$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d2acb60-c56a-3c97-8bd0-b87e057b7d9a.roa File: 2d2acb60-c56a-3c97-8bd0-b87e057b7d9a.roa (raw, json) Hash identifier: wF/rapwXlwryblaDED3X2RUBa1oX48I2uF5Ok/ldBUI= Subject key identifier: 23:DB:0B:9E:C0:8A:A3:CF:60:10:EB:33:0F:7C:69:34:C2:0D:06:1F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A761B5EF03444D4C14B56B340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d2acb60-c56a-3c97-8bd0-b87e057b7d9a.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 396611 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:5e:f0:34:44:d4:c1:4b:56:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=83b33a5f-7ddb-4730-9a03-af89069d667d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:46:a9:dc:8c:1f:8b:72:07:2a:52:14:42:4f: 3a:3c:b4:a1:6a:39:6f:e1:d4:52:6c:26:e5:57:e0: 65:56:a5:be:6a:3a:81:f9:97:ce:08:37:05:e2:2f: 4a:b5:a4:d6:3f:37:65:2b:63:ca:88:bb:d8:4d:cf: 6c:5c:a5:18:d9:5e:36:23:1b:9c:ca:5e:44:32:c8: 17:99:a6:ce:7f:a3:89:c2:00:57:45:ff:22:c2:73: 8e:73:38:29:51:14:04:83:78:8e:6f:eb:ef:be:be: ac:1f:37:e5:77:84:39:eb:f1:ea:5f:8e:9e:3d:db: f4:36:f1:3c:c2:ba:29:cf:9e:49:e1:a1:31:64:06: ea:a6:08:04:9d:44:c4:bd:48:9a:e4:a7:59:23:25: c3:a0:eb:b9:68:e3:3d:4f:44:ee:44:9f:1e:31:d0: 0d:e5:c4:78:4f:6d:93:ea:31:c9:79:96:ce:71:21: e8:a4:8e:7e:29:b3:31:a5:fb:b5:03:94:59:43:31: 03:8b:70:86:b9:c1:5f:2b:7e:20:48:73:7e:e0:3d: 31:ea:39:4f:3b:a1:09:a3:d7:aa:28:6d:eb:f1:d7: ce:c8:a4:cc:80:78:a6:d1:5b:57:c0:ba:33:19:e4: 31:09:54:25:d6:0d:fd:e6:63:0f:33:28:4b:f5:96: cf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DB:0B:9E:C0:8A:A3:CF:60:10:EB:33:0F:7C:69:34:C2:0D:06:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d2acb60-c56a-3c97-8bd0-b87e057b7d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a7:21:93:c0:27:90:0f:e5:de:81:98:b3:99:1b:d1:eb:ed: 35:fd:fd:c6:c4:b5:66:e3:ad:ac:8b:58:a7:c1:94:e4:0a:2c: 2a:61:5d:9a:c3:ea:94:22:86:6c:6c:95:97:88:32:6f:33:06: 8e:c4:d1:3b:c2:72:42:a8:a9:a7:0a:27:f4:3f:29:f7:14:bc: f9:1e:f1:24:52:87:df:d9:07:f1:0d:48:9f:b2:10:1d:c9:7a: 12:55:53:84:f8:30:a4:a9:10:53:0b:9b:fc:1b:ff:43:69:c4: 34:f3:12:0c:3d:f8:f2:f2:e3:04:6b:0b:39:23:1a:85:ec:15: 80:a0:6f:0b:4f:07:50:f6:e4:18:9a:35:8e:3a:c6:5c:c4:5e: 2e:0c:15:fb:87:31:e1:47:0b:42:5b:eb:01:fa:79:a5:b9:7f: 4d:b9:89:c1:79:5b:f1:63:99:62:e6:ee:bb:6a:21:17:85:92: 08:30:83:21:51:d6:03:4d:b5:50:c4:8b:67:81:bb:f6:7a:78: fd:18:84:18:4a:52:df:2e:b4:3a:ee:5d:60:85:6a:71:19:cb: 5c:39:a6:e2:09:cf:eb:e4:80:6c:ce:6c:db:ee:c6:97:d9:de: ac:bb:a8:5a:59:e9:fe:07:ba:00:7c:ab:d7:6e:47:cf:5b:3d: de:cf:22:dc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp2G17wNETUwUtWs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk ODNiMzNhNWYtN2RkYi00NzMwLTlhMDMtYWY4OTA2OWQ2NjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUap3Iwfi3IHKlIUQk86PLShajlv4dRSbCbl V+BlVqW+ajqB+ZfOCDcF4i9KtaTWPzdlK2PKiLvYTc9sXKUY2V42Ixucyl5EMsgX mabOf6OJwgBXRf8iwnOOczgpURQEg3iOb+vvvr6sHzfld4Q56/HqX46ePdv0NvE8 wropz55J4aExZAbqpggEnUTEvUia5KdZIyXDoOu5aOM9T0TuRJ8eMdAN5cR4T22T 6jHJeZbOcSHopI5+KbMxpfu1A5RZQzEDi3CGucFfK34gSHN+4D0x6jlPO6EJo9eq KG3r8dfOyKTMgHim0VtXwLozGeQxCVQl1g395mMPMyhL9ZbPSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCPbC57AiqPPYBDrMw98aTTCDQYfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmQyYWNiNjAtYzU2YS0z Yzk3LThiZDAtYjg3ZTA1N2I3ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCEpyGTwCeQD+XegZizmRvR6+01/f3GxLVm462si1inwZTkCiwqYV2a w+qUIoZsbJWXiDJvMwaOxNE7wnJCqKmnCif0Pyn3FLz5HvEkUoff2QfxDUifshAd yXoSVVOE+DCkqRBTC5v8G/9DacQ08xIMPfjy8uMEaws5IxqF7BWAoG8LTwdQ9uQY mjWOOsZcxF4uDBX7hzHhRwtCW+sB+nmluX9NuYnBeVvxY5li5u67aiEXhZIIMIMh UdYDTbVQxItngbv2enj9GIQYSlLfLrQ67l1ghWpxGctcOabiCc/r5IBszmzb7saX 2d6su6haWen+B7oAfKvXbkfPWz3ezyLc -----END CERTIFICATE-----Generated at Wed Jul 23 23:22:50 2025 by rpki-client