$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa File: 0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa (raw, json) Hash identifier: +pmqx7/E7f12TFKyLhZWscQQdJihq3Dc5C+w11yh3IM= Subject key identifier: 2A:D1:56:90:A8:3B:6E:98:C4:BA:9D:69:DA:45:04:AD:FC:9A:43:E8 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584AE8912728EF788B959F38DC80 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 62610 IP address blocks: 128.1.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:27:28:ef:78:8b:95:9f:38:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=bf61cbb8-9a12-4cb7-a1b5-aafe590c4f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:55:10:d2:ae:f9:f8:11:fc:1c:a4:2b:a6: 55:e6:38:02:30:aa:07:36:c4:09:3e:66:97:e5:57: 51:d6:ce:1f:cb:e2:f8:6d:79:0a:1d:40:1c:bc:66: 4a:18:4c:63:91:01:03:18:e8:f3:8a:43:a9:7a:ed: 07:41:94:25:34:44:e6:1b:13:03:27:2b:1b:fb:b6: 0e:6e:db:5a:0c:88:b2:57:8e:27:c9:19:e6:34:df: 15:fc:30:36:b7:8c:cb:7b:cc:c3:0e:51:b5:55:dd: 48:b3:30:91:83:d5:58:10:02:cf:e9:3e:c4:16:12: 31:1f:cd:72:21:95:0a:69:a7:61:3d:93:0e:ea:1b: 81:c0:6d:f0:e4:0a:db:e6:b0:df:19:50:98:81:9b: fb:e6:87:05:94:f9:73:95:bb:6b:85:65:00:ab:a8: 34:c7:d4:f0:fb:1a:7b:03:28:9f:3f:14:31:e7:b3: 0f:80:aa:24:e2:13:1d:57:5f:9d:3b:ac:67:c1:a2: e8:04:0e:b0:18:f9:23:b4:61:58:df:1a:3b:4d:cf: 2e:9b:05:06:e3:b8:37:29:95:7e:f9:17:50:ab:09: e4:68:ae:73:0f:39:b7:1c:23:28:c5:6d:45:03:57: 56:df:32:41:0f:ec:9e:d3:43:6d:0e:9d:ef:9b:ab: 68:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D1:56:90:A8:3B:6E:98:C4:BA:9D:69:DA:45:04:AD:FC:9A:43:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:65:07:b1:1f:14:f8:db:6a:c0:77:68:08:ee:86:0d:ea:f7: 28:c6:74:c3:b3:37:60:8c:b2:13:e4:81:46:64:ac:67:98:32: 79:b2:40:d4:3f:0a:e9:62:23:f0:9b:95:f8:75:07:0c:ad:b3: 05:04:9b:18:65:dc:0e:7f:09:0d:cb:83:91:e0:fa:f0:d2:79: f9:64:63:61:ba:69:54:52:e7:84:4c:b3:e5:bc:eb:22:20:b1: cb:03:27:3f:05:6a:76:4f:45:21:85:13:1b:d5:64:dc:37:ca: 92:3b:aa:14:b2:7f:e1:6e:9c:64:92:e9:0c:70:10:f9:c7:54: 8f:80:2c:57:28:28:e1:76:35:72:73:d2:a2:ac:15:0c:8e:e3: 1a:dc:15:66:ce:a3:37:e1:5e:2b:f7:d5:bc:a1:c7:97:e8:d8: 69:f8:a5:a2:4c:5c:25:08:9c:92:23:8b:19:62:e3:72:cb:6e: 51:ec:8f:5d:c5:a9:e8:be:ae:05:49:7a:8c:05:e7:24:c4:27: 45:e2:99:f0:52:9f:1f:c8:fa:66:5e:e1:aa:00:67:fc:71:4c: 7e:36:41:c0:90:f8:b9:a2:cb:ff:ce:f3:e9:f1:06:13:a9:51: b2:58:bb:39:a5:c1:42:c3:8e:b8:82:1a:6b:21:2a:43:8e:44: 43:a7:ed:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSco73iLlZ843IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk YmY2MWNiYjgtOWExMi00Y2I3LWExYjUtYWFmZTU5MGM0ZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEtVENKu+fgR/BykK6ZV5jgCMKoHNsQJPmaX 5VdR1s4fy+L4bXkKHUAcvGZKGExjkQEDGOjzikOpeu0HQZQlNETmGxMDJysb+7YO bttaDIiyV44nyRnmNN8V/DA2t4zLe8zDDlG1Vd1IszCRg9VYEALP6T7EFhIxH81y IZUKaadhPZMO6huBwG3w5Arb5rDfGVCYgZv75ocFlPlzlbtrhWUAq6g0x9Tw+xp7 AyifPxQx57MPgKok4hMdV1+dO6xnwaLoBA6wGPkjtGFY3xo7Tc8umwUG47g3KZV+ +RdQqwnkaK5zDzm3HCMoxW1FA1dW3zJBD+ye00NtDp3vm6toUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrRVpCoO26YxLqdadpFBK38mkPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMDc2OGI4MmEtNDlmOS0z YWE4LWFjNzctOTdkZTk0YmI1NGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFlB7EfFPjbasB3aAjuhg3q9yjGdMOzN2CMshPkgUZkrGeYMnmyQNQ/ CuliI/Cblfh1BwytswUEmxhl3A5/CQ3Lg5Hg+vDSeflkY2G6aVRS54RMs+W86yIg scsDJz8FanZPRSGFExvVZNw3ypI7qhSyf+FunGSS6QxwEPnHVI+ALFcoKOF2NXJz 0qKsFQyO4xrcFWbOozfhXiv31byhx5fo2Gn4paJMXCUInJIjixli43LLblHsj13F qei+rgVJeowF5yTEJ0XimfBSnx/I+mZe4aoAZ/xxTH42QcCQ+Lmiy//O8+nxBhOp UbJYuzmlwULDjriCGmshKkOOREOn7Rs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:51:39 2025 by rpki-client