$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c8643991-520c-3a83-820e-df5dfd8121e9.roa File: c8643991-520c-3a83-820e-df5dfd8121e9.roa (raw, json) Hash identifier: PjdVm8CnjNu8GsZlbDZOuKYgjDlzpXFybpDXp9PYUQs= Subject key identifier: 41:A3:0F:67:3D:66:D9:AA:3E:F4:89:37:39:C8:04:77:55:3E:79:85 Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584A884095EA2157FDE0A1F22100 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c8643991-520c-3a83-820e-df5dfd8121e9.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 213990 IP address blocks: 128.254.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:95:ea:21:57:fd:e0:a1:f2:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=25174f31-f165-4897-9e4f-625a6d58099b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:98:21:eb:66:30:14:df:bc:26:96:f7:29: bf:f1:44:09:57:f5:00:a1:b1:82:b9:aa:82:98:5c: f0:2c:a9:be:76:1f:01:9e:97:ed:22:24:11:c7:3c: ff:e5:10:a9:48:94:c0:f1:a3:27:ef:58:8f:e8:f7: 95:c0:98:85:69:fb:30:d2:e2:04:95:da:51:34:54: 37:4c:f6:fe:0b:86:6f:f2:80:33:9e:e5:d2:f8:10: 1d:b6:4d:92:be:77:b1:b5:a1:2c:72:2b:da:44:1d: 70:2a:ba:e3:84:bb:be:bb:a4:85:06:a5:00:01:5f: f3:43:a2:fd:d1:62:b0:61:48:02:1c:ec:ee:71:85: 83:24:b7:c7:b3:0b:97:94:2f:ad:9b:59:df:f4:6e: 38:84:16:eb:8e:a3:61:be:c9:bc:94:5a:74:07:84: b4:3f:6d:14:c9:d7:f3:16:df:57:f5:2b:ef:bd:93: 68:39:bd:a7:01:cd:b9:7d:ea:38:a9:bf:5a:bb:24: a3:d7:a7:d2:54:1b:13:95:1f:e1:43:78:87:32:d9: df:9c:ab:8f:79:ae:8e:32:c2:59:a7:49:63:c6:d7: d6:25:f6:89:1f:66:f6:06:a9:06:fc:fb:dc:61:66: 73:0e:ac:79:53:1c:5c:0c:24:bd:ac:06:36:2a:80: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A3:0F:67:3D:66:D9:AA:3E:F4:89:37:39:C8:04:77:55:3E:79:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c8643991-520c-3a83-820e-df5dfd8121e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 128.254.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:92:40:90:19:5d:b9:39:49:6c:50:5f:d7:ec:51:c4:38:e3: 6c:49:df:53:e5:51:d4:0c:ce:e6:72:aa:ed:fe:22:5c:65:96: 27:17:5e:96:88:40:14:c5:78:4c:12:d1:c4:13:ce:7f:d6:57: f1:e4:52:f9:43:60:b7:c2:46:67:a5:90:1d:55:aa:e2:4b:6f: 64:6a:3a:ee:12:52:50:ea:c7:21:a6:3c:8c:d2:f1:c3:1d:9e: 2e:fc:c9:c4:56:67:b8:9c:0d:a4:d2:f8:5f:83:3c:ce:57:30: d6:73:38:c8:d8:c8:46:a8:40:2b:8b:13:c3:54:30:4e:1e:c0: de:05:62:aa:2b:d4:a0:6f:34:65:68:a8:33:ec:cd:b2:9e:10: 05:a1:3f:ea:6c:69:85:a4:b2:31:ce:36:5d:67:44:4f:d9:5a: 17:48:c9:6b:1d:03:0c:45:67:8b:d6:d2:ee:db:17:80:f2:a7: 6d:00:ca:0f:d2:76:f5:5b:07:62:f9:df:4c:7a:51:25:e0:31: 8a:b9:96:a0:71:c6:65:63:27:0c:bb:b7:ff:43:69:9c:8a:a0: af:45:42:15:3a:3b:60:53:45:8e:83:8a:ba:6a:21:49:1e:fc: 1c:dc:29:b1:33:f1:54:3c:e6:69:e1:ed:1e:62:8b:1e:88:9a: c5:cb:e5:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJXqIVf94KHyIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk MjUxNzRmMzEtZjE2NS00ODk3LTllNGYtNjI1YTZkNTgwOTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZmYIetmMBTfvCaW9ym/8UQJV/UAobGCuaqC mFzwLKm+dh8BnpftIiQRxzz/5RCpSJTA8aMn71iP6PeVwJiFafsw0uIEldpRNFQ3 TPb+C4Zv8oAznuXS+BAdtk2SvnextaEscivaRB1wKrrjhLu+u6SFBqUAAV/zQ6L9 0WKwYUgCHOzucYWDJLfHswuXlC+tm1nf9G44hBbrjqNhvsm8lFp0B4S0P20Uydfz Ft9X9SvvvZNoOb2nAc25feo4qb9auySj16fSVBsTlR/hQ3iHMtnfnKuPea6OMsJZ p0ljxtfWJfaJH2b2BqkG/PvcYWZzDqx5UxxcDCS9rAY2KoAarQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGjD2c9ZtmqPvSJNznIBHdVPnmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvYzg2NDM5OTEtNTIwYy0z YTgzLTgyMGUtZGY1ZGZkODEyMWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP67MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2SQJAZXbk5SWxQX9fsUcQ442xJ31PlUdQMzuZyqu3+IlxllicXXpaI QBTFeEwS0cQTzn/WV/HkUvlDYLfCRmelkB1VquJLb2RqOu4SUlDqxyGmPIzS8cMd ni78ycRWZ7icDaTS+F+DPM5XMNZzOMjYyEaoQCuLE8NUME4ewN4FYqor1KBvNGVo qDPszbKeEAWhP+psaYWksjHONl1nRE/ZWhdIyWsdAwxFZ4vW0u7bF4Dyp20Ayg/S dvVbB2L530x6USXgMYq5lqBxxmVjJwy7t/9DaZyKoK9FQhU6O2BTRY6DirpqIUke /BzcKbEz8VQ85mnh7R5iix6ImsXL5Rw= -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:23 2025 by rpki-client