$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86cab172-b370-32a4-b90f-6ab2db138b9b.roa File: 86cab172-b370-32a4-b90f-6ab2db138b9b.roa (raw, json) Hash identifier: xpY+qQ8Tc5MKWYLVR9JyEO0X0XXYCsFoNn9m+B73kSQ= Subject key identifier: 44:B9:5B:5F:03:E6:2C:7C:DF:91:49:44:42:E0:C5:5A:10:9C:8D:C9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF07F433ED76C7312199A20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86cab172-b370-32a4-b90f-6ab2db138b9b.roa Signing time: Thu 24 Jul 2025 12:38:52 +0000 ROA not before: Thu 24 Jul 2025 12:38:52 +0000 ROA not after: Wed 22 Oct 2025 12:38:52 +0000 asID: 396611 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:7f:43:3e:d7:6c:73:12:19:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:52 2025 GMT Not After : Oct 22 12:38:52 2025 GMT Subject: CN=f4c25adf-c866-4fb0-83a5-c85516dfe81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:ce:28:7d:f7:20:2d:79:a0:d1:b0:31:cb: 0d:ea:82:33:6e:db:f5:b3:20:90:65:7a:7b:4f:93: b7:4a:7f:2a:c8:ef:ea:fd:3a:c9:d2:c2:bd:e4:b4: b0:c5:58:35:2d:46:3a:6d:af:38:65:1c:75:51:71: 6b:11:85:c4:b3:31:a3:e1:ba:5d:ff:bf:9d:eb:7d: 95:b7:28:9b:49:b1:97:19:3b:4f:ae:c1:6f:fb:18: 2a:9a:86:cf:c2:d5:e9:bc:69:5e:6a:15:24:8b:fd: 31:ac:0c:74:8b:25:1d:9f:c5:ca:7a:c2:47:45:da: 8b:5f:e2:89:c4:4c:73:d1:4b:1d:f1:3e:3d:0e:df: db:f1:29:f3:f4:02:8e:e6:5e:9e:a1:68:f6:ab:4f: 46:7f:22:7e:12:6e:7b:8c:cc:c8:d2:98:ab:d2:bc: a4:31:92:3e:87:60:eb:ce:9d:a1:4b:0b:a5:86:27: 23:07:64:8e:dd:d1:6a:fa:f3:82:e6:a2:6d:a7:7b: 8d:c6:fb:ba:de:bd:a8:a1:c0:a6:ce:c7:d3:52:b8: d3:30:3d:a6:c4:53:c7:83:a5:db:39:de:4c:08:6a: 53:6f:9a:a3:1e:27:9e:80:2d:9b:44:0d:60:81:bb: c8:72:3c:5c:84:77:5f:9b:f6:a4:56:ed:44:64:4e: c2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B9:5B:5F:03:E6:2C:7C:DF:91:49:44:42:E0:C5:5A:10:9C:8D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86cab172-b370-32a4-b90f-6ab2db138b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:58:18:0a:1d:75:8d:0f:36:fb:7f:a5:2a:57:bf:e4:ae:bb: a3:53:fd:ca:ac:07:9d:63:47:69:b1:6e:d7:d9:d1:46:80:5c: 55:c4:32:57:a0:91:e1:fa:af:9d:f0:59:0f:2d:20:a9:ac:d7: f8:9d:0a:59:f5:41:f6:6f:cb:1b:e9:21:ad:d4:44:58:0c:eb: ce:4f:37:0e:c4:cd:0a:9c:b9:78:71:69:5f:b6:fb:a4:4a:eb: f5:34:1c:4e:b8:a7:a1:18:10:bb:71:63:c3:d6:21:78:27:7b: 58:c9:b8:ea:fb:89:fb:bf:d2:4e:09:ca:90:43:cc:1b:22:6d: a0:8f:ec:b5:90:4f:7d:0d:6f:7a:0c:1b:d8:ec:e1:2b:21:f4: 8f:23:a5:ec:5e:36:64:9f:7d:bf:a1:44:2e:b0:72:da:f3:fe: 83:1b:7c:d3:7b:cd:9f:e3:9d:a9:12:2e:7c:e4:00:52:33:f9: 62:69:cb:ff:a6:29:8c:3e:d0:30:a2:84:c9:78:ec:f4:82:cd: ca:ec:a7:76:1f:b3:3a:3d:5a:6c:5f:3c:e6:53:e9:d5:68:e6: f7:30:55:be:19:07:eb:90:7e:ee:4d:cf:c2:4e:7e:9d:41:05: df:2d:ac:a0:33:38:48:d7:90:06:61:7d:76:b3:56:4e:cf:c1: 9f:8f:07:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8H9DPtdscxIZmiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MloXDTI1MTAyMjEyMzg1MlowLzEtMCsGA1UEAxMk ZjRjMjVhZGYtYzg2Ni00ZmIwLTgzYTUtYzg1NTE2ZGZlODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJvOKH33IC15oNGwMcsN6oIzbtv1syCQZXp7 T5O3Sn8qyO/q/TrJ0sK95LSwxVg1LUY6ba84ZRx1UXFrEYXEszGj4bpd/7+d632V tyibSbGXGTtPrsFv+xgqmobPwtXpvGleahUki/0xrAx0iyUdn8XKesJHRdqLX+KJ xExz0Usd8T49Dt/b8Snz9AKO5l6eoWj2q09GfyJ+Em57jMzI0pir0rykMZI+h2Dr zp2hSwulhicjB2SO3dFq+vOC5qJtp3uNxvu63r2oocCmzsfTUrjTMD2mxFPHg6Xb Od5MCGpTb5qjHieegC2bRA1ggbvIcjxchHdfm/akVu1EZE7CDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFES5W18D5ix835FJRELgxVoQnI3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZjYWIxNzItYjM3MC0z MmE0LWI5MGYtNmFiMmRiMTM4YjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxYGAoddY0PNvt/pSpXv+Suu6NT/cqsB51jR2mxbtfZ0UaAXFXEMleg keH6r53wWQ8tIKms1/idCln1QfZvyxvpIa3URFgM685PNw7EzQqcuXhxaV+2+6RK 6/U0HE64p6EYELtxY8PWIXgne1jJuOr7ifu/0k4JypBDzBsibaCP7LWQT30Nb3oM G9js4Ssh9I8jpexeNmSffb+hRC6wctrz/oMbfNN7zZ/jnakSLnzkAFIz+WJpy/+m KYw+0DCihMl47PSCzcrsp3Yfszo9WmxfPOZT6dVo5vcwVb4ZB+uQfu5Nz8JOfp1B Bd8trKAzOEjXkAZhfXazVk7PwZ+PB90= -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:32 2025 by rpki-client