$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fa97136-fd6b-3b17-a4e0-17e953cd8a58.roa File: 2fa97136-fd6b-3b17-a4e0-17e953cd8a58.roa (raw, json) Hash identifier: +sFXu4QPYdi6nmbt/L3hmTob7fEeMFwAIvRBxOJYT8M= Subject key identifier: FC:E4:64:A6:EA:13:FA:0E:8D:C7:AD:CD:84:03:00:A6:7F:85:D8:8F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A761B5DC8387DC94D89E6E3C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fa97136-fd6b-3b17-a4e0-17e953cd8a58.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 211369 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:5d:c8:38:7d:c9:4d:89:e6:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=0e145e49-5596-4069-b8e1-1125332a8d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:53:1c:66:67:43:6d:1e:90:b2:27:15:56:8d: 81:04:00:83:87:ab:7b:b0:30:91:61:dd:5b:15:6e: de:ab:6f:1b:96:07:ea:19:84:c0:04:36:74:21:94: 59:39:80:a2:b7:37:7a:47:58:99:ac:54:12:72:2c: 77:c9:dc:f3:bd:5d:68:fc:5d:0f:38:86:d5:84:8a: 40:c9:38:b9:39:00:d0:07:e2:d4:3f:07:89:c3:de: 4b:f2:5c:55:48:38:55:87:a3:1e:83:1b:33:13:48: dc:ef:d1:ee:0e:7b:35:69:27:81:e8:40:82:9f:d4: 8e:1b:25:61:2a:20:2a:be:48:ed:23:b3:a4:93:b3: 52:12:16:78:9f:63:15:43:37:90:85:d9:7e:15:87: f7:8e:4c:cc:1a:06:62:f1:10:91:9a:7b:3c:c4:c0: 81:eb:9a:13:c5:c8:e0:36:1f:46:a7:9c:e1:ab:c4: 88:be:a0:fc:c3:71:dd:35:16:35:fb:50:9f:1b:43: 45:c1:16:cc:0f:de:00:45:1a:9d:92:77:7c:87:b1: dd:a7:ab:ea:47:ca:5a:cd:2c:e0:5e:02:c5:c9:df: dd:1d:92:45:f8:4d:ad:de:23:fd:a1:d3:82:1c:63: 8b:e9:96:56:c0:b5:82:ee:87:43:37:7c:64:2f:6a: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E4:64:A6:EA:13:FA:0E:8D:C7:AD:CD:84:03:00:A6:7F:85:D8:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fa97136-fd6b-3b17-a4e0-17e953cd8a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:87:ae:bf:03:2a:15:f5:95:78:92:d3:c7:85:23:04:ea:21: 23:7a:01:24:06:1a:46:0b:df:60:e7:fa:83:a7:2c:61:1a:c7: 1b:15:66:7d:06:ea:84:14:20:95:af:d8:0e:aa:7f:c1:1b:80: f2:90:81:5c:01:ac:5b:70:d5:df:8a:95:78:78:c1:bc:31:72: 07:3d:52:b2:b2:e4:da:4a:7d:79:21:4a:85:36:fe:bd:a3:bf: 06:75:5e:cb:52:75:16:13:f6:61:da:90:5b:3d:f3:46:80:47: 00:45:de:88:7f:84:df:2a:af:c9:b0:eb:de:96:be:8d:de:0a: 58:65:cc:a2:52:90:d6:43:b5:d1:85:a7:a3:b2:2a:07:76:69: a3:ec:98:9a:46:13:9a:75:f5:45:3c:b7:4d:0d:35:ce:c4:48: 1d:e9:71:9a:46:d4:ed:1e:1a:12:e1:3b:c6:a6:c0:b0:72:c9: c5:f3:87:65:a3:19:da:d7:f9:21:90:cc:de:28:b3:93:99:3a: b5:49:63:0e:04:16:bb:8b:74:22:1a:a6:80:3c:b3:b3:9e:38: fb:47:6a:d7:d4:ff:13:a5:a7:fb:7e:20:f1:30:63:af:1d:cd: 25:c8:d4:76:17:fa:a4:3c:24:59:39:cd:66:62:9c:8a:4e:ce: 88:9a:f8:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp2G13IOH3JTYnm48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk MGUxNDVlNDktNTU5Ni00MDY5LWI4ZTEtMTEyNTMzMmE4ZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1McZmdDbR6QsicVVo2BBACDh6t7sDCRYd1b FW7eq28blgfqGYTABDZ0IZRZOYCitzd6R1iZrFQScix3ydzzvV1o/F0POIbVhIpA yTi5OQDQB+LUPweJw95L8lxVSDhVh6MegxszE0jc79HuDns1aSeB6ECCn9SOGyVh KiAqvkjtI7Okk7NSEhZ4n2MVQzeQhdl+FYf3jkzMGgZi8RCRmns8xMCB65oTxcjg Nh9Gp5zhq8SIvqD8w3HdNRY1+1CfG0NFwRbMD94ARRqdknd8h7Hdp6vqR8pazSzg XgLFyd/dHZJF+E2t3iP9odOCHGOL6ZZWwLWC7odDN3xkL2pmfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPzkZKbqE/oOjcetzYQDAKZ/hdiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmZhOTcxMzYtZmQ2Yi0z YjE3LWE0ZTAtMTdlOTUzY2Q4YTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC/h66/AyoV9ZV4ktPHhSME6iEjegEkBhpGC99g5/qDpyxhGscbFWZ9 BuqEFCCVr9gOqn/BG4DykIFcAaxbcNXfipV4eMG8MXIHPVKysuTaSn15IUqFNv69 o78GdV7LUnUWE/Zh2pBbPfNGgEcARd6If4TfKq/JsOvelr6N3gpYZcyiUpDWQ7XR haejsioHdmmj7JiaRhOadfVFPLdNDTXOxEgd6XGaRtTtHhoS4TvGpsCwcsnF84dl oxna1/khkMzeKLOTmTq1SWMOBBa7i3QiGqaAPLOznjj7R2rX1P8Tpaf7fiDxMGOv Hc0lyNR2F/qkPCRZOc1mYpyKTs6ImvgY -----END CERTIFICATE-----Generated at Wed Jul 23 17:14:00 2025 by rpki-client