$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac20e86-eefd-3446-a4f9-6714e97d106d.roa File: 3ac20e86-eefd-3446-a4f9-6714e97d106d.roa (raw, json) Hash identifier: 2JQ51vKDggzoCVgEH1qFNhUQ44UBwZ04TDXQj6wbDtw= Subject key identifier: F3:45:C7:36:A2:6D:64:A7:3E:64:AE:1D:36:88:D2:F4:99:B5:9B:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A761B4EC6E826F4174EB76200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac20e86-eefd-3446-a4f9-6714e97d106d.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 396581 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:4e:c6:e8:26:f4:17:4e:b7:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=5c5cd667-704e-4a8f-948e-67f2216f6e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:ca:ed:38:92:c1:b3:7e:74:f2:e2:2b:fc: 3e:d6:aa:f5:de:ab:58:14:f9:c5:72:6d:83:4f:8b: 0a:ae:50:be:a5:a8:fa:86:fc:43:46:32:da:95:82: 6b:83:45:83:58:a8:03:34:73:18:51:dc:37:ff:55: 05:0b:aa:cd:b4:46:af:a3:36:96:12:86:7d:e7:03: 34:74:60:11:d2:05:79:1b:51:4c:61:ee:83:39:63: 20:a2:29:42:41:f9:56:e2:3c:56:69:07:88:7f:0d: 60:7b:35:df:a6:9c:df:44:8d:28:91:37:0a:f7:ce: 2c:24:51:4d:5d:2a:b4:17:3c:39:ec:57:d3:95:73: 0e:e7:57:c5:9b:b3:26:22:34:dd:4d:b9:5c:92:00: 48:9d:6c:c6:d3:2b:11:74:89:07:2b:14:f1:80:a4: 37:21:1b:79:d5:04:a1:cd:b8:66:d3:29:c1:a7:ab: 12:0e:46:b9:93:3a:0f:dd:eb:c3:a5:31:dd:c8:cf: e7:8a:94:2c:c8:ed:61:4f:48:60:3d:77:a3:e7:ba: 72:31:e6:93:32:b2:d0:2a:b4:40:df:51:ed:10:fb: 91:da:28:5c:a5:c5:2c:07:67:53:7e:99:3a:09:b4: 3a:44:7b:e4:06:f1:aa:6e:5a:98:08:ad:91:70:78: aa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:45:C7:36:A2:6D:64:A7:3E:64:AE:1D:36:88:D2:F4:99:B5:9B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac20e86-eefd-3446-a4f9-6714e97d106d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:eb:5b:5e:60:62:63:99:c1:fe:2b:fd:c9:08:6d:ff:56:62: 83:96:d5:7f:ee:27:99:7f:cf:6d:fa:29:e4:e3:cc:67:78:fe: ac:59:11:e6:3b:13:18:fe:a6:53:3b:40:bd:5e:67:46:9a:2f: 94:62:c8:d7:36:30:00:26:2b:22:21:16:f7:66:2d:6d:65:6b: 66:94:c0:8a:a8:18:65:26:92:f0:f5:ef:d7:53:f9:58:e4:20: 19:62:3c:a5:83:0f:79:36:cc:c2:fa:73:82:41:89:e0:d4:fd: c9:57:15:d2:26:ff:77:3e:ed:2f:0a:c8:98:ca:6e:9c:cf:c1: e3:b2:a7:52:5e:24:90:c8:a8:67:93:0f:13:f0:87:55:a8:f7: 60:3c:05:bf:50:a1:5d:f1:94:bd:2d:3e:06:fc:45:a7:b7:55: 2d:21:1a:74:f6:08:fd:3c:82:77:0a:05:31:f2:8c:4e:52:49: fe:d2:ed:db:57:94:fd:0c:89:15:7a:80:8e:cc:7b:30:b9:6b: b1:e0:66:8e:76:6f:cc:57:c2:99:b2:95:8b:73:6c:f0:f3:7f: b9:00:3e:e5:bb:99:27:3f:b6:f2:7d:d1:eb:ee:6d:73:c4:c3: 55:7a:71:21:3f:46:1a:28:8d:27:6c:7c:7a:50:e6:6a:6f:0b: ec:78:05:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp2G07G6Cb0F063YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk NWM1Y2Q2NjctNzA0ZS00YThmLTk0OGUtNjdmMjIxNmY2ZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZrK7TiSwbN+dPLiK/w+1qr13qtYFPnFcm2D T4sKrlC+paj6hvxDRjLalYJrg0WDWKgDNHMYUdw3/1UFC6rNtEavozaWEoZ95wM0 dGAR0gV5G1FMYe6DOWMgoilCQflW4jxWaQeIfw1gezXfppzfRI0okTcK984sJFFN XSq0Fzw57FfTlXMO51fFm7MmIjTdTblckgBInWzG0ysRdIkHKxTxgKQ3IRt51QSh zbhm0ynBp6sSDka5kzoP3evDpTHdyM/nipQsyO1hT0hgPXej57pyMeaTMrLQKrRA 31HtEPuR2ihcpcUsB2dTfpk6CbQ6RHvkBvGqblqYCK2RcHiqswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPNFxzaibWSnPmSuHTaI0vSZtZtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FjMjBlODYtZWVmZC0z NDQ2LWE0ZjktNjcxNGU5N2QxMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCN61teYGJjmcH+K/3JCG3/VmKDltV/7ieZf89t+ink48xneP6sWRHm OxMY/qZTO0C9XmdGmi+UYsjXNjAAJisiIRb3Zi1tZWtmlMCKqBhlJpLw9e/XU/lY 5CAZYjylgw95NszC+nOCQYng1P3JVxXSJv93Pu0vCsiYym6cz8HjsqdSXiSQyKhn kw8T8IdVqPdgPAW/UKFd8ZS9LT4G/EWnt1UtIRp09gj9PIJ3CgUx8oxOUkn+0u3b V5T9DIkVeoCOzHswuWux4GaOdm/MV8KZspWLc2zw83+5AD7lu5knP7byfdHr7m1z xMNVenEhP0YaKI0nbHx6UOZqbwvseAVm -----END CERTIFICATE-----Generated at Wed Jul 23 17:20:02 2025 by rpki-client