xqMxFakirUr0x23d+sNf UIRQR01k2mWxCRJ59apwNji0TCb7OIx+3hb2iIkmqVqNGLfGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuvByyW1ag+bHJ5OK5TexQmurDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGM2YTdmNjMtMGMyYy0z YjRkLWIwZTgtOWFhMjM3YzU2ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK13l7QBsadNa8W8fstQrdvD9Au0b7sTm6JLQ1t1KrDT3yyIKK4hRrNO C1I+USesntf9oFoEbMi0SkgCWyUiTPYO9eTMfdfhydm2TvXdeN3DZOHBxhOSN/9v GU3GNZjPPxf9x35ybfgJgbT6j/uvuD2LMWij9rKPArxTGegPSX9C79j1eUmdTCfu vIOzkX3E35czTw3CiPWUo3yIV/z/tE7PUACURWmTCY+8otmwoAcvYg9fGIHdLMSC ziaqqQBk4+Sx1cYuzYPHMCDCRU4W50HIDe+bk4iS6H2cdLnwtponT7mfqJOyZTfP KUJAHk4Y01oSAF+MQzx4l4tOVFFyKP0= -----END CERTIFICATE-----Generated at Sat Jul 26 00:01:58 2025 by rpki-client