$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd5b5c66-b7d1-3d13-b467-0ee05d2e13a7.roa File: fd5b5c66-b7d1-3d13-b467-0ee05d2e13a7.roa (raw, json) Hash identifier: qIHZIgJ/kQoF9VoEPYmAaztcJeTYOPtsfe1wovTZoF0= Subject key identifier: 09:FD:E5:D6:B4:8A:C2:AF:7E:82:3A:32:B3:BE:07:09:9B:4F:9B:64 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF07BB73AE9E64C4D670280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd5b5c66-b7d1-3d13-b467-0ee05d2e13a7.roa Signing time: Thu 24 Jul 2025 12:38:50 +0000 ROA not before: Thu 24 Jul 2025 12:38:50 +0000 ROA not after: Wed 22 Oct 2025 12:38:50 +0000 asID: 396681 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:7b:b7:3a:e9:e6:4c:4d:67:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:50 2025 GMT Not After : Oct 22 12:38:50 2025 GMT Subject: CN=8134f73c-74d1-4d1a-a4b9-65f263158c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7c:58:15:54:ef:3f:38:65:c5:ee:4a:1c:36: 95:70:a7:7d:09:a2:ae:e0:3e:be:40:f4:8a:37:a0: 9f:c8:8d:b3:c9:e7:6d:d5:56:a4:f3:9e:86:e4:a0: 24:4c:86:ec:1a:4a:1f:8d:23:10:b6:67:ab:f3:78: 96:14:b7:6b:c6:2f:b4:98:ce:c0:43:44:da:de:3e: 39:eb:66:91:bc:b0:39:7b:ae:36:f5:a0:e0:02:0d: 50:08:7a:0c:7b:b3:be:ae:8a:9b:05:52:b1:7c:4e: 35:92:03:57:89:8b:ba:ed:4e:62:72:69:72:d2:0a: 42:17:0c:55:eb:9f:c0:dd:01:f5:9e:bf:2b:cc:75: c7:10:82:f8:4a:e4:e2:c9:4b:e4:2f:c7:11:77:7a: e6:6e:6e:99:91:52:98:a8:29:a0:27:32:dd:3a:6e: fa:ea:2a:6b:14:2e:85:82:e9:cd:fc:bf:39:3b:21: 22:dd:f2:50:bf:6e:7e:4e:e3:b5:7c:3f:f0:8d:1c: f1:e8:7d:79:99:fd:9f:27:09:d8:f4:07:dc:9a:0a: cc:0d:ce:d8:db:5e:dd:71:6f:c8:77:54:f1:68:d2: fb:16:0a:38:e8:0b:d5:66:8c:4a:bc:f0:12:1c:b9: ef:12:42:cf:a5:7b:6f:3c:98:50:98:d7:16:02:70: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FD:E5:D6:B4:8A:C2:AF:7E:82:3A:32:B3:BE:07:09:9B:4F:9B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd5b5c66-b7d1-3d13-b467-0ee05d2e13a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d9:c1:96:41:cd:57:0e:8c:21:be:c9:24:b3:fe:bd:22:07: 54:3f:b3:7a:a4:7c:8a:08:4d:30:47:e7:7d:d7:04:3e:37:03: e7:1e:cd:c1:b2:7a:e5:c2:29:99:19:33:26:be:91:34:ac:8b: 5f:0e:cc:ea:3e:8b:51:bd:43:6e:cb:65:d2:9a:01:c6:f2:20: 79:0c:6f:df:63:5c:a9:8e:51:c6:3b:6b:4d:42:b1:50:83:75: 70:4b:9c:0a:29:d1:3f:7f:69:77:8e:7e:36:d4:c6:7d:4e:76: 6b:62:3f:7c:1f:b0:fd:62:cc:c5:ed:63:e0:26:0f:73:13:20: ad:4c:2d:c5:68:d4:4f:42:82:cd:de:79:b1:10:02:63:40:53: 96:4d:96:de:3f:fc:df:f1:ec:d0:84:c3:b6:44:10:ca:0c:53: 2c:89:c0:bd:1a:26:9f:02:1c:15:52:8b:98:71:0e:07:f1:cf: f0:da:bc:59:7d:8a:31:fc:40:08:83:c9:17:73:be:2b:bf:a4: a0:9e:b7:91:6b:2e:d9:89:d9:ee:c9:11:1b:da:e3:83:27:03: c6:bf:f9:5f:2b:50:b7:dc:eb:8a:7e:79:a4:44:18:0f:85:e3: f5:77:3e:c2:58:e6:29:9b:9d:ed:f1:fd:9e:da:5b:b5:0d:05: 45:91:d1:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8Hu3OunmTE1nAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MFoXDTI1MTAyMjEyMzg1MFowLzEtMCsGA1UEAxMk ODEzNGY3M2MtNzRkMS00ZDFhLWE0YjktNjVmMjYzMTU4YzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nxYFVTvPzhlxe5KHDaVcKd9CaKu4D6+QPSK N6CfyI2zyedt1Vak856G5KAkTIbsGkofjSMQtmer83iWFLdrxi+0mM7AQ0Ta3j45 62aRvLA5e6429aDgAg1QCHoMe7O+roqbBVKxfE41kgNXiYu67U5icmly0gpCFwxV 65/A3QH1nr8rzHXHEIL4SuTiyUvkL8cRd3rmbm6ZkVKYqCmgJzLdOm766iprFC6F gunN/L85OyEi3fJQv25+TuO1fD/wjRzx6H15mf2fJwnY9AfcmgrMDc7Y217dcW/I d1TxaNL7Fgo46AvVZoxKvPASHLnvEkLPpXtvPJhQmNcWAnBh7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn95da0isKvfoI6MrO+BwmbT5tkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmQ1YjVjNjYtYjdkMS0z ZDEzLWI0NjctMGVlMDVkMmUxM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfZwZZBzVcOjCG+ySSz/r0iB1Q/s3qkfIoITTBH533XBD43A+cezcGy euXCKZkZMya+kTSsi18OzOo+i1G9Q27LZdKaAcbyIHkMb99jXKmOUcY7a01CsVCD dXBLnAop0T9/aXeOfjbUxn1OdmtiP3wfsP1izMXtY+AmD3MTIK1MLcVo1E9Cgs3e ebEQAmNAU5ZNlt4//N/x7NCEw7ZEEMoMUyyJwL0aJp8CHBVSi5hxDgfxz/DavFl9 ijH8QAiDyRdzviu/pKCet5FrLtmJ2e7JERva44MnA8a/+V8rULfc64p+eaREGA+F 4/V3PsJY5imbne3x/Z7aW7UNBUWR0fY= -----END CERTIFICATE-----Generated at Sat Jul 26 11:12:33 2025 by rpki-client