$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631fa7a2-42d1-3539-b100-e323154e899a.roa File: 631fa7a2-42d1-3539-b100-e323154e899a.roa (raw, json) Hash identifier: 3jPEO+WvLrKm9/9X92X4nrHEaBOz/f0oi2rCN+cr8RE= Subject key identifier: 19:81:3D:EA:11:17:A3:7B:67:8E:57:77:04:54:69:A5:13:70:8B:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7350B8596312F90F6674AA40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631fa7a2-42d1-3539-b100-e323154e899a.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 396546 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b8:59:63:12:f9:0f:66:74:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=026f64d2-c05b-44a5-93fe-a15adfbaa122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:76:90:4c:3b:08:af:36:82:48:94:5e:1b:fc: 3d:d3:a4:0e:39:7b:48:c6:d0:d4:e7:ef:9b:4f:37: ba:1f:22:3b:f3:aa:79:09:0c:e5:c2:d0:86:20:35: c7:ce:03:73:43:e0:ea:9e:0f:d7:f9:9c:e2:18:06: 0b:ed:7a:f9:81:31:81:ca:5c:a4:15:71:c2:e4:67: aa:87:46:5b:c7:f6:59:57:d8:0f:9f:49:7d:1e:f2: 23:e6:ca:3d:ba:2c:1c:a6:04:94:0f:8a:96:c8:03: 57:4d:fe:27:05:4d:22:6c:c0:74:df:cc:13:9a:af: bb:ff:61:00:36:e5:6c:fb:77:99:35:f3:f8:c2:04: 4c:91:fe:e7:df:f6:87:29:91:cd:b4:e2:1a:2a:77: 0f:61:24:92:26:1e:74:b7:33:7c:32:0a:fd:ff:22: 96:44:78:b6:4d:b3:c0:2c:f7:5c:bf:40:bc:94:65: b0:66:c6:ec:54:e5:02:41:6d:6b:28:da:21:11:79: 33:f7:37:d9:ae:7b:2f:dc:e5:8f:da:e2:35:0e:8d: 77:2a:40:2f:08:c4:b6:f6:80:a6:91:c0:84:0f:d2: b0:2b:bc:6f:6c:5e:1f:e2:91:d2:c6:33:11:91:03: e4:20:b9:46:f5:2b:48:6e:70:0a:18:e4:63:f2:c5: 28:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:81:3D:EA:11:17:A3:7B:67:8E:57:77:04:54:69:A5:13:70:8B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631fa7a2-42d1-3539-b100-e323154e899a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:fc:0d:8e:5c:cb:f2:f0:14:4a:f7:2e:e1:db:02:55:55:50: b2:12:95:1b:9e:d8:a2:dd:c5:9a:90:84:4f:ab:20:8e:ea:27: c4:05:06:78:67:3d:df:b6:7e:fd:62:35:ed:7d:36:f3:aa:97: 16:1d:9a:9f:07:21:94:dd:01:84:73:68:3b:c8:ba:e8:80:95: b3:f7:d1:44:68:bd:ba:bb:df:ce:68:ce:76:e0:71:82:d5:71: e3:81:5c:e6:3e:fd:ed:16:b5:fd:2a:8f:92:6a:b8:68:42:f1: fb:f9:af:8e:cf:26:0c:d2:2f:86:a8:15:3b:ef:e1:97:03:94: a1:a2:66:aa:57:a2:de:44:70:9e:a6:8a:10:12:31:01:5f:79: 06:9e:c4:a9:b3:61:6d:dd:8d:4f:a5:17:e9:56:6d:d3:c0:9f: 0d:e2:53:ae:fc:56:d8:35:77:aa:3d:47:a7:ec:37:ce:bc:e7: 58:29:23:cf:25:dc:43:4c:13:9f:1e:b5:cd:90:9e:3d:89:da: 49:43:75:b6:31:b4:9a:b0:37:ea:d4:e1:ed:70:0e:bc:c5:4f: 3a:de:37:91:67:24:91:e5:a7:10:46:e5:df:fb:b4:ef:50:74: 25:a9:e9:e7:cc:ee:f4:4a:ee:1c:63:de:53:b9:aa:ea:43:c8: 71:6a:7f:79 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzULhZYxL5D2Z0qkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk MDI2ZjY0ZDItYzA1Yi00NGE1LTkzZmUtYTE1YWRmYmFhMTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHaQTDsIrzaCSJReG/w906QOOXtIxtDU5++b Tze6HyI786p5CQzlwtCGIDXHzgNzQ+Dqng/X+ZziGAYL7Xr5gTGBylykFXHC5Geq h0Zbx/ZZV9gPn0l9HvIj5so9uiwcpgSUD4qWyANXTf4nBU0ibMB038wTmq+7/2EA NuVs+3eZNfP4wgRMkf7n3/aHKZHNtOIaKncPYSSSJh50tzN8Mgr9/yKWRHi2TbPA LPdcv0C8lGWwZsbsVOUCQW1rKNohEXkz9zfZrnsv3OWP2uI1Do13KkAvCMS29oCm kcCED9KwK7xvbF4f4pHSxjMRkQPkILlG9StIbnAKGORj8sUoAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBmBPeoRF6N7Z45XdwRUaaUTcIuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjMxZmE3YTItNDJkMS0z NTM5LWIxMDAtZTMyMzE1NGU4OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7/A2OXMvy8BRK9y7h2wJVVVCyEpUbntii3cWakIRPqyCO6ifEBQZ4 Zz3ftn79YjXtfTbzqpcWHZqfByGU3QGEc2g7yLrogJWz99FEaL26u9/OaM524HGC 1XHjgVzmPv3tFrX9Ko+SarhoQvH7+a+OzyYM0i+GqBU77+GXA5ShomaqV6LeRHCe pooQEjEBX3kGnsSps2Ft3Y1PpRfpVm3TwJ8N4lOu/FbYNXeqPUen7DfOvOdYKSPP JdxDTBOfHrXNkJ49idpJQ3W2MbSasDfq1OHtcA68xU863jeRZySR5acQRuXf+7Tv UHQlqennzO70Su4cY95TuarqQ8hxan95 -----END CERTIFICATE-----Generated at Wed Jul 23 17:17:50 2025 by rpki-client