$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1f8a7e7f-c786-3b17-854e-3b187f9ae00b.roa File: 1f8a7e7f-c786-3b17-854e-3b187f9ae00b.roa (raw, json) Hash identifier: dOfmu5vV1XldbRKYQte2PcxvmrHOFO6afHLihn1B0y8= Subject key identifier: 44:2A:C6:0D:17:98:8C:BF:3E:E4:CC:91:9C:DC:A2:D6:93:7D:EB:A7 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584A6290A1D57DCE3B494CE3E400 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1f8a7e7f-c786-3b17-854e-3b187f9ae00b.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 62610 IP address blocks: 128.1.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a1:d5:7d:ce:3b:49:4c:e3:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=ece212d7-29d2-4468-9a46-0a7445aa1882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:b9:89:33:1b:45:c2:60:8d:fd:d5:50:ea: 88:1d:ac:ca:c6:24:7a:8a:48:34:f1:0b:fe:eb:eb: 91:53:d5:56:16:f8:83:2e:79:3c:90:03:eb:d0:18: 47:18:15:62:cc:3c:c5:85:f0:41:e4:79:4b:09:f9: f4:93:75:72:fa:fd:e5:a4:38:b2:56:1e:e6:6e:02: df:23:41:dc:9e:6a:6e:d4:ae:cd:71:7a:5b:e9:0b: 19:d8:53:29:24:20:cf:51:f0:89:70:2b:6c:03:25: 18:ab:22:42:d9:5d:13:7a:3e:f0:56:73:1b:36:34: f8:8b:e7:4b:71:19:00:a7:b1:51:64:0f:14:1f:fd: 10:a8:0e:3a:24:3a:53:f3:dc:63:b7:33:78:65:83: 8e:7f:a2:bd:d4:b9:b0:b9:cd:7b:d9:cf:e2:88:f0: 08:90:b7:7b:21:f9:45:5c:9d:7f:f6:95:e6:b1:19: 7b:82:18:be:97:d4:39:a0:67:b5:30:a2:e5:96:6c: 97:3b:26:5f:c1:37:ad:cd:be:b5:0a:e8:73:4e:48: 35:a2:38:2d:2a:f0:f4:41:8e:5f:92:6f:b6:b7:71: e2:6c:95:bc:73:2f:43:26:69:26:b2:5c:15:36:cc: 58:29:fa:10:06:cb:ee:0b:6e:e4:e4:18:cb:dc:c0: d9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2A:C6:0D:17:98:8C:BF:3E:E4:CC:91:9C:DC:A2:D6:93:7D:EB:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1f8a7e7f-c786-3b17-854e-3b187f9ae00b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e3:dc:f7:16:fc:bf:98:e5:f0:d3:8d:95:e2:60:dc:93:a5: 7c:24:38:4d:3d:74:6f:d0:4f:46:46:2d:2f:be:fa:f7:a2:9a: d7:03:5d:e5:b1:7d:35:61:32:b5:47:12:72:4e:d6:dd:29:20: 9d:44:ae:65:66:86:e1:dc:60:f3:1f:a5:91:0f:eb:02:de:09: 51:d0:f6:d2:d4:18:a7:36:70:c0:c5:c5:e3:82:c7:cc:9a:8d: 15:3a:4f:d2:6a:56:a2:a9:af:ae:3d:98:f0:07:e8:ee:f8:42: 98:08:9d:c5:66:59:63:6e:1a:f4:a4:56:16:97:ad:13:61:af: b3:4c:ea:23:ed:25:1c:e1:43:99:7b:a6:58:b1:16:36:d8:87: b1:55:5a:cd:ba:96:4f:4e:47:39:3d:8f:fe:6a:22:84:df:4b: 7d:e6:21:36:b5:ae:e9:55:75:40:c5:5c:93:88:e2:84:73:b4: 31:db:33:c1:ea:65:31:57:14:bf:ac:3f:6c:49:59:65:93:43: cc:a9:08:64:42:51:00:81:a7:c9:90:f8:60:42:01:d5:c0:f9: f2:c5:ba:ab:d3:fe:78:42:58:14:cb:62:04:90:16:6c:c3:c9: 07:2e:f5:f7:52:5c:40:62:d3:23:b5:40:c2:b6:cf:e5:f3:12: 36:d6:1f:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKHVfc47SUzj5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZWNlMjEyZDctMjlkMi00NDY4LTlhNDYtMGE3NDQ1YWExODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvy5iTMbRcJgjf3VUOqIHazKxiR6ikg08Qv+ 6+uRU9VWFviDLnk8kAPr0BhHGBVizDzFhfBB5HlLCfn0k3Vy+v3lpDiyVh7mbgLf I0Hcnmpu1K7NcXpb6QsZ2FMpJCDPUfCJcCtsAyUYqyJC2V0Tej7wVnMbNjT4i+dL cRkAp7FRZA8UH/0QqA46JDpT89xjtzN4ZYOOf6K91Lmwuc172c/iiPAIkLd7IflF XJ1/9pXmsRl7ghi+l9Q5oGe1MKLllmyXOyZfwTetzb61CuhzTkg1ojgtKvD0QY5f km+2t3HibJW8cy9DJmkmslwVNsxYKfoQBsvuC27k5BjL3MDZZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQqxg0XmIy/PuTMkZzcotaTfeunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMWY4YTdlN2YtYzc4Ni0z YjE3LTg1NGUtM2IxODdmOWFlMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfj3PcW/L+Y5fDTjZXiYNyTpXwkOE09dG/QT0ZGLS+++veimtcDXeWx fTVhMrVHEnJO1t0pIJ1ErmVmhuHcYPMfpZEP6wLeCVHQ9tLUGKc2cMDFxeOCx8ya jRU6T9JqVqKpr649mPAH6O74QpgIncVmWWNuGvSkVhaXrRNhr7NM6iPtJRzhQ5l7 plixFjbYh7FVWs26lk9ORzk9j/5qIoTfS33mITa1rulVdUDFXJOI4oRztDHbM8Hq ZTFXFL+sP2xJWWWTQ8ypCGRCUQCBp8mQ+GBCAdXA+fLFuqvT/nhCWBTLYgSQFmzD yQcu9fdSXEBi0yO1QMK2z+XzEjbWH1U= -----END CERTIFICATE-----Generated at Sun Jul 20 14:10:00 2025 by rpki-client