$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9961b94-f121-385b-a8e1-333656f015d0.roa File: f9961b94-f121-385b-a8e1-333656f015d0.roa (raw, json) Hash identifier: U/feITEVNrMdfwUImbJhrtQRLxSKO2x3MEzv9DldHZw= Subject key identifier: 85:2E:BB:33:07:3E:58:6D:90:75:C0:23:10:ED:AC:BF:36:17:2D:E8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF08AE9E46660CF922DD140 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9961b94-f121-385b-a8e1-333656f015d0.roa Signing time: Thu 24 Jul 2025 12:38:57 +0000 ROA not before: Thu 24 Jul 2025 12:38:57 +0000 ROA not after: Wed 22 Oct 2025 12:38:57 +0000 asID: 396642 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:8a:e9:e4:66:60:cf:92:2d:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:57 2025 GMT Not After : Oct 22 12:38:57 2025 GMT Subject: CN=c90d2c9e-f5cc-4b6c-96fe-88fd95226a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:89:26:de:52:11:5a:21:16:00:5b:6a:3e:87: d0:90:e5:fe:a9:f5:7a:26:fc:93:3f:07:69:6d:19: 65:5e:c1:1e:62:3c:91:90:69:bd:ee:4a:82:69:0f: a0:eb:5c:f7:de:8d:a9:29:f6:ca:19:1c:a4:4b:81: 15:59:63:75:d4:66:95:7b:49:19:04:7e:21:54:df: b1:ad:e9:fd:97:be:7a:84:18:33:3c:66:de:58:e2: 28:bc:e4:55:df:ce:09:73:b8:20:d3:74:89:3c:9d: 28:d1:81:3b:a4:15:88:06:a1:7a:dd:5c:8e:f5:92: c8:89:63:28:b6:0d:bd:a0:f8:c0:a9:5e:d7:19:4e: d5:3e:ba:5e:53:99:14:7a:b2:00:d8:e7:03:07:97: cf:b6:dc:71:af:ae:d3:b6:65:24:70:e8:b5:f0:fc: a1:c5:cd:f1:34:be:6a:0f:ce:28:9a:a7:01:0b:83: f5:b7:7a:c4:e9:62:11:3c:2a:26:9c:52:72:d7:e5: 6b:e6:dc:f3:aa:7f:88:f6:2b:e7:dd:47:91:ec:18: 3c:bc:e5:88:9f:26:d6:f8:6c:25:40:74:d1:65:22: 31:bf:08:f2:29:1d:e9:d6:78:99:ee:43:e1:56:37: d5:11:fb:ca:83:4b:34:68:34:81:79:b9:f5:96:20: a9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2E:BB:33:07:3E:58:6D:90:75:C0:23:10:ED:AC:BF:36:17:2D:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9961b94-f121-385b-a8e1-333656f015d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d1:0c:b3:06:8f:51:43:38:b4:46:b9:0b:65:5f:93:24:01: 60:24:79:b1:90:7f:d3:f4:81:a2:9b:b2:c5:c2:cd:9f:af:a5: f6:2c:b5:22:f7:fd:10:c4:fd:bd:0e:2b:92:91:39:f5:17:8a: 67:0a:7d:e5:e6:5a:13:9e:ac:76:72:56:66:83:b1:e4:85:4a: 26:29:ee:9f:70:39:53:c6:15:b1:ca:b0:78:b9:2c:d4:94:c3: fd:36:93:08:86:aa:24:64:d5:70:46:c9:6f:a2:98:94:95:0f: 11:00:11:e3:14:81:3b:0b:a8:78:4c:45:02:8f:ef:d8:1b:11: e4:5c:82:2e:f9:88:c8:99:3c:b8:50:c4:6a:b7:d3:34:50:c6: 8a:84:76:08:86:2f:1a:8e:52:cb:63:57:25:91:4a:8e:ce:13: af:b5:88:98:81:a4:80:d8:df:e1:d7:71:48:a4:38:07:25:9d: d1:47:d5:8a:b4:76:40:28:3a:a9:c4:dd:ac:95:2b:43:a5:46: a5:fa:d7:e6:58:c6:d5:a2:77:0e:ad:a0:0a:fb:49:22:0c:44: 5f:74:76:90:54:80:c4:e0:32:81:a7:b3:b4:50:e9:72:63:e8: a0:76:17:d1:6a:1f:46:8e:2c:35:e8:79:52:b0:78:d2:d3:43: fd:c5:69:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8Irp5GZgz5It0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1N1oXDTI1MTAyMjEyMzg1N1owLzEtMCsGA1UEAxMk YzkwZDJjOWUtZjVjYy00YjZjLTk2ZmUtODhmZDk1MjI2YTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ikm3lIRWiEWAFtqPofQkOX+qfV6JvyTPwdp bRllXsEeYjyRkGm97kqCaQ+g61z33o2pKfbKGRykS4EVWWN11GaVe0kZBH4hVN+x ren9l756hBgzPGbeWOIovORV384Jc7gg03SJPJ0o0YE7pBWIBqF63VyO9ZLIiWMo tg29oPjAqV7XGU7VPrpeU5kUerIA2OcDB5fPttxxr67TtmUkcOi18Pyhxc3xNL5q D84omqcBC4P1t3rE6WIRPComnFJy1+Vr5tzzqn+I9ivn3UeR7Bg8vOWInybW+Gwl QHTRZSIxvwjyKR3p1niZ7kPhVjfVEfvKg0s0aDSBebn1liCpzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUuuzMHPlhtkHXAIxDtrL82Fy3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjk5NjFiOTQtZjEyMS0z ODViLWE4ZTEtMzMzNjU2ZjAxNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHRDLMGj1FDOLRGuQtlX5MkAWAkebGQf9P0gaKbssXCzZ+vpfYstSL3 /RDE/b0OK5KROfUXimcKfeXmWhOerHZyVmaDseSFSiYp7p9wOVPGFbHKsHi5LNSU w/02kwiGqiRk1XBGyW+imJSVDxEAEeMUgTsLqHhMRQKP79gbEeRcgi75iMiZPLhQ xGq30zRQxoqEdgiGLxqOUstjVyWRSo7OE6+1iJiBpIDY3+HXcUikOAclndFH1Yq0 dkAoOqnE3ayVK0OlRqX61+ZYxtWidw6toAr7SSIMRF90dpBUgMTgMoGns7RQ6XJj 6KB2F9FqH0aOLDXoeVKweNLTQ/3Fafo= -----END CERTIFICATE-----Generated at Sun Jul 27 12:05:29 2025 by rpki-client