$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b1a599-8bac-3ad4-93ce-9fc049547805.roa File: 01b1a599-8bac-3ad4-93ce-9fc049547805.roa (raw, json) Hash identifier: w9gNM2LNhYv6PDH3YiNKM2BGcU0kVM2/7iTsHSsdwE4= Subject key identifier: 2A:39:8D:9D:17:32:A2:47:A5:A2:30:19:DE:18:03:97:CB:A5:F1:82 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7350B9EA93AB56DF89812D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b1a599-8bac-3ad4-93ce-9fc049547805.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 36620 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b9:ea:93:ab:56:df:89:81:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=cc9b2737-8561-4505-ba98-1fdbacf6fd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:8d:7c:0c:a7:62:84:de:63:66:2e:0b:05: 66:3c:04:0d:8e:d8:23:1a:72:0e:d6:90:da:70:ff: 18:be:23:f3:82:93:ce:c9:2f:2c:29:11:fd:1f:45: a9:1a:f2:b3:fa:5b:44:4d:eb:06:ef:9b:fa:7b:90: 71:ec:03:b7:3c:f5:f9:39:7e:40:f4:62:09:ac:e6: 1d:6e:62:fb:8c:cd:07:87:b1:db:a3:36:65:b1:44: f8:20:b2:3e:22:71:18:81:cb:66:0c:14:7b:a6:c0: 6b:79:82:2e:0f:87:34:c3:02:57:37:f7:a4:8f:3f: 0e:1f:ca:80:6e:07:b7:db:ab:9c:5d:19:7b:3b:f4: 3b:9c:71:56:f4:21:fc:bc:18:93:a5:34:86:5a:82: 07:96:51:cf:62:9c:53:ab:2f:ea:9a:05:62:6f:d2: 2b:2d:ae:46:66:33:b3:81:45:f4:a1:2f:68:2f:81: f7:cc:c0:37:92:db:50:c3:4e:dc:1f:7d:2c:94:1c: e6:b8:46:81:1d:0a:6d:da:8d:b8:7f:b8:0a:0c:2f: 6f:86:e1:63:f9:c3:e2:c3:34:64:b1:9f:d7:35:5c: 6f:2b:22:50:70:48:56:62:63:13:e4:d9:59:d4:4c: 07:54:3c:d9:3a:10:4a:b6:df:88:ec:b9:ef:f3:59: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:39:8D:9D:17:32:A2:47:A5:A2:30:19:DE:18:03:97:CB:A5:F1:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b1a599-8bac-3ad4-93ce-9fc049547805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:37:48:ae:e7:37:3a:67:45:c9:b3:da:59:2f:5c:84:ff:eb: e9:0d:e9:cd:7e:a3:2f:28:18:07:5b:c5:a3:ba:cb:68:d3:19: 6a:37:e0:8d:b4:0f:42:ac:03:53:71:c4:58:7f:91:88:66:1e: ff:c4:33:8d:59:31:a8:b4:09:c0:d0:79:2a:cf:1a:0a:28:a8: 81:b9:d6:28:9d:39:f1:cb:64:6b:2e:38:a0:07:03:13:4b:3e: 98:de:c7:ff:81:2f:68:8e:2a:69:41:47:45:47:b7:58:a4:cd: 51:26:9e:34:36:da:7d:1e:51:55:6f:8d:38:eb:08:38:f0:95: ed:27:e3:90:37:d8:65:63:bd:73:45:ac:fa:a2:b5:cc:dc:a4: 6c:58:d3:50:d1:b2:cb:82:8d:36:63:99:cd:c8:0b:05:6a:4d: 16:32:42:0f:5f:c8:00:3c:79:73:3f:2c:72:2f:47:82:dd:86: 45:34:ad:5b:b0:02:90:af:ba:c0:58:cc:57:fd:72:fd:6e:d8: db:35:00:ef:75:9a:71:02:c7:e9:29:56:b3:6f:13:28:20:65: 4c:25:7f:6d:8f:f0:6f:db:75:fe:23:d2:f5:0b:b1:8d:b0:fe: e2:5c:e7:98:5a:3f:4b:7c:ee:33:f2:74:52:45:8d:13:9c:73: 3e:01:e2:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzULnqk6tW34mBLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk Y2M5YjI3MzctODU2MS00NTA1LWJhOTgtMWZkYmFjZjZmZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSaNfAynYoTeY2YuCwVmPAQNjtgjGnIO1pDa cP8YviPzgpPOyS8sKRH9H0WpGvKz+ltETesG75v6e5Bx7AO3PPX5OX5A9GIJrOYd bmL7jM0Hh7HbozZlsUT4ILI+InEYgctmDBR7psBreYIuD4c0wwJXN/ekjz8OH8qA bge326ucXRl7O/Q7nHFW9CH8vBiTpTSGWoIHllHPYpxTqy/qmgVib9IrLa5GZjOz gUX0oS9oL4H3zMA3kttQw07cH30slBzmuEaBHQpt2o24f7gKDC9vhuFj+cPiwzRk sZ/XNVxvKyJQcEhWYmMT5NlZ1EwHVDzZOhBKtt+I7Lnv81k+zwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCo5jZ0XMqJHpaIwGd4YA5fLpfGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDFiMWE1OTktOGJhYy0z YWQ0LTkzY2UtOWZjMDQ5NTQ3ODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCmN0iu5zc6Z0XJs9pZL1yE/+vpDenNfqMvKBgHW8Wjusto0xlqN+CN tA9CrANTccRYf5GIZh7/xDONWTGotAnA0HkqzxoKKKiBudYonTnxy2RrLjigBwMT Sz6Y3sf/gS9ojippQUdFR7dYpM1RJp40Ntp9HlFVb4046wg48JXtJ+OQN9hlY71z Raz6orXM3KRsWNNQ0bLLgo02Y5nNyAsFak0WMkIPX8gAPHlzPyxyL0eC3YZFNK1b sAKQr7rAWMxX/XL9btjbNQDvdZpxAsfpKVazbxMoIGVMJX9tj/Bv23X+I9L1C7GN sP7iXOeYWj9LfO4z8nRSRY0TnHM+AeL0 -----END CERTIFICATE-----Generated at Wed Jul 23 17:19:32 2025 by rpki-client