$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa File: 68c427e0-a575-3b64-98f5-5f2c2b108936.roa (raw, json) Hash identifier: q7sLWxBAcyEapApnSYRUdkQ0lBKF/Er2x6QhDOm2EVM= Subject key identifier: B1:46:F7:67:C4:55:58:00:2E:88:66:6D:DC:A7:40:78:A2:1F:5E:67 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE095C5A3DF6A02A0E8EB60 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 931 IP address blocks: 128.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:95:c5:a3:df:6a:02:a0:e8:eb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=28cdc4ea-b1f3-426f-b994-9dab7577f7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:47:7d:91:f5:5b:6f:39:f5:7c:a1:09:84: 10:60:d5:fe:05:67:1d:ba:5b:bf:3c:35:39:28:64: 9f:44:09:73:ff:a4:98:ac:28:8c:8f:06:49:1a:61: 4c:eb:af:ad:2a:39:8c:5f:f1:87:87:1f:8e:0b:ea: 41:8f:b6:b2:20:c2:de:7d:9e:b7:44:f2:01:ce:16: d5:39:b7:07:85:1e:dd:f7:86:18:a4:c9:c1:61:4f: 4b:8e:d5:49:5b:38:cf:98:a5:2c:83:0c:ac:8b:74: 30:68:a1:73:d9:c4:00:25:af:f5:2e:04:27:6a:e7: 8e:0a:cb:f5:38:f3:9a:7c:f6:4a:94:f8:9b:db:e4: d4:3d:27:42:7b:86:ef:5a:94:75:84:a0:5d:70:93: 51:a7:3c:1b:c5:95:7f:46:7b:77:87:67:2e:ad:be: 04:24:1b:b2:cf:1d:7a:51:ad:74:92:37:39:9d:a8: ea:cb:79:0e:cd:1a:af:5b:f6:10:fb:71:15:20:88: 70:c3:ad:db:ab:05:4c:9c:ef:c8:1f:46:4a:28:2a: 6f:d1:9a:2c:a7:88:c3:78:df:13:e6:1c:89:11:9d: 95:00:15:5f:5c:92:55:3c:c2:4a:22:b3:78:ee:3d: 50:ad:5d:49:8d:70:aa:1b:87:4c:31:af:f6:63:53: 01:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:46:F7:67:C4:55:58:00:2E:88:66:6D:DC:A7:40:78:A2:1F:5E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:93:91:01:dc:11:f7:c7:7d:87:b4:ba:29:84:50:aa:67:20: e9:ed:eb:5a:cd:91:d0:c5:ca:d4:af:81:04:49:49:bc:dc:cf: 8b:28:cf:8d:d2:8c:d1:c6:3a:0e:a9:d1:bb:51:1b:a4:6b:fa: 1e:f1:6e:3e:f3:14:0d:a5:2b:8c:ea:ca:2d:6d:f3:f1:22:29: df:fb:74:96:fb:bb:c4:30:8c:c2:75:df:56:59:6a:2d:20:79: 47:45:a0:94:72:bd:63:94:af:30:1c:98:37:1a:0d:51:64:6a: a7:7c:3f:d2:06:35:b3:b5:18:ad:e7:6d:5b:93:e7:11:8d:9a: 30:45:12:ea:b4:88:38:78:c1:52:ea:1c:02:b1:84:05:57:0e: 6c:cc:d6:2d:07:77:59:df:f4:d6:18:15:26:13:cc:63:3e:74: 5c:bf:70:70:27:26:e8:00:73:f9:dd:5b:e6:33:02:ae:ff:64: 27:ba:7a:9b:f8:ab:55:a1:83:4b:67:98:1f:2f:97:89:02:32: ad:6d:92:9a:a4:41:cd:91:a5:4c:ca:19:bf:12:2f:94:e4:48: ae:aa:89:72:be:21:92:a7:86:1b:1a:eb:7b:f6:c3:a0:aa:2d: 39:55:df:94:95:a7:b4:e0:4c:2b:b7:e8:c4:63:92:71:56:1e: a0:69:91:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JXFo99qAqDo62AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk MjhjZGM0ZWEtYjFmMy00MjZmLWI5OTQtOWRhYjc1NzdmN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc9HfZH1W2859XyhCYQQYNX+BWcdulu/PDU5 KGSfRAlz/6SYrCiMjwZJGmFM66+tKjmMX/GHhx+OC+pBj7ayIMLefZ63RPIBzhbV ObcHhR7d94YYpMnBYU9LjtVJWzjPmKUsgwysi3QwaKFz2cQAJa/1LgQnaueOCsv1 OPOafPZKlPib2+TUPSdCe4bvWpR1hKBdcJNRpzwbxZV/Rnt3h2curb4EJBuyzx16 Ua10kjc5najqy3kOzRqvW/YQ+3EVIIhww63bqwVMnO/IH0ZKKCpv0Zosp4jDeN8T 5hyJEZ2VABVfXJJVPMJKIrN47j1QrV1JjXCqG4dMMa/2Y1MB2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFG92fEVVgALohmbdynQHiiH15nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjhjNDI3ZTAtYTU3NS0z YjY0LTk4ZjUtNWYyYzJiMTA4OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2TkQHcEffHfYe0uimEUKpnIOnt61rNkdDFytSvgQRJSbzcz4soz43S jNHGOg6p0btRG6Rr+h7xbj7zFA2lK4zqyi1t8/EiKd/7dJb7u8QwjMJ131ZZai0g eUdFoJRyvWOUrzAcmDcaDVFkaqd8P9IGNbO1GK3nbVuT5xGNmjBFEuq0iDh4wVLq HAKxhAVXDmzM1i0Hd1nf9NYYFSYTzGM+dFy/cHAnJugAc/ndW+YzAq7/ZCe6epv4 q1Whg0tnmB8vl4kCMq1tkpqkQc2RpUzKGb8SL5TkSK6qiXK+IZKnhhsa63v2w6Cq LTlV35SVp7TgTCu36MRjknFWHqBpkRY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:26 2025 by rpki-client