$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23cef1cf-5840-3e2b-b759-ecc091af4622.roa File: 23cef1cf-5840-3e2b-b759-ecc091af4622.roa (raw, json) Hash identifier: YR3R/MPecd9UEvJyfoDp/NAA97C/96pEZhrRbsFafeI= Subject key identifier: A6:01:7F:BC:31:B2:72:1E:E0:09:49:F7:4A:D3:00:77:34:3C:E7:31 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A66C08C854EE16E9A9E383EC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23cef1cf-5840-3e2b-b759-ecc091af4622.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 396582 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:8c:85:4e:e1:6e:9a:9e:38:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=460666a8-fcb1-4a87-948f-19053da5401b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bd:c1:80:9d:ac:41:59:67:72:2b:a7:65:41: 44:f7:44:93:11:5f:07:90:0e:a5:ee:c1:19:76:5c: b1:fe:07:38:09:29:ff:8d:f4:fa:f2:5c:0b:f3:62: 1b:01:b9:79:76:f8:8c:40:87:cc:56:bd:3a:62:22: 3c:f8:08:74:db:ca:6b:f5:92:be:55:c6:92:c8:2d: bd:2a:09:2f:44:93:f1:32:14:06:a5:cb:a3:84:2f: b4:d5:39:ab:06:85:2e:ea:72:6f:c3:16:ec:d1:1f: 71:32:e0:51:e9:30:1f:a3:5d:de:44:bb:6f:0c:e2: a1:8a:ae:0c:fe:43:0f:a7:d6:fb:d0:f7:c2:72:2d: 12:af:f8:dd:e4:68:7f:cf:1f:50:1b:ad:a7:80:c3: 50:1b:a0:6a:86:29:09:55:9c:b3:49:fe:92:a1:2e: fa:af:74:9e:3a:61:69:77:b3:58:f1:30:3a:3b:55: e5:c6:a7:30:5d:5c:77:8c:31:3f:2f:33:ca:20:f3: 66:15:15:dd:39:6a:4b:f8:8b:a7:c3:e2:88:e9:29: 28:19:d7:26:2d:db:70:33:9a:fd:be:47:ee:19:c3: d3:2f:b5:91:45:f8:34:b4:22:7f:9d:3b:44:53:96: b2:d4:84:41:af:76:40:f3:88:30:8b:9c:97:3f:30: bb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:01:7F:BC:31:B2:72:1E:E0:09:49:F7:4A:D3:00:77:34:3C:E7:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23cef1cf-5840-3e2b-b759-ecc091af4622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6e:50:ce:4d:38:7d:6c:05:21:ce:54:77:2b:c9:7b:92:3f: 05:09:62:ad:2d:85:ef:a8:7d:49:0e:81:99:11:0d:0d:fc:0c: b7:14:56:23:fe:e5:94:8a:f5:d6:ad:3a:99:a0:ff:32:42:64: eb:05:f2:72:8e:3e:c3:2b:35:c5:7c:13:56:6a:18:0b:91:de: 46:30:60:fe:3f:dc:0e:75:da:a8:9a:46:af:5d:df:40:97:eb: a0:ef:59:58:63:31:d2:7f:c5:72:29:9b:31:0f:e8:37:19:a2: 1f:bc:e8:b5:a9:91:d0:7f:fb:fd:72:ac:7a:07:63:96:86:fe: dc:78:f5:dd:49:c8:25:fb:5b:d2:1b:1a:1d:1e:23:7d:40:61: ca:36:e8:68:7a:ee:b1:a5:e5:86:ef:bc:76:c3:87:f1:0d:28: 67:38:23:9f:f4:b2:cb:d8:bc:f2:2f:b3:35:b1:cd:bc:b8:d5: 18:0a:0e:e5:02:7d:e8:3c:e4:68:a0:4f:a7:3b:ec:b9:81:d1: 71:5c:6c:68:13:14:1d:33:58:16:27:31:81:8d:59:6b:ef:39: 4c:64:92:2e:81:3e:6c:ff:0b:6c:54:b4:d7:1d:48:97:f7:b1: 84:ac:c1:e0:20:8d:4f:46:f5:df:c6:36:39:58:91:9d:81:cf: 2b:6d:ca:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwIyFTuFump44PsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk NDYwNjY2YTgtZmNiMS00YTg3LTk0OGYtMTkwNTNkYTU0MDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib3BgJ2sQVlnciunZUFE90STEV8HkA6l7sEZ dlyx/gc4CSn/jfT68lwL82IbAbl5dviMQIfMVr06YiI8+Ah028pr9ZK+VcaSyC29 KgkvRJPxMhQGpcujhC+01TmrBoUu6nJvwxbs0R9xMuBR6TAfo13eRLtvDOKhiq4M /kMPp9b70PfCci0Sr/jd5Gh/zx9QG62ngMNQG6BqhikJVZyzSf6SoS76r3SeOmFp d7NY8TA6O1XlxqcwXVx3jDE/LzPKIPNmFRXdOWpL+Iunw+KI6SkoGdcmLdtwM5r9 vkfuGcPTL7WRRfg0tCJ/nTtEU5ay1IRBr3ZA84gwi5yXPzC79wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKYBf7wxsnIe4AlJ90rTAHc0POcxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjNjZWYxY2YtNTg0MC0z ZTJiLWI3NTktZWNjMDkxYWY0NjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZblDOTTh9bAUhzlR3K8l7kj8FCWKtLYXvqH1JDoGZEQ0N/Ay3FFYj /uWUivXWrTqZoP8yQmTrBfJyjj7DKzXFfBNWahgLkd5GMGD+P9wOddqomkavXd9A l+ug71lYYzHSf8VyKZsxD+g3GaIfvOi1qZHQf/v9cqx6B2OWhv7cePXdScgl+1vS GxodHiN9QGHKNuhoeu6xpeWG77x2w4fxDShnOCOf9LLL2LzyL7M1sc28uNUYCg7l An3oPORooE+nO+y5gdFxXGxoExQdM1gWJzGBjVlr7zlMZJIugT5s/wtsVLTXHUiX 97GErMHgII1PRvXfxjY5WJGdgc8rbcqk -----END CERTIFICATE-----Generated at Wed Jul 23 17:21:29 2025 by rpki-client