$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/19f94a23-4ca9-31c0-b89d-a7ef3c1bb051.roa File: 19f94a23-4ca9-31c0-b89d-a7ef3c1bb051.roa (raw, json) Hash identifier: GrGi34Fwv7r3tonlJTLV+3zRWWJqvzgjiX396uOI70A= Subject key identifier: 87:48:AC:C0:73:B7:84:64:A3:F0:52:A7:48:44:AB:B2:D5:AC:29:F7 Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584AD506AF7AF719E3DE33A0F260 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/19f94a23-4ca9-31c0-b89d-a7ef3c1bb051.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 7029 IP address blocks: 128.254.185.0/24 maxlen: 24 128.254.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:af:7a:f7:19:e3:de:33:a0:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=a7b431fa-eeca-4dee-b2c8-6f4dc6b4394e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:83:67:37:ac:72:32:c8:84:da:ce:d3:7b: 75:77:03:16:b5:ad:77:e9:71:b3:6f:0b:75:8f:ed: 80:c6:58:ab:9f:85:da:3b:74:e4:30:5d:03:8e:b6: 04:ca:43:8f:ac:67:ca:5f:97:72:c9:0c:58:c3:ad: fc:9c:25:80:98:f1:97:7d:91:68:9f:cf:00:29:76: 98:71:08:1b:2b:6d:ce:e8:88:bb:3a:a2:02:39:ae: 79:e5:7e:fd:56:0d:c0:cc:9f:5f:19:cd:03:d2:67: 95:82:da:ef:d3:12:0c:a0:14:e0:7f:ae:45:2f:06: dd:a1:f9:50:db:42:cc:e3:8a:9e:11:09:3a:37:b1: f0:5f:94:ba:f9:b9:48:d3:e6:6d:15:bb:ca:82:08: 4e:3e:52:3e:2b:36:6d:0e:98:85:a5:3c:77:35:09: 9d:f4:7c:f7:e4:5a:d7:0f:99:9d:19:34:ff:ae:c1: 31:a9:8a:e4:11:bb:90:93:fa:9c:72:fd:42:0a:21: 0a:76:3c:56:66:b4:78:5a:a6:38:78:92:55:40:ee: 70:b4:ce:14:cd:3b:52:1f:c5:ec:91:db:5f:6c:3f: 3e:67:7e:b9:2e:de:76:6f:ba:49:20:50:9b:5b:38: ca:5e:75:60:15:d2:2b:fb:31:26:3d:9d:7e:ad:18: 01:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:48:AC:C0:73:B7:84:64:A3:F0:52:A7:48:44:AB:B2:D5:AC:29:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/19f94a23-4ca9-31c0-b89d-a7ef3c1bb051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 128.254.185.0-128.254.186.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:c1:48:e5:ab:db:1d:39:28:c4:9b:aa:29:4f:14:97:d0:ec: 7a:bb:9a:e7:04:08:d4:c4:27:2a:c8:0a:71:96:7f:21:7e:a2: d4:ff:86:8b:67:35:4d:57:97:6a:fb:ef:87:e5:fa:13:34:2c: 96:6e:ff:11:5d:83:31:e8:b0:7b:30:fa:11:3f:e0:81:a5:bb: 45:1b:1c:2d:e1:86:57:fd:26:7b:b7:71:2a:22:60:74:ed:27: 58:68:d2:29:f0:2b:80:12:e5:30:5b:de:84:34:7f:ca:dc:89: 3a:b1:d4:28:c9:fd:48:b7:90:1c:bb:76:b7:1f:74:80:fe:6e: 0e:0d:56:b9:b7:69:5d:e3:5f:35:dd:dc:5c:7f:b2:a3:6e:e2: 60:aa:84:cf:5d:00:0f:04:e5:5a:d2:ad:0f:7f:6f:cb:f2:f6: 83:4e:26:18:ea:6d:48:c6:2f:f0:a1:e3:b5:f2:64:21:aa:64: 1f:9a:14:42:3f:ed:8d:25:18:39:2d:09:70:3d:2e:31:11:da: 6a:3a:6f:f6:0e:54:a4:e7:d1:45:68:88:64:8e:8b:49:05:a8: f0:c7:36:31:1c:0f:c9:a2:03:74:09:65:19:be:52:32:d0:be: 47:39:3d:44:5e:e3:30:a2:bb:bf:d0:13:ea:99:b6:60:97:56: 52:67:3c:05 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErVBq969xnj3jOg8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YTdiNDMxZmEtZWVjYS00ZGVlLWIyYzgtNmY0ZGM2YjQzOTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoreDZzescjLIhNrO03t1dwMWta136XGzbwt1 j+2Axlirn4XaO3TkMF0DjrYEykOPrGfKX5dyyQxYw638nCWAmPGXfZFon88AKXaY cQgbK23O6Ii7OqICOa555X79Vg3AzJ9fGc0D0meVgtrv0xIMoBTgf65FLwbdoflQ 20LM44qeEQk6N7HwX5S6+blI0+ZtFbvKgghOPlI+KzZtDpiFpTx3NQmd9Hz35FrX D5mdGTT/rsExqYrkEbuQk/qccv1CCiEKdjxWZrR4WqY4eJJVQO5wtM4UzTtSH8Xs kdtfbD8+Z365Lt52b7pJIFCbWzjKXnVgFdIr+zEmPZ1+rRgB8wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIdIrMBzt4Rko/BSp0hEq7LVrCn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvMTlmOTRhMjMtNGNhOS0z MWMwLWI4OWQtYTdlZjNjMWJiMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACA/rkD BACA/rowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEA1sFI5avbHTkoxJuqKU8Ul9Dserua5wQI1MQnKsgKcZZ/ IX6i1P+Gi2c1TVeXavvvh+X6EzQslm7/EV2DMeiwezD6ET/ggaW7RRscLeGGV/0m e7dxKiJgdO0nWGjSKfArgBLlMFvehDR/ytyJOrHUKMn9SLeQHLt2tx90gP5uDg1W ubdpXeNfNd3cXH+yo27iYKqEz10ADwTlWtKtD39vy/L2g04mGOptSMYv8KHjtfJk IapkH5oUQj/tjSUYOS0JcD0uMRHaajpv9g5UpOfRRWiIZI6LSQWo8Mc2MRwPyaID dAllGb5SMtC+Rzk9RF7jMKK7v9AT6pm2YJdWUmc8BQ== -----END CERTIFICATE-----Generated at Sat Aug 23 17:29:33 2025 by rpki-client