$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5fb6ad4-deb1-3f80-91c3-6b5addfadbc6.roa File: f5fb6ad4-deb1-3f80-91c3-6b5addfadbc6.roa (raw, json) Hash identifier: dtwK2lfuad2MTJ0HP7zlgUCQf9NcIWCREQEkZu5FtJ8= Subject key identifier: DB:67:39:53:9A:05:6F:C5:0B:5D:40:4A:9A:2D:65:FC:EB:8E:45:54 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF081DD79574FBE735708D7 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5fb6ad4-deb1-3f80-91c3-6b5addfadbc6.roa Signing time: Thu 24 Jul 2025 12:38:53 +0000 ROA not before: Thu 24 Jul 2025 12:38:53 +0000 ROA not after: Wed 22 Oct 2025 12:38:53 +0000 asID: 396637 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:81:dd:79:57:4f:be:73:57:08:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:53 2025 GMT Not After : Oct 22 12:38:53 2025 GMT Subject: CN=1de90a82-75c0-4559-95e3-5db3faa8964b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:40:c5:16:21:b1:f9:82:18:2d:68:5b:7e:b4: 3e:53:8f:20:1f:ea:ce:4e:04:28:02:95:18:48:5f: 49:17:ab:74:de:46:34:8a:f4:e6:da:fd:cb:ad:3d: b1:14:2a:6a:8e:af:34:9c:38:90:70:b8:8f:97:2a: 01:d1:dc:e9:6a:d5:f3:83:b1:12:ae:3b:da:78:83: 96:8e:f2:04:45:83:ac:f9:8b:cf:84:6f:77:b7:53: 34:6d:54:33:d1:15:23:9d:40:68:ce:cc:76:9e:cb: e2:e6:52:82:77:f5:00:db:48:e1:03:d8:14:76:53: 4f:13:c9:f4:0d:48:f9:be:85:b7:cc:ff:ef:5e:f8: 2a:ab:65:00:09:02:a3:2b:a7:8a:a0:70:44:21:3e: 36:db:26:b4:35:56:77:0c:89:0c:f4:01:0a:b7:6e: b0:8a:fc:eb:c5:95:cb:f9:2f:c2:64:ae:27:01:2c: 35:48:c3:bf:5f:d7:8f:a8:6c:74:04:4e:4d:b1:58: 30:8c:ee:94:ad:31:8c:9e:de:55:23:16:f7:7a:cd: 1f:2a:67:4e:f7:65:62:af:30:ff:61:64:30:53:e2: 92:d7:25:a8:07:bf:7c:11:90:21:24:fd:bd:37:89: 05:1b:37:a4:53:a5:4b:75:46:87:16:7e:02:bb:68: a0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:67:39:53:9A:05:6F:C5:0B:5D:40:4A:9A:2D:65:FC:EB:8E:45:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5fb6ad4-deb1-3f80-91c3-6b5addfadbc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b1:47:c6:cb:ff:cc:9f:d8:cb:86:8e:2f:42:29:ee:25:c2: c0:38:25:d4:a4:a4:73:1c:70:e0:f0:7c:13:28:07:ce:87:71: 02:87:c0:51:85:9e:63:05:7c:b2:f9:74:dc:49:c4:68:38:d0: e4:28:d8:3d:a7:46:6d:81:ee:01:8f:53:82:78:7c:a5:27:68: c8:77:ab:4b:57:64:03:ce:23:86:d2:6a:5a:21:67:13:46:e0: 9f:ed:5c:b6:23:be:36:e8:d2:82:3f:93:c1:cd:79:f9:2e:46: f1:18:56:9e:f0:89:89:07:bd:1a:68:18:46:15:bf:61:b0:16: 4c:b4:cc:60:91:ec:c3:64:54:c9:c8:0e:10:f2:d3:98:48:5b: ae:c0:f9:94:bc:d6:e0:a6:76:59:6b:2b:5d:53:d7:45:4a:e5: 9d:52:9b:51:e2:1a:30:64:8d:51:a9:38:5a:72:86:c4:05:fd: 3b:fe:f0:ff:88:ec:07:6f:9b:b5:ed:f3:a6:60:ce:41:ed:60: 8c:b8:3d:a1:02:2d:a1:0f:4e:ec:f1:61:e8:45:89:ff:b1:ca: 77:4f:d0:e7:7f:88:51:da:2d:e5:dd:bd:f7:4f:84:3d:bc:1b: 51:2b:85:9e:1f:94:1a:64:48:9f:e1:6f:8f:a4:63:d4:4f:f6: fc:d7:b2:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IHdeVdPvnNXCNcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1M1oXDTI1MTAyMjEyMzg1M1owLzEtMCsGA1UEAxMk MWRlOTBhODItNzVjMC00NTU5LTk1ZTMtNWRiM2ZhYTg5NjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkDFFiGx+YIYLWhbfrQ+U48gH+rOTgQoApUY SF9JF6t03kY0ivTm2v3LrT2xFCpqjq80nDiQcLiPlyoB0dzpatXzg7ESrjvaeIOW jvIERYOs+YvPhG93t1M0bVQz0RUjnUBozsx2nsvi5lKCd/UA20jhA9gUdlNPE8n0 DUj5voW3zP/vXvgqq2UACQKjK6eKoHBEIT422ya0NVZ3DIkM9AEKt26wivzrxZXL +S/CZK4nASw1SMO/X9ePqGx0BE5NsVgwjO6UrTGMnt5VIxb3es0fKmdO92VirzD/ YWQwU+KS1yWoB798EZAhJP29N4kFGzekU6VLdUaHFn4Cu2igGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtnOVOaBW/FC11ASpotZfzrjkVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjVmYjZhZDQtZGViMS0z ZjgwLTkxYzMtNmI1YWRkZmFkYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOxR8bL/8yf2MuGji9CKe4lwsA4JdSkpHMccODwfBMoB86HcQKHwFGF nmMFfLL5dNxJxGg40OQo2D2nRm2B7gGPU4J4fKUnaMh3q0tXZAPOI4bSalohZxNG 4J/tXLYjvjbo0oI/k8HNefkuRvEYVp7wiYkHvRpoGEYVv2GwFky0zGCR7MNkVMnI DhDy05hIW67A+ZS81uCmdllrK11T10VK5Z1Sm1HiGjBkjVGpOFpyhsQF/Tv+8P+I 7Advm7Xt86ZgzkHtYIy4PaECLaEPTuzxYehFif+xyndP0Od/iFHaLeXdvfdPhD28 G1ErhZ4flBpkSJ/hb4+kY9RP9vzXsv8= -----END CERTIFICATE-----Generated at Sat Jul 26 11:36:22 2025 by rpki-client