$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa File: 672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa (raw, json) Hash identifier: paWMmo8HXRG7I79GEYe5t6BCn12UFE+dNr+eYejiGp4= Subject key identifier: 4F:A5:CC:7E:DF:91:E5:EC:54:C8:82:DE:B0:1C:0B:8C:BF:6E:2F:B9 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE095D5E397325B2FD0E0F4 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 931 IP address blocks: 128.254.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:95:d5:e3:97:32:5b:2f:d0:e0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=f0a58242-e93c-4aa6-ac4a-f9bf69857adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1a:3e:ff:1b:08:90:60:33:96:d5:1d:43:cd: 30:41:34:7c:52:e9:6f:9f:b9:25:80:26:d1:c7:1c: 73:4f:d3:dd:af:88:1f:00:c0:ab:19:80:78:7f:33: 79:b6:30:6a:a7:4f:c6:d1:35:95:bd:b0:8e:c3:2f: 5f:08:6d:0c:89:2c:13:85:fd:a4:23:a6:a2:93:ae: ba:be:58:eb:50:ac:68:09:44:b2:76:5e:12:84:ba: db:ce:fd:94:c4:a1:f3:36:72:3a:83:bd:60:6d:0f: af:d5:7a:38:b0:3a:29:41:35:70:53:a8:c9:44:bf: e4:d8:7c:4d:60:a2:46:2b:1f:49:89:74:90:3f:2a: 25:21:a2:d5:b7:bd:b5:db:f3:c3:0b:70:83:f9:75: c4:61:dc:64:a3:3a:ce:b6:79:d2:7f:92:e2:fa:85: 44:d9:a5:d3:bb:a3:c9:10:19:0f:66:27:eb:da:4b: 9e:34:a1:f2:88:48:73:65:6d:54:f7:3c:aa:ae:76: 01:51:92:c7:da:87:81:73:47:ab:58:7b:77:de:36: e5:06:0a:0b:97:b8:83:24:2f:88:5d:ec:d1:9d:ae: a9:3a:c0:05:8b:43:a7:5a:13:46:fb:f6:9c:25:ed: 0c:88:76:11:63:ba:0d:3c:d8:13:f5:02:49:58:f1: 4e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A5:CC:7E:DF:91:E5:EC:54:C8:82:DE:B0:1C:0B:8C:BF:6E:2F:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:36:49:64:a9:54:18:66:58:79:ee:75:31:af:5e:47:ea:ad: 4b:a2:f7:28:e1:80:18:25:a3:2e:d6:97:7b:63:40:a6:ed:97: 94:e7:7e:a3:0b:e0:29:14:09:93:84:45:de:1c:b4:aa:62:48: ee:d4:0b:bf:85:12:97:3b:b7:61:10:6d:0c:d9:bb:72:18:b5: 55:7f:dc:a0:a4:fa:f3:45:71:fc:dc:18:30:43:59:6b:28:0a: f0:23:3d:25:29:15:eb:b0:9f:d2:38:c4:4c:5a:7f:a0:ad:65: 31:1b:fe:a5:4f:f0:bd:f1:51:db:db:c1:ff:a6:90:cd:24:6d: f2:99:03:08:23:8f:10:f3:1b:60:9d:2a:33:44:bf:39:d5:09: ee:7e:96:de:93:5c:46:83:75:b6:99:ca:22:e2:58:45:f3:f3: 29:44:da:fa:62:40:97:96:94:e4:84:2a:bc:2b:87:ef:5e:4f: 02:bb:2e:bc:dd:5b:b7:e8:64:e5:6b:0d:cc:f5:d6:23:0e:c2: 40:40:1f:c6:38:75:50:87:4d:12:5e:71:98:d6:cb:f7:ee:bf: 45:00:3c:4c:dd:c2:80:b9:1d:31:6a:c0:e5:59:a7:9e:b9:cd: d4:a9:56:ad:27:0e:2e:c9:cd:85:76:22:a4:bb:a7:71:93:f7: bb:90:f1:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JXV45cyWy/Q4PQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk ZjBhNTgyNDItZTkzYy00YWE2LWFjNGEtZjliZjY5ODU3YWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ro+/xsIkGAzltUdQ80wQTR8Uulvn7klgCbR xxxzT9Pdr4gfAMCrGYB4fzN5tjBqp0/G0TWVvbCOwy9fCG0MiSwThf2kI6aik666 vljrUKxoCUSydl4ShLrbzv2UxKHzNnI6g71gbQ+v1Xo4sDopQTVwU6jJRL/k2HxN YKJGKx9JiXSQPyolIaLVt7212/PDC3CD+XXEYdxkozrOtnnSf5Li+oVE2aXTu6PJ EBkPZifr2kueNKHyiEhzZW1U9zyqrnYBUZLH2oeBc0erWHt33jblBgoLl7iDJC+I XezRna6pOsAFi0OnWhNG+/acJe0MiHYRY7oNPNgT9QJJWPFO+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+lzH7fkeXsVMiC3rAcC4y/bi+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjcyMTk0YzItNGFhMS0z Yzg0LWE5ZDgtYjhlODk1NjZmM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH42SWSpVBhmWHnudTGvXkfqrUui9yjhgBgloy7Wl3tjQKbtl5TnfqML 4CkUCZOERd4ctKpiSO7UC7+FEpc7t2EQbQzZu3IYtVV/3KCk+vNFcfzcGDBDWWso CvAjPSUpFeuwn9I4xExaf6CtZTEb/qVP8L3xUdvbwf+mkM0kbfKZAwgjjxDzG2Cd KjNEvznVCe5+lt6TXEaDdbaZyiLiWEXz8ylE2vpiQJeWlOSEKrwrh+9eTwK7Lrzd W7foZOVrDcz11iMOwkBAH8Y4dVCHTRJecZjWy/fuv0UAPEzdwoC5HTFqwOVZp565 zdSpVq0nDi7JzYV2IqS7p3GT97uQ8Zc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:25 2025 by rpki-client