$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a1ab62e-04ff-3dc0-9bc5-3c75b1ad944e.roa File: 1a1ab62e-04ff-3dc0-9bc5-3c75b1ad944e.roa (raw, json) Hash identifier: vIpZyQz3tyiSlz5h1HFsHRjWGTd1WteNfgW3BzKY+Qw= Subject key identifier: 90:A7:8C:EC:CE:16:D0:65:91:10:0E:80:AE:3E:8C:B9:46:4B:A8:35 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A6290D4FB5D30F50DAB5BA546 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a1ab62e-04ff-3dc0-9bc5-3c75b1ad944e.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 396552 IP address blocks: 192.12.94.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:d4:fb:5d:30:f5:0d:ab:5b:a5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=9dd362c8-b827-48f9-ada6-0c6567f1ec33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:b9:72:e0:57:3b:4f:89:1d:27:43:5b:be: b1:02:61:85:52:ce:20:b1:c8:b2:f2:9e:46:33:b8: d4:cb:eb:34:ee:d9:b0:49:53:51:ee:26:6c:45:2a: dc:27:ce:9d:97:81:98:db:11:95:18:25:14:4a:37: c6:65:83:35:30:08:23:ea:74:c1:6d:c5:93:cc:3f: 9f:3c:63:06:e4:d8:a5:0a:26:fb:cc:42:85:54:e0: fe:16:c4:88:9e:67:5b:f1:b0:ab:92:b5:7b:99:07: 99:38:b2:f0:fd:27:86:b7:3c:6d:a7:a3:9f:12:dd: 99:6b:8f:16:6f:58:ad:8a:8b:88:73:45:cc:66:1c: 36:18:6f:ae:20:cc:1e:f5:79:cf:da:68:e4:a6:65: 42:95:ea:12:a4:78:41:42:1a:5a:b2:55:59:55:35: 6d:47:1d:68:53:92:ef:85:83:64:51:3b:ea:4b:83: e8:da:3d:33:98:e5:ed:e6:df:16:5a:df:7f:45:e9: f5:ff:ad:d5:f7:f3:ee:fe:da:16:c4:3d:ce:2f:a6: bc:ed:02:1d:0a:7c:89:14:24:4d:d1:4b:e3:df:13: 8a:88:8a:77:7b:7e:ab:5d:3e:64:f9:f1:51:6d:6e: 14:76:3e:60:c4:42:c8:5a:4f:1d:a4:21:a0:ff:e8: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A7:8C:EC:CE:16:D0:65:91:10:0E:80:AE:3E:8C:B9:46:4B:A8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a1ab62e-04ff-3dc0-9bc5-3c75b1ad944e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3e:91:f3:52:29:7f:e7:da:92:b2:37:4f:65:c0:d6:32:83: b4:ac:16:80:01:6f:06:83:e8:6b:8e:7d:99:2d:3e:9b:5e:28: 15:82:20:f7:d9:e5:8f:01:19:c3:97:dd:10:13:47:94:af:0a: 07:35:ad:c8:aa:ad:25:89:0c:f3:41:e9:5a:c4:3b:24:f2:2f: d4:6d:8c:d5:82:f7:ed:04:c3:cc:02:58:e2:93:1e:fa:7f:86: ad:2f:b4:6c:98:96:36:c4:d9:5b:6b:5b:e7:90:b9:0e:af:b7: ed:74:04:7b:1f:e2:1a:6f:f5:48:bc:26:d0:b3:c8:6d:2c:39: 0d:41:50:e0:b2:a0:5f:95:cb:2f:11:35:64:74:ce:72:50:91: 26:46:84:56:44:71:70:b3:fd:03:6f:dd:bf:80:b5:ac:53:55: a6:41:85:3a:f4:e2:17:8e:a2:b8:ce:b8:0e:ff:1f:60:24:5b: 82:9e:6e:17:80:cd:5a:28:d5:f7:dc:f6:2e:73:de:89:51:ab: 6a:54:f2:25:26:55:fa:82:5d:c8:c7:ca:c1:9d:6d:2b:32:15: 0d:0e:9f:00:0b:0d:6b:39:6a:0a:8a:1d:13:22:7b:f1:05:e4: 4e:57:d1:72:ca:f0:fa:17:1d:66:bf:7d:d6:ac:b0:b8:36:95: b3:4f:5a:f9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpikNT7XTD1DatbpUYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk OWRkMzYyYzgtYjgyNy00OGY5LWFkYTYtMGM2NTY3ZjFlYzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG25cuBXO0+JHSdDW76xAmGFUs4gsciy8p5G M7jUy+s07tmwSVNR7iZsRSrcJ86dl4GY2xGVGCUUSjfGZYM1MAgj6nTBbcWTzD+f PGMG5NilCib7zEKFVOD+FsSInmdb8bCrkrV7mQeZOLLw/SeGtzxtp6OfEt2Za48W b1itiouIc0XMZhw2GG+uIMwe9XnP2mjkpmVCleoSpHhBQhpaslVZVTVtRx1oU5Lv hYNkUTvqS4Po2j0zmOXt5t8WWt9/Ren1/63V9/Pu/toWxD3OL6a87QIdCnyJFCRN 0Uvj3xOKiIp3e36rXT5k+fFRbW4Udj5gxELIWk8dpCGg/+hMcQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJCnjOzOFtBlkRAOgK4+jLlGS6g1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWExYWI2MmUtMDRmZi0z ZGMwLTliYzUtM2M3NWIxYWQ5NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYPpHzUil/59qSsjdPZcDWMoO0rBaAAW8Gg+hrjn2ZLT6bXigVgiD3 2eWPARnDl90QE0eUrwoHNa3Iqq0liQzzQelaxDsk8i/UbYzVgvftBMPMAljikx76 f4atL7RsmJY2xNlba1vnkLkOr7ftdAR7H+Iab/VIvCbQs8htLDkNQVDgsqBflcsv ETVkdM5yUJEmRoRWRHFws/0Db92/gLWsU1WmQYU69OIXjqK4zrgO/x9gJFuCnm4X gM1aKNX33PYuc96JUatqVPIlJlX6gl3Ix8rBnW0rMhUNDp8ACw1rOWoKih0TInvx BeROV9FyyvD6Fx1mv33WrLC4NpWzT1r5 -----END CERTIFICATE-----Generated at Wed Jul 23 17:11:41 2025 by rpki-client