$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa File: 10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa (raw, json) Hash identifier: PX/1iVSHxMa0ayhwqqAZYo19o4S+XMfpuAGTmVFVyxE= Subject key identifier: 64:57:AF:EA:CE:21:05:02:BA:AF:2D:08:F5:9B:EA:CF:93:D0:29:64 Certificate issuer: /CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074 Certificate serial: 010D0C9F4328584A6825F7229F2C65864C416580 Authority key identifier: 31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 18628 IP address blocks: 208.112.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f7:22:9f:2c:65:86:4c:41:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=f1950551-09ce-40d6-80cc-a24d54e40245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:01:e5:b7:64:87:ea:6a:a2:62:cc:84:7d:e5: 5e:0d:c3:20:ba:7c:85:7b:5e:d1:dd:9d:95:d8:e6: 50:89:eb:ac:86:c9:ae:e3:b7:f5:f8:b1:f3:d9:2c: 0c:56:f8:1c:e7:44:e8:96:4e:6b:2c:a5:1f:d4:e4: 96:6d:7c:c0:75:1e:54:a5:07:f5:1a:ff:db:e2:9b: dd:1c:b5:09:5f:a7:4c:12:98:6a:da:99:9a:f1:d5: 70:68:ab:a4:c2:fe:06:86:43:c7:18:7f:07:02:cc: 52:c0:b0:41:c3:50:94:80:05:de:30:41:ac:cd:14: c0:c1:4c:52:dc:16:a8:5e:1a:0a:6d:a1:b1:84:1b: 0b:e4:14:b9:9f:37:60:31:71:3a:dc:de:4a:b0:8e: e5:49:a1:c5:33:49:fd:8f:7e:f6:ce:67:c6:b3:2a: 52:ef:63:4f:b9:8a:76:da:73:1a:b6:19:19:d5:6e: e7:40:76:ee:41:70:ad:17:3b:db:65:f1:68:6a:86: 84:c4:6e:7d:a4:cc:e0:09:6a:be:49:e2:8f:8b:05: fa:f6:8c:07:3b:c5:f8:aa:c8:f5:90:a2:9c:31:17: 12:f7:92:57:6f:ec:34:94:1e:39:4c:3d:10:fc:72: 1e:a1:0d:9e:45:93:ca:b1:1d:d0:84:2c:8d:5c:77: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:57:AF:EA:CE:21:05:02:BA:AF:2D:08:F5:9B:EA:CF:93:D0:29:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl X509v3 Authority Key Identifier: keyid:31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer sbgp-ipAddrBlock: critical IPv4: 208.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:41:21:ba:79:d7:40:e0:76:22:be:6e:c0:d5:d2:22:9f:c8: 3d:7d:40:77:a7:70:9b:83:5c:8c:9c:af:1c:b4:3a:1a:55:6c: 8f:b0:88:b3:d0:5f:c0:a6:29:b7:8b:78:a6:d7:6a:d7:84:ba: 24:38:18:8f:ef:e9:ff:c5:df:57:e5:26:b0:bf:63:bf:00:93: f1:6d:bc:35:b7:1c:4e:a0:ac:d8:fe:8a:f7:63:03:c3:9f:12: 19:8c:8f:14:ea:68:73:72:24:c7:92:28:58:83:de:2d:6c:4a: f0:9f:4d:19:b2:c6:c1:12:79:20:96:3f:73:6c:29:ea:ff:49: bf:71:f8:30:0a:d6:b7:44:46:70:20:48:33:d3:a0:42:c5:2a: 37:6c:5e:6b:0b:c5:6b:b2:ad:45:82:da:90:2b:db:b9:78:ba: e9:e9:58:76:57:b3:8b:29:b1:de:e4:ba:23:ea:58:b1:8c:46: ee:1a:e6:6d:b4:45:a6:d2:21:e9:26:a1:be:aa:3b:c1:67:15: b4:ed:d8:7d:03:9d:a6:ee:72:18:db:15:26:1f:9d:7e:6e:20: a7:5b:4d:67:cc:7b:0d:12:7f:5d:e0:e9:3a:1e:e6:cb:25:9d: 01:60:8d:1b:d8:5e:01:34:28:4c:7b:d2:4e:f3:85:2f:69:0f: 6f:37:ac:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJfcinyxlhkxBZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNlZjVjN2MtZjgxZi00YWZlLWE4MzMtNmFkOTA1M2M0 MDc0MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZjE5NTA1NTEtMDljZS00MGQ2LTgwY2MtYTI0ZDU0ZTQwMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAHlt2SH6mqiYsyEfeVeDcMgunyFe17R3Z2V 2OZQieushsmu47f1+LHz2SwMVvgc50Tolk5rLKUf1OSWbXzAdR5UpQf1Gv/b4pvd HLUJX6dMEphq2pma8dVwaKukwv4GhkPHGH8HAsxSwLBBw1CUgAXeMEGszRTAwUxS 3BaoXhoKbaGxhBsL5BS5nzdgMXE63N5KsI7lSaHFM0n9j372zmfGsypS72NPuYp2 2nMathkZ1W7nQHbuQXCtFzvbZfFoaoaExG59pMzgCWq+SeKPiwX69owHO8X4qsj1 kKKcMRcS95JXb+w0lB45TD0Q/HIeoQ2eRZPKsR3QhCyNXHdlIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRXr+rOIQUCuq8tCPWb6s+T0ClkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xY2Vm NWM3Yy1mODFmLTRhZmUtYTgzMy02YWQ5MDUzYzQwNzQvMTBjMGM0YmYtMzlmMi0z ZGUxLTg3YzctNjFlM2VjOTIxNzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWNlZjVjN2MtZjgxZi00YWZlLWE4 MzMtNmFkOTA1M2M0MDc0LzFjZWY1YzdjLWY4MWYtNGFmZS1hODMzLTZhZDkwNTNj NDA3NC5jcmwwHwYDVR0jBBgwFoAUMXFPqit2ohWgbOL7dataV3NzPhowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xY2VmNWM3Yy1mODFmLTRhZmUtYTgzMy02YWQ5 MDUzYzQwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtBIbp510DgdiK+bsDV0iKfyD19QHencJuDXIycrxy0OhpVbI+wiLPQ X8CmKbeLeKbXateEuiQ4GI/v6f/F31flJrC/Y78Ak/FtvDW3HE6grNj+ivdjA8Of EhmMjxTqaHNyJMeSKFiD3i1sSvCfTRmyxsESeSCWP3NsKer/Sb9x+DAK1rdERnAg SDPToELFKjdsXmsLxWuyrUWC2pAr27l4uunpWHZXs4spsd7kuiPqWLGMRu4a5m20 RabSIekmob6qO8FnFbTt2H0DnabuchjbFSYfnX5uIKdbTWfMew0Sf13g6Toe5ssl nQFgjRvYXgE0KEx70k7zhS9pD283rD8= -----END CERTIFICATE-----Generated at Thu Jul 10 06:36:25 2025 by rpki-client