$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c8643991-520c-3a83-820e-df5dfd8121e9.roa File: c8643991-520c-3a83-820e-df5dfd8121e9.roa (raw, json) Hash identifier: 1rQ3eIUPxuPyToExaotZX7aM84oHlgUnlJ4y2qVp6Gs= Subject key identifier: 24:9D:3B:FF:7F:7D:88:3E:13:24:8B:A4:00:C4:1F:48:96:69:55:81 Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584B68FCAAFD73F0C8AB561D3080 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c8643991-520c-3a83-820e-df5dfd8121e9.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 213990 IP address blocks: 128.254.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:aa:fd:73:f0:c8:ab:56:1d:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=6b97bef9-65fd-407e-bd81-55553b3e98a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:93:91:46:ed:3a:7f:64:9a:80:70:a7:33:73: bd:7a:aa:91:7d:6a:03:65:14:6a:c5:a6:c1:22:9c: d8:98:21:86:d5:e2:a0:a2:55:df:b5:35:6b:bc:52: c0:11:c7:fc:0e:7d:8d:68:61:1f:81:fe:86:bd:11: 5c:cb:bb:bc:2d:55:79:cf:6f:92:4b:0d:e8:82:d1: 21:2f:10:10:e0:28:0b:17:8f:45:4b:7b:df:17:fb: 3e:ad:59:54:03:4e:7e:74:15:18:b6:4c:5c:06:85: 2f:23:e8:cf:1d:ab:a0:4f:ff:39:a3:8e:92:c7:34: bc:93:cf:f1:00:f1:13:8d:5c:01:1a:b0:27:3d:58: cd:66:5f:bb:80:17:b2:11:b0:52:50:f1:da:10:53: 2c:38:a6:3a:ea:34:0a:d9:74:a9:8a:e5:b0:a5:bd: 9d:be:2b:e4:72:af:a4:d7:b4:71:aa:08:64:d9:f7: 42:82:ad:7d:70:fd:eb:54:c8:a1:f1:81:c2:94:85: 85:a8:80:d7:ae:ba:79:c8:7d:94:25:87:8a:ef:dd: 9f:3c:52:94:c8:30:b2:2e:b9:bc:78:40:fc:36:18: 4a:4e:95:b1:48:92:1a:e3:0a:ad:31:50:10:18:aa: 1c:97:0b:de:70:0b:52:db:2c:92:63:ce:49:90:d7: 01:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9D:3B:FF:7F:7D:88:3E:13:24:8B:A4:00:C4:1F:48:96:69:55:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c8643991-520c-3a83-820e-df5dfd8121e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 128.254.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:f8:35:c7:9d:2f:ab:33:68:0e:c4:bb:53:e8:48:f1:c0:d1: 2e:0e:ab:ad:73:25:5c:7a:0f:60:2f:0a:36:03:c5:b8:89:55: 34:05:67:02:40:e2:3f:18:04:f7:b2:fe:01:69:28:27:5e:b5: ae:63:cd:43:9a:f6:4c:e7:91:4e:34:71:56:ca:b5:65:71:52: a0:a5:c5:b1:40:fc:32:48:8a:75:a9:60:f7:74:99:e1:b3:22: 06:22:02:60:d3:9e:6e:fa:b4:16:84:aa:51:d9:1f:39:16:db: 8c:9b:23:13:91:86:13:23:06:c7:61:f0:ae:d0:ab:00:9d:35: f2:14:c4:34:bb:79:6a:11:e9:9b:c2:8c:03:2d:3b:c0:e5:4e: 92:5b:6a:fb:43:38:8e:6e:e8:49:0e:c4:a3:83:fb:49:8a:36: 67:06:c8:f9:64:b4:0f:31:2e:18:c0:b8:fa:71:d2:30:99:df: ee:4d:f3:7d:37:43:38:e9:4e:67:f9:74:a7:f4:f6:2a:82:56: 85:87:c8:83:5e:a2:8d:19:c1:7f:6c:64:0d:91:29:05:0c:a0: 32:a5:d9:e1:d1:67:17:7f:68:fd:94:43:5a:a9:3b:e5:28:c1: 53:6d:c4:e3:d4:34:98:2f:90:6f:c4:e9:14:48:7e:c2:c9:b1: e1:de:08:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/Kr9c/DIq1YdMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk NmI5N2JlZjktNjVmZC00MDdlLWJkODEtNTU1NTNiM2U5OGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5ORRu06f2SagHCnM3O9eqqRfWoDZRRqxabB IpzYmCGG1eKgolXftTVrvFLAEcf8Dn2NaGEfgf6GvRFcy7u8LVV5z2+SSw3ogtEh LxAQ4CgLF49FS3vfF/s+rVlUA05+dBUYtkxcBoUvI+jPHaugT/85o46SxzS8k8/x APETjVwBGrAnPVjNZl+7gBeyEbBSUPHaEFMsOKY66jQK2XSpiuWwpb2dvivkcq+k 17Rxqghk2fdCgq19cP3rVMih8YHClIWFqIDXrrp5yH2UJYeK792fPFKUyDCyLrm8 eED8NhhKTpWxSJIa4wqtMVAQGKoclwvecAtS2yySY85JkNcB0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSdO/9/fYg+EySLpADEH0iWaVWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvYzg2NDM5OTEtNTIwYy0z YTgzLTgyMGUtZGY1ZGZkODEyMWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP67MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANH4NcedL6szaA7Eu1PoSPHA0S4Oq61zJVx6D2AvCjYDxbiJVTQFZwJA 4j8YBPey/gFpKCdeta5jzUOa9kznkU40cVbKtWVxUqClxbFA/DJIinWpYPd0meGz IgYiAmDTnm76tBaEqlHZHzkW24ybIxORhhMjBsdh8K7QqwCdNfIUxDS7eWoR6ZvC jAMtO8DlTpJbavtDOI5u6EkOxKOD+0mKNmcGyPlktA8xLhjAuPpx0jCZ3+5N8303 QzjpTmf5dKf09iqCVoWHyINeoo0ZwX9sZA2RKQUMoDKl2eHRZxd/aP2UQ1qpO+Uo wVNtxOPUNJgvkG/E6RRIfsLJseHeCDM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:12:29 2025 by rpki-client