$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/ac44b651-6e22-3ddf-9e0c-9adc285e0e18.roa File: ac44b651-6e22-3ddf-9e0c-9adc285e0e18.roa (raw, json) Hash identifier: mrfuyHT1j14zxA8nCitrHL3DmolDvB32+B8CkugtM5k= Subject key identifier: 02:40:B3:82:19:E7:05:3B:98:4E:FB:A2:FA:54:99:A5:AE:1D:EA:57 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE095E856B3542637CAED40 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/ac44b651-6e22-3ddf-9e0c-9adc285e0e18.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 931 IP address blocks: 128.254.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:95:e8:56:b3:54:26:37:ca:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=7ac4e648-9559-4fdd-ae5d-e6a48e18977c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:ef:0f:cc:06:10:26:d2:8d:3e:17:5f:66: 23:ec:69:75:28:e9:6e:d9:14:98:0a:8f:c3:08:c1: 3b:7a:d9:ee:1d:7a:91:c7:52:60:8e:57:93:98:27: 3c:51:d6:62:66:d3:bd:f0:b1:51:f2:d2:c1:69:09: c2:be:96:14:b1:73:c0:44:5e:32:ea:79:ff:4a:3d: c8:52:0f:44:4e:25:82:1f:e6:a1:34:8a:4b:ba:71: b6:d4:94:9c:d5:5e:cc:6d:28:5d:01:e3:ac:bc:c4: ef:14:d3:22:85:75:e2:7c:72:b8:b3:fd:14:4f:5a: 76:4e:ab:04:ca:be:ce:04:67:12:ca:70:3c:61:6a: 28:34:a6:47:52:0c:f5:8c:fb:dc:f8:12:da:d6:52: d5:df:56:0d:f4:2d:71:5a:d3:5a:8e:57:28:26:ad: f2:12:93:98:17:73:c3:b4:4b:20:de:12:f1:56:2c: f5:c1:76:01:7a:03:9d:5e:38:38:8e:1c:1f:d0:9e: 14:a7:b1:ef:62:ab:53:0e:22:9c:b4:ae:ae:b0:6b: 7c:c8:2c:bc:3e:17:c8:71:cc:a7:a9:6e:9f:ec:56: 30:dc:db:90:57:b4:8c:1a:f0:db:c5:fc:dd:17:23: 8a:e2:77:be:db:19:95:f1:86:e8:af:65:7c:00:5d: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:40:B3:82:19:E7:05:3B:98:4E:FB:A2:FA:54:99:A5:AE:1D:EA:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/ac44b651-6e22-3ddf-9e0c-9adc285e0e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:6e:41:00:53:b3:4e:05:a6:c8:1f:81:c2:33:eb:98:4a:bf: bd:9e:26:24:36:e3:79:d4:b2:63:15:91:be:45:2d:de:ea:61: e2:47:f3:79:eb:c9:f4:87:d2:5f:1e:db:6a:44:fb:20:0d:19: 9a:e3:c4:a6:74:f2:60:b9:32:8d:05:ed:3e:43:72:1b:c1:01: 28:4c:a8:8a:fb:17:4f:d2:cf:da:c7:00:b7:86:93:7e:f5:ce: 10:4b:3b:29:92:19:fa:cf:8f:3d:85:9f:88:8f:73:64:14:3f: 00:7d:8d:1b:6a:56:b4:c1:53:ba:66:b6:dd:d8:11:db:f9:35: 47:93:1c:a9:5d:db:be:fc:e3:e0:ee:a2:ae:9f:51:5f:6c:27: 97:e2:93:71:52:86:65:3d:5c:75:52:24:f6:be:b1:b9:61:50: c5:b2:bd:35:8e:d9:ef:8a:14:73:55:79:4b:c9:47:c9:a6:e4: f9:75:ef:c9:e2:63:cd:1a:85:1e:26:83:17:2b:46:8d:54:bb: c1:11:ec:7d:62:39:77:d5:c5:e9:82:c2:c3:53:80:16:68:65: 7e:27:1d:9a:1f:17:fe:84:87:59:51:b9:52:30:d8:0f:3e:e2: bb:80:fc:91:9f:be:94:e4:3c:e3:3e:66:3e:b2:9f:2b:4b:30: 0e:6c:94:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JXoVrNUJjfK7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk N2FjNGU2NDgtOTU1OS00ZmRkLWFlNWQtZTZhNDhlMTg5NzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveLvD8wGECbSjT4XX2Yj7Gl1KOlu2RSYCo/D CME7etnuHXqRx1JgjleTmCc8UdZiZtO98LFR8tLBaQnCvpYUsXPARF4y6nn/Sj3I Ug9ETiWCH+ahNIpLunG21JSc1V7MbShdAeOsvMTvFNMihXXifHK4s/0UT1p2TqsE yr7OBGcSynA8YWooNKZHUgz1jPvc+BLa1lLV31YN9C1xWtNajlcoJq3yEpOYF3PD tEsg3hLxViz1wXYBegOdXjg4jhwf0J4Up7HvYqtTDiKctK6usGt8yCy8PhfIccyn qW6f7FYw3NuQV7SMGvDbxfzdFyOK4ne+2xmV8Ybor2V8AF1jXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJAs4IZ5wU7mE77ovpUmaWuHepXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYWM0NGI2NTEtNmUyMi0z ZGRmLTllMGMtOWFkYzI4NWUwZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANuQQBTs04FpsgfgcIz65hKv72eJiQ243nUsmMVkb5FLd7qYeJH83nr yfSH0l8e22pE+yANGZrjxKZ08mC5Mo0F7T5DchvBAShMqIr7F0/Sz9rHALeGk371 zhBLOymSGfrPjz2Fn4iPc2QUPwB9jRtqVrTBU7pmtt3YEdv5NUeTHKld27784+Du oq6fUV9sJ5fik3FShmU9XHVSJPa+sblhUMWyvTWO2e+KFHNVeUvJR8mm5Pl178ni Y80ahR4mgxcrRo1Uu8ER7H1iOXfVxemCwsNTgBZoZX4nHZofF/6Eh1lRuVIw2A8+ 4ruA/JGfvpTkPOM+Zj6ynytLMA5slGg= -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:24 2025 by rpki-client