$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa File: 573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa (raw, json) Hash identifier: G206MQoXSCGuUW0Rq4c1rDVitExrpfjDigfShpHP+l4= Subject key identifier: F4:25:3B:9C:E0:4D:88:46:07:72:6E:D7:CC:9D:5E:17:37:53:D6:2B Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584A9900C88EC5594FA490D09B40 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 5645 IP address blocks: 192.0.128.0/17 maxlen: 17 192.0.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c8:8e:c5:59:4f:a4:90:d0:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=c12ac2c8-ebb5-4876-9779-693400d6c8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:fe:57:00:a7:dc:a6:0a:a8:ff:ac:76:23: ce:4e:24:32:02:95:2c:f2:29:9a:da:05:84:7f:bf: 56:bf:19:2a:5b:a1:3a:9a:39:70:65:f3:c0:fb:40: e9:ea:19:26:b8:39:1b:5a:a5:d3:73:71:57:11:90: c5:f0:61:b8:2f:6a:6d:0a:3d:c1:36:dd:21:23:85: e8:1f:38:20:cf:7e:d4:5f:96:34:5a:89:a2:c6:c3: e0:37:d3:d7:1e:a0:ba:6a:19:3d:57:06:da:16:a8: 0a:4f:f6:30:00:c9:a6:0f:85:df:16:2f:1a:2b:03: 3c:f3:ea:f5:0b:cd:86:53:e0:51:77:a2:1b:95:6e: 89:c4:a7:3c:59:77:45:c8:92:b7:3d:c8:40:2d:9e: e7:cb:95:e0:b1:30:91:29:56:af:d3:0c:8b:48:ad: c8:af:b9:1a:bf:85:e6:57:2a:61:b8:1d:45:72:6f: ff:01:e6:ce:ba:f2:18:a0:6a:95:62:53:c4:9b:2d: 58:92:aa:5a:12:e3:8d:16:e2:b4:a8:e8:6b:c4:15: 80:fd:e6:9d:e0:d5:ce:ec:62:c1:26:ff:dc:eb:a2: 49:59:46:25:57:aa:6e:bd:fa:a9:f1:72:28:57:8b: 53:3d:e9:22:1e:f1:1a:59:5d:c0:80:4c:98:79:fe: a4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:25:3B:9C:E0:4D:88:46:07:72:6E:D7:CC:9D:5E:17:37:53:D6:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 192.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6c:2f:e0:4c:c2:ea:f7:44:f1:8f:ff:65:c6:f8:71:8b:6e: a0:ce:63:56:66:e1:9f:18:f4:b0:d4:a7:c2:64:80:1f:b2:28: cc:06:95:1b:43:32:03:bc:44:1a:69:60:dd:38:e9:96:87:cd: dd:4e:ca:c2:9d:d2:0e:31:52:45:1c:fc:d0:06:eb:12:a3:a6: 89:81:ce:bd:32:1c:6a:28:8d:ad:f6:26:cb:af:75:32:83:2a: 68:39:b3:5a:7b:02:5f:58:c5:32:ed:81:0a:f7:21:4f:04:b1: 8d:21:f6:42:ac:8b:58:1d:1f:02:28:75:02:a8:c9:2f:28:cf: 96:a4:d8:85:27:b2:c6:d0:d9:b7:b6:62:a2:5b:96:16:10:ec: 41:b2:d6:ff:89:90:17:c2:5d:88:7d:07:7f:4c:1f:b0:2f:b0: b1:67:15:ef:03:73:8a:6c:a1:20:d8:5c:e2:de:68:18:47:ba: be:84:50:32:d5:0d:0e:33:a7:52:91:e8:c7:2c:3d:5a:43:c5: c4:be:28:a1:13:1f:56:80:1b:20:1c:71:29:dc:5a:80:f0:d2: 30:58:4e:d9:b7:01:3e:08:81:04:f7:15:c2:17:e1:96:ef:07: a3:23:81:21:e9:81:3e:a1:ab:22:97:1d:17:65:03:5d:c1:b4: 9e:d0:2c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMiOxVlPpJDQm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YzEyYWMyYzgtZWJiNS00ODc2LTk3NzktNjkzNDAwZDZjOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySP+VwCn3KYKqP+sdiPOTiQyApUs8ima2gWE f79WvxkqW6E6mjlwZfPA+0Dp6hkmuDkbWqXTc3FXEZDF8GG4L2ptCj3BNt0hI4Xo Hzggz37UX5Y0WomixsPgN9PXHqC6ahk9VwbaFqgKT/YwAMmmD4XfFi8aKwM88+r1 C82GU+BRd6IblW6JxKc8WXdFyJK3PchALZ7ny5XgsTCRKVav0wyLSK3Ir7kav4Xm VyphuB1Fcm//AebOuvIYoGqVYlPEmy1YkqpaEuONFuK0qOhrxBWA/ead4NXO7GLB Jv/c66JJWUYlV6puvfqp8XIoV4tTPekiHvEaWV3AgEyYef6kPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQlO5zgTYhGB3Ju18ydXhc3U9YrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNTczZjNlYmEtNjlmNy0z ZDE3LThkZGYtYmVjNDEwYWMxMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHwACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJsL+BMwur3RPGP/2XG+HGLbqDOY1Zm4Z8Y9LDUp8JkgB+yKMwGlRtD MgO8RBppYN046ZaHzd1OysKd0g4xUkUc/NAG6xKjpomBzr0yHGooja32JsuvdTKD Kmg5s1p7Al9YxTLtgQr3IU8EsY0h9kKsi1gdHwIodQKoyS8oz5ak2IUnssbQ2be2 YqJblhYQ7EGy1v+JkBfCXYh9B39MH7AvsLFnFe8Dc4psoSDYXOLeaBhHur6EUDLV DQ4zp1KR6McsPVpDxcS+KKETH1aAGyAccSncWoDw0jBYTtm3AT4IgQT3FcIX4Zbv B6MjgSHpgT6hqyKXHRdlA13BtJ7QLPE= -----END CERTIFICATE-----Generated at Mon Jul 28 22:12:29 2025 by rpki-client