$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/75b7045f-c36c-37c2-b78d-396dac2abcf6.roa File: 75b7045f-c36c-37c2-b78d-396dac2abcf6.roa (raw, json) Hash identifier: DBPiuI+hVnM/hGJ8ClJej+EWt6mIOJt3DTfWDWLBXpg= Subject key identifier: CD:B4:9B:11:2B:CA:9E:AD:86:0E:9D:C8:3C:0E:20:30:31:11:78:E1 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE095FB556D7AAC98120680 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/75b7045f-c36c-37c2-b78d-396dac2abcf6.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 931 IP address blocks: 128.254.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:95:fb:55:6d:7a:ac:98:12:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=bf9587a7-894e-4516-af7c-820123ccb058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:29:98:44:c5:45:48:42:d7:46:41:92:29:56: 0e:78:37:7f:1c:92:11:10:7a:91:5c:53:d1:90:01: 4a:27:aa:e9:6c:87:c6:a1:4f:4e:ec:14:07:ca:68: f0:09:66:60:3b:4a:dd:d8:dd:80:9a:c9:7c:e5:c6: 98:79:a5:e8:3d:2a:40:83:07:c1:e4:fc:76:80:99: a9:27:d2:c6:83:7f:97:b7:db:02:83:16:3c:5e:47: 0c:a8:7a:a2:66:39:5b:91:7d:08:ea:0a:e3:7f:b8: 83:86:aa:e0:96:62:8e:8b:15:1a:ea:c0:d9:f6:e2: b0:e6:e1:75:e4:c6:d5:b5:f6:4a:b9:64:1d:28:52: 30:59:9b:35:54:94:0e:56:0e:64:b1:cd:c5:73:ca: f5:24:f1:06:50:5d:7f:66:57:2a:21:1a:d4:3d:0a: f7:6b:d4:ed:e1:2d:af:9c:92:e6:c9:c4:dc:2a:49: bb:37:da:43:16:7d:74:3a:a2:cd:cd:75:e0:1a:d3: 35:9f:fb:ac:98:99:52:e7:8d:cf:66:da:b9:e6:d4: ac:05:ec:6a:ab:31:c3:aa:7c:31:f0:87:f6:08:e9: 87:98:1a:9f:71:90:ef:c5:ec:7e:a9:d5:31:5e:4b: e5:a4:7e:52:ef:9a:44:5b:7f:b9:e4:9e:61:8a:8b: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B4:9B:11:2B:CA:9E:AD:86:0E:9D:C8:3C:0E:20:30:31:11:78:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/75b7045f-c36c-37c2-b78d-396dac2abcf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:48:31:00:81:30:8f:c2:76:26:cf:53:aa:ad:b0:b2:29:fb: a7:0c:d4:b4:07:49:a5:75:30:46:e8:f3:5c:a4:ba:5e:b2:10: 0d:95:bc:23:22:fb:09:7a:16:91:a5:68:ca:63:bc:c5:17:1d: ae:c1:20:e9:d6:a0:33:0c:e7:58:a4:79:19:2b:50:38:7b:d7: 08:6c:56:d1:8f:7e:95:37:82:f6:1b:b9:41:78:db:93:00:a1: a7:75:52:a7:6d:71:e7:c3:c8:e2:f8:8b:d7:ce:81:91:c7:a8: e9:f4:ef:3f:fd:00:34:59:71:47:e9:77:1a:19:3a:ad:55:79: 81:38:fa:c4:27:fd:ac:ec:f3:74:65:be:69:25:e0:e1:0e:ec: ca:98:49:60:f3:31:fe:4f:c9:89:b5:62:76:68:b3:4b:d1:65: 9b:fd:8d:e8:05:cc:04:5f:be:e2:9a:c3:99:26:b7:f0:04:cc: d9:6d:8f:a6:1b:59:8e:20:67:d7:7f:f6:96:bc:58:a0:14:3f: 81:3f:1b:61:78:69:a5:c2:53:bd:b6:be:04:25:63:c7:f6:33: 06:91:44:23:50:77:a9:45:fd:36:28:69:b7:ac:e4:39:2b:34: 36:d2:6e:f0:cd:8d:b6:be:ad:ae:5a:e4:d2:2c:6d:ef:3d:57: c2:91:d8:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JX7VW16rJgSBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk YmY5NTg3YTctODk0ZS00NTE2LWFmN2MtODIwMTIzY2NiMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjimYRMVFSELXRkGSKVYOeDd/HJIREHqRXFPR kAFKJ6rpbIfGoU9O7BQHymjwCWZgO0rd2N2Amsl85caYeaXoPSpAgwfB5Px2gJmp J9LGg3+Xt9sCgxY8XkcMqHqiZjlbkX0I6grjf7iDhqrglmKOixUa6sDZ9uKw5uF1 5MbVtfZKuWQdKFIwWZs1VJQOVg5ksc3Fc8r1JPEGUF1/ZlcqIRrUPQr3a9Tt4S2v nJLmycTcKkm7N9pDFn10OqLNzXXgGtM1n/usmJlS543PZtq55tSsBexqqzHDqnwx 8If2COmHmBqfcZDvxex+qdUxXkvlpH5S75pEW3+55J5hiotXLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM20mxEryp6thg6dyDwOIDAxEXjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNzViNzA0NWYtYzM2Yy0z N2MyLWI3OGQtMzk2ZGFjMmFiY2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdIMQCBMI/CdibPU6qtsLIp+6cM1LQHSaV1MEbo81ykul6yEA2VvCMi +wl6FpGlaMpjvMUXHa7BIOnWoDMM51ikeRkrUDh71whsVtGPfpU3gvYbuUF425MA oad1UqdtcefDyOL4i9fOgZHHqOn07z/9ADRZcUfpdxoZOq1VeYE4+sQn/azs83Rl vmkl4OEO7MqYSWDzMf5PyYm1YnZos0vRZZv9jegFzARfvuKaw5kmt/AEzNltj6Yb WY4gZ9d/9pa8WKAUP4E/G2F4aaXCU722vgQlY8f2MwaRRCNQd6lF/TYoabes5Dkr NDbSbvDNjba+ra5a5NIsbe89V8KR2KM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:46 2025 by rpki-client