$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1b31f61a-098e-37a7-8531-9a5ab36e5749.roa File: 1b31f61a-098e-37a7-8531-9a5ab36e5749.roa (raw, json) Hash identifier: a9TmZCiwv1aayHpy/6xIYBXWk3wIEOtV+D8zVu+iK3g= Subject key identifier: 5A:74:23:7B:EA:A3:E9:0F:19:7E:FF:9C:CD:0D:23:81:78:4B:9C:DD Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584A94D0D3B449CFC47C2690A808 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1b31f61a-098e-37a7-8531-9a5ab36e5749.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 204928 IP address blocks: 128.254.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d3:b4:49:cf:c4:7c:26:90:a8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=8a48ecbf-5e63-4dbc-b53e-b92c06195b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:55:6a:55:dc:f6:a9:d9:00:34:48:8c:eb:c6: b5:3d:24:9a:e6:72:21:34:87:88:12:b1:d5:bd:18: dd:9a:36:46:08:b7:e6:83:6f:3d:84:ea:ff:0b:bb: 3b:7f:00:00:b8:88:b7:75:c7:b7:ab:42:a3:3f:2e: e4:7e:13:46:16:1c:2a:e7:45:61:37:ab:97:1e:3c: e4:b3:3b:36:b7:28:83:70:b3:3c:95:05:fa:1d:40: 16:0b:cb:23:69:d3:ae:3c:29:dd:10:f7:9a:bf:92: bd:f5:e1:cb:a3:cd:f9:e0:94:7d:39:59:96:bd:e6: e8:fd:4f:9e:6f:d7:98:dd:a2:53:93:75:86:42:dd: 34:20:64:bf:85:cf:5a:3b:67:15:ad:45:80:e7:4f: 88:24:dd:5c:45:f6:ac:da:fc:2d:1f:d8:29:82:0d: d2:02:43:4a:09:44:f2:f2:6a:6d:e6:56:2d:2a:92: 03:08:e8:6a:ef:ec:33:99:2d:2e:62:e3:8f:cb:dd: e7:c5:16:f4:06:c0:96:69:1e:18:a0:22:c1:24:10: 8a:72:1f:29:02:82:25:e2:dc:02:1d:0b:f6:4d:a1: 01:4d:5c:9f:07:28:b9:e9:30:4d:7b:b4:84:7a:37: c5:64:fa:17:7a:26:81:ba:db:cb:36:cd:b4:c6:84: 46:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:74:23:7B:EA:A3:E9:0F:19:7E:FF:9C:CD:0D:23:81:78:4B:9C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1b31f61a-098e-37a7-8531-9a5ab36e5749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 128.254.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:12:09:20:05:e0:e9:e2:59:d0:ea:fb:7f:42:b9:a2:61:8e: 85:e4:9f:8b:fe:ea:40:05:6d:42:7e:96:b6:7a:d0:54:ba:ea: 2b:d4:93:14:56:d1:dd:ba:58:63:48:85:57:35:6f:c2:10:89: 58:04:60:37:bf:18:7f:1d:24:97:e2:2a:41:c7:f0:07:15:18: d4:f3:f7:23:e2:a0:37:c8:4e:c8:f0:9b:67:99:be:2a:73:1a: 20:57:b8:68:6f:ff:c1:2e:c1:06:52:2b:41:98:22:6c:ca:15: 44:af:72:96:c6:20:fb:61:0a:b9:c0:81:c1:6f:34:63:e7:b0: 67:17:90:6f:0c:98:d7:4a:a5:ff:dc:90:02:6f:7d:0e:ab:7d: 11:03:8d:18:b2:47:dc:e1:34:3b:f7:7b:7d:a5:30:21:0f:73: 1f:00:1e:53:8d:a6:2d:b3:6b:07:f5:d5:4e:6c:f4:20:44:99: a4:c8:3f:f6:19:53:b9:5f:4a:14:33:89:34:1c:c1:d2:5b:fc: 1d:80:2c:0c:5c:ba:6d:cb:d0:38:8f:2c:f6:e4:67:0b:21:65: 19:d0:0b:66:48:9f:01:8b:23:e8:cf:81:82:42:dc:45:f0:ea: 94:28:a8:1c:33:9a:b6:29:a0:98:f9:cc:2b:4d:a1:45:b7:05: 1b:44:a4:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NO0Sc/EfCaQqAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk OGE0OGVjYmYtNWU2My00ZGJjLWI1M2UtYjkyYzA2MTk1Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlVqVdz2qdkANEiM68a1PSSa5nIhNIeIErHV vRjdmjZGCLfmg289hOr/C7s7fwAAuIi3dce3q0KjPy7kfhNGFhwq50VhN6uXHjzk szs2tyiDcLM8lQX6HUAWC8sjadOuPCndEPeav5K99eHLo8354JR9OVmWvebo/U+e b9eY3aJTk3WGQt00IGS/hc9aO2cVrUWA50+IJN1cRfas2vwtH9gpgg3SAkNKCUTy 8mpt5lYtKpIDCOhq7+wzmS0uYuOPy93nxRb0BsCWaR4YoCLBJBCKch8pAoIl4twC HQv2TaEBTVyfByi56TBNe7SEejfFZPoXeiaButvLNs20xoRGfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp0I3vqo+kPGX7/nM0NI4F4S5zdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvMWIzMWY2MWEtMDk4ZS0z N2E3LTg1MzEtOWE1YWIzNmU1NzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP64MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwSCSAF4OniWdDq+39CuaJhjoXkn4v+6kAFbUJ+lrZ60FS66ivUkxRW 0d26WGNIhVc1b8IQiVgEYDe/GH8dJJfiKkHH8AcVGNTz9yPioDfITsjwm2eZvipz GiBXuGhv/8EuwQZSK0GYImzKFUSvcpbGIPthCrnAgcFvNGPnsGcXkG8MmNdKpf/c kAJvfQ6rfREDjRiyR9zhNDv3e32lMCEPcx8AHlONpi2zawf11U5s9CBEmaTIP/YZ U7lfShQziTQcwdJb/B2ALAxcum3L0DiPLPbkZwshZRnQC2ZInwGLI+jPgYJC3EXw 6pQoqBwzmrYpoJj5zCtNoUW3BRtEpFk= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:48 2025 by rpki-client