$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/abe939e6-015c-3bda-92fa-f8264ac59be6.roa File: abe939e6-015c-3bda-92fa-f8264ac59be6.roa (raw, json) Hash identifier: oGcMsxh17sC9s6U6zMw3oR95c3clabsCP0CqyIYwI9k= Subject key identifier: F4:3F:1E:AB:F0:97:5C:D0:8A:2C:74:78:97:52:4A:D3:E7:2D:B7:6A Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE097B40F07046F90295B00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/abe939e6-015c-3bda-92fa-f8264ac59be6.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 128.254.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:97:b4:0f:07:04:6f:90:29:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=4f183e28-f8e3-4d43-9d33-c814dab57dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6d:8f:8b:19:3a:36:5d:6d:f5:93:35:a6:24: 0a:45:85:5f:b3:0a:8f:94:e8:17:6d:2c:72:16:4e: f6:32:50:52:4d:c7:57:a2:bd:5c:4b:b1:f2:b2:91: 21:0f:7a:13:64:06:ad:0a:51:b3:7e:6c:b1:4c:82: 58:55:84:87:ef:6d:70:c2:6a:c2:ba:99:b7:65:72: ee:0a:73:c4:5f:1c:dd:6b:da:ae:4b:8a:86:15:cb: 0f:fd:58:01:e5:5e:29:05:0f:28:19:ca:3f:90:24: 19:98:5a:f0:3b:15:9d:aa:1d:3e:2a:eb:6e:ba:fa: 7a:d7:1a:e5:ba:f3:e4:d8:d9:b4:3f:59:23:30:3b: b0:03:9e:24:53:7d:96:26:0d:7c:6d:58:40:60:d4: 0d:58:ba:b4:4c:e9:6a:67:c2:71:30:58:76:02:16: a0:66:4b:e3:89:1f:47:db:08:51:06:f9:09:d6:f2: cb:cb:5c:bf:6a:39:8a:7e:ad:0a:64:52:ba:48:64: 73:c8:1c:2f:09:d1:7c:f9:a8:cd:4c:af:30:bd:94: 4b:53:c8:94:a2:e0:8a:92:d6:50:e3:6b:a3:0a:07: 64:27:8a:ed:e0:99:18:30:ea:15:bf:79:96:37:d3: b1:fa:fe:4a:84:00:3c:be:61:b3:b8:3a:d6:ab:93: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3F:1E:AB:F0:97:5C:D0:8A:2C:74:78:97:52:4A:D3:E7:2D:B7:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/abe939e6-015c-3bda-92fa-f8264ac59be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:24:d8:1e:ae:37:b0:ec:d3:1a:0c:85:0d:81:cf:51:f3:32: 13:16:f3:41:d9:91:bd:a1:b5:2e:ff:4c:43:13:54:ed:3d:54: 62:1e:bb:05:19:9b:6a:ef:a4:74:26:6c:0a:ae:46:31:d9:8a: 0e:98:ba:21:00:fb:54:85:30:2a:78:24:8a:05:eb:aa:17:6e: 7b:2b:7b:8b:ba:30:73:ba:57:6c:13:e0:c9:03:06:78:ca:d3: 56:a0:95:2f:60:9d:81:f1:fd:a6:4b:79:f0:20:ea:6b:cd:db: 32:1a:48:13:38:de:b5:a0:af:13:48:35:54:3d:92:85:b5:00: 4c:c4:f2:a6:5a:da:a8:cf:64:cb:df:c4:97:7b:b2:22:b0:7a: d3:ba:8c:8a:ba:f6:9e:00:8e:9b:3b:32:6a:f8:5e:0a:58:11: fc:d3:43:91:80:27:8d:cb:88:7c:9c:bb:21:a6:ed:4c:4f:e8: 97:f2:26:3a:d1:01:19:32:21:aa:f9:57:43:11:b4:c0:a3:6e: 50:42:53:b9:90:7f:10:fa:19:8e:be:6b:7d:96:59:b9:9d:36: 3e:a3:19:4d:d6:8b:da:3c:dd:7e:a2:b9:a7:2c:69:d0:c9:8a: 1e:0b:d9:8e:f2:fd:67:28:bc:e6:3d:3e:59:9c:cc:9a:0a:c0: 7c:99:18:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4Je0DwcEb5ApWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk NGYxODNlMjgtZjhlMy00ZDQzLTlkMzMtYzgxNGRhYjU3ZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW2Pixk6Nl1t9ZM1piQKRYVfswqPlOgXbSxy Fk72MlBSTcdXor1cS7HyspEhD3oTZAatClGzfmyxTIJYVYSH721wwmrCupm3ZXLu CnPEXxzda9quS4qGFcsP/VgB5V4pBQ8oGco/kCQZmFrwOxWdqh0+Kutuuvp61xrl uvPk2Nm0P1kjMDuwA54kU32WJg18bVhAYNQNWLq0TOlqZ8JxMFh2AhagZkvjiR9H 2whRBvkJ1vLLy1y/ajmKfq0KZFK6SGRzyBwvCdF8+ajNTK8wvZRLU8iUouCKktZQ 42ujCgdkJ4rt4JkYMOoVv3mWN9Ox+v5KhAA8vmGzuDrWq5N6yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ/Hqvwl1zQiix0eJdSStPnLbdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYWJlOTM5ZTYtMDE1Yy0z YmRhLTkyZmEtZjgyNjRhYzU5YmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIk2B6uN7Ds0xoMhQ2Bz1HzMhMW80HZkb2htS7/TEMTVO09VGIeuwUZ m2rvpHQmbAquRjHZig6YuiEA+1SFMCp4JIoF66oXbnsre4u6MHO6V2wT4MkDBnjK 01aglS9gnYHx/aZLefAg6mvN2zIaSBM43rWgrxNINVQ9koW1AEzE8qZa2qjPZMvf xJd7siKwetO6jIq69p4Ajps7Mmr4XgpYEfzTQ5GAJ43LiHycuyGm7UxP6JfyJjrR ARkyIar5V0MRtMCjblBCU7mQfxD6GY6+a32WWbmdNj6jGU3Wi9o83X6iuacsadDJ ih4L2Y7y/WcovOY9PlmczJoKwHyZGDU= -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:17 2025 by rpki-client