$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa File: b1e66ddd-f5af-39e8-93f9-c38eff664429.roa (raw, json) Hash identifier: OsrDlSkDEbOOLwzZR0mEbSlMc3mlrcXWvkAhsvkjoHI= Subject key identifier: F6:F6:01:CF:7E:33:BB:C1:AB:A0:DD:F3:FA:80:37:BD:EC:ED:75:E1 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE09797DDD00FF18CABF480 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 128.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:97:97:dd:d0:0f:f1:8c:ab:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=fd8f17c9-ee8b-41a3-b66e-120cfb3c36d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:e1:68:89:9f:7d:49:c5:b4:91:57:6d:9b: 20:c2:ef:41:40:db:19:1e:7a:cb:c5:6d:10:70:b6: 36:43:f7:24:e0:42:71:dd:4c:c1:5c:4d:84:f3:8a: c3:aa:52:f9:b0:da:3c:e4:a3:de:23:32:52:d9:a4: bd:01:22:9d:42:20:b9:2c:14:90:50:a1:b9:93:1a: 2d:10:77:11:b6:d4:77:f5:ae:58:84:a0:66:4b:1f: e0:d7:b2:83:3b:d0:03:0b:a6:d1:bb:94:e4:af:4a: fe:29:23:f6:83:bc:cb:06:95:29:95:0a:ff:a1:39: 07:33:eb:66:a5:b3:97:ac:7c:c5:fd:b2:7b:a5:00: 2e:69:e6:fa:fe:9b:ba:21:41:5e:4d:4a:69:b8:19: 53:81:94:13:1a:6b:7f:95:eb:14:54:4f:6a:f7:6f: 38:8c:ea:14:a5:4d:69:06:2c:15:51:aa:8a:27:fc: 38:16:e8:f1:61:e4:04:22:c5:0d:3d:af:fa:c1:40: 54:8d:57:4d:7f:d3:ac:a9:55:07:7b:c4:14:6d:a1: ec:b5:56:bb:98:a3:62:2f:ad:7f:61:4a:82:82:f3: ee:e5:7c:3b:c0:cc:a5:19:16:4b:20:a6:d8:60:26: 19:7b:4b:a6:5b:17:46:ac:4b:a9:0a:66:88:b5:03: 95:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F6:01:CF:7E:33:BB:C1:AB:A0:DD:F3:FA:80:37:BD:EC:ED:75:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:18:62:12:3e:a1:45:92:1c:f8:81:11:21:80:03:9b:aa:68: c3:d1:c4:3a:07:9a:41:c6:68:82:f2:55:bc:7c:15:28:42:eb: 25:26:75:fa:e1:21:ac:83:45:d6:9e:ae:55:b3:36:6f:58:2f: bf:48:2d:b1:2e:72:20:51:28:03:c6:97:6b:db:a3:f5:4a:67: e8:ee:5d:1d:a8:3e:9c:b0:5c:25:66:b9:5f:df:ec:6a:c4:a2: 4d:1d:e8:cc:37:5d:e1:1f:be:55:f9:5b:93:6f:e7:a0:34:b4: c4:1c:2e:ca:46:26:be:5a:82:78:a3:87:2b:b2:af:4f:d5:66: 9d:41:8a:81:89:db:e4:ef:94:8b:8f:7e:0d:14:cb:d4:0e:8c: c1:d5:76:a4:74:eb:b8:e2:89:b2:09:ac:09:9c:f5:65:39:3f: 77:9c:21:db:7d:bd:36:d2:f8:cf:6a:26:3d:ee:dc:44:57:a3: a0:c0:53:78:76:ee:4e:f7:9c:45:94:d2:28:57:9d:71:83:82: a9:fc:eb:d8:4b:1b:e1:ef:10:d2:37:f3:aa:49:4d:29:48:b7: b0:38:97:90:a2:39:68:ff:1f:39:f1:2e:53:61:fb:7e:36:54: 8b:72:2c:93:9a:60:29:9d:45:d9:73:1d:c3:ae:5d:57:23:60: 18:47:39:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JeX3dAP8Yyr9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk ZmQ4ZjE3YzktZWU4Yi00MWEzLWI2NmUtMTIwY2ZiM2MzNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzrhaImffUnFtJFXbZsgwu9BQNsZHnrLxW0Q cLY2Q/ck4EJx3UzBXE2E84rDqlL5sNo85KPeIzJS2aS9ASKdQiC5LBSQUKG5kxot EHcRttR39a5YhKBmSx/g17KDO9ADC6bRu5Tkr0r+KSP2g7zLBpUplQr/oTkHM+tm pbOXrHzF/bJ7pQAuaeb6/pu6IUFeTUppuBlTgZQTGmt/lesUVE9q9284jOoUpU1p BiwVUaqKJ/w4FujxYeQEIsUNPa/6wUBUjVdNf9OsqVUHe8QUbaHstVa7mKNiL61/ YUqCgvPu5Xw7wMylGRZLIKbYYCYZe0umWxdGrEupCmaItQOV4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPb2Ac9+M7vBq6Dd8/qAN73s7XXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYjFlNjZkZGQtZjVhZi0z OWU4LTkzZjktYzM4ZWZmNjY0NDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkYYhI+oUWSHPiBESGAA5uqaMPRxDoHmkHGaILyVbx8FShC6yUmdfrh IayDRdaerlWzNm9YL79ILbEuciBRKAPGl2vbo/VKZ+juXR2oPpywXCVmuV/f7GrE ok0d6Mw3XeEfvlX5W5Nv56A0tMQcLspGJr5agnijhyuyr0/VZp1BioGJ2+TvlIuP fg0Uy9QOjMHVdqR067jiibIJrAmc9WU5P3ecIdt9vTbS+M9qJj3u3ERXo6DAU3h2 7k73nEWU0ihXnXGDgqn869hLG+HvENI386pJTSlIt7A4l5CiOWj/HznxLlNh+342 VItyLJOaYCmdRdlzHcOuXVcjYBhHOYo= -----END CERTIFICATE-----Generated at Sun Jul 20 14:54:45 2025 by rpki-client