$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68ead018-a765-31a8-b426-f20084d4017a.roa File: 68ead018-a765-31a8-b426-f20084d4017a.roa (raw, json) Hash identifier: BgjisfNTb6jDM9BPWp86pUwJf57w19u2sHEcXt4FhBY= Subject key identifier: 7D:C2:9F:81:D3:4B:9B:E8:D6:DA:2F:57:3C:E2:52:A3:3E:59:28:02 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A6290C7F09C21C46B7AC2DF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68ead018-a765-31a8-b426-f20084d4017a.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 27544 IP address blocks: 192.12.94.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:c7:f0:9c:21:c4:6b:7a:c2:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=01e6406c-0d36-4d8f-a6e7-a9a06538c1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:6f:89:6e:ad:8e:7c:12:92:d3:10:94:da: bf:28:2d:65:b1:7d:20:e4:a8:60:1c:f4:09:84:73: 5d:e4:a1:13:97:bc:90:08:6a:30:b9:8e:a2:00:bd: 2b:95:bb:6c:86:59:a6:13:f9:4c:f5:89:ed:0e:48: 59:d4:02:24:b0:e3:67:c1:05:2e:10:ce:62:83:14: 53:07:73:26:3b:90:5a:71:23:b9:88:16:a7:5d:f4: 9e:7c:51:fe:f0:68:57:ab:1e:4d:f4:ba:34:5f:1b: ad:9a:b4:49:58:95:aa:7d:12:95:35:0e:97:8c:e4: 64:53:e1:4d:6c:8b:c5:95:d1:a4:60:eb:d6:79:64: b0:cf:62:70:4f:25:e1:c6:09:ac:f0:19:74:55:2f: 51:7d:77:ab:d4:dd:10:0d:af:03:7f:48:1b:a1:b2: 7f:4d:38:61:8d:34:20:af:c4:8c:39:64:7b:24:09: 62:5c:7d:41:ed:91:6e:e4:91:ba:41:3f:04:12:73: 1e:8a:1b:f3:91:a5:db:38:ae:e6:2f:d8:b8:0c:f5: 39:bc:c8:46:43:8f:80:64:e2:73:35:ac:aa:bf:f6: 0c:da:51:61:7e:97:9d:2b:31:8b:0f:6d:72:b5:89: fb:ae:17:44:63:4d:d0:a1:0a:de:78:72:93:3d:1f: e4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C2:9F:81:D3:4B:9B:E8:D6:DA:2F:57:3C:E2:52:A3:3E:59:28:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68ead018-a765-31a8-b426-f20084d4017a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:1b:6a:b0:31:b2:bb:bb:79:6b:b3:22:65:56:02:00:58:b6: 1a:94:64:01:20:d1:75:d1:59:b5:98:68:8f:96:03:1e:d6:88: 7c:69:7d:9f:31:03:4f:fb:a6:61:e7:7d:37:d4:74:f6:00:a8: 17:e5:01:82:82:10:3b:97:87:c0:56:7d:b8:a3:e3:b4:e2:b9: c9:83:75:62:46:21:6e:1c:56:04:8f:52:49:8f:0e:ad:08:ff: 8a:96:7b:40:60:e7:60:2a:20:50:5a:a6:28:2e:b4:3f:5e:ad: b1:51:34:44:11:a3:04:46:03:9d:67:2c:5b:ef:ae:d7:1a:7c: 5a:93:27:50:fc:a5:56:30:44:e9:b7:b6:01:3f:63:78:76:18: 85:40:ce:1b:b7:5e:22:04:c3:76:fe:72:59:92:af:a8:64:53: a4:b0:23:89:c5:d1:6f:3f:16:83:98:16:8d:94:2a:1b:2e:c8: 9a:40:ab:4d:da:8a:21:42:0d:1a:c4:f0:c7:e4:b6:7e:c1:9a: 38:da:6e:ae:14:0b:a0:08:5a:50:22:c6:24:e9:9c:51:e6:38: 99:3a:e8:88:95:c5:a0:d7:e3:1d:b5:18:fe:38:9a:d4:3f:74: 42:40:81:e2:44:e2:03:70:59:45:fe:3a:31:7f:c2:12:4d:03: 5f:4a:3e:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpikMfwnCHEa3rC3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MDFlNjQwNmMtMGQzNi00ZDhmLWE2ZTctYTlhMDY1MzhjMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9tviW6tjnwSktMQlNq/KC1lsX0g5KhgHPQJ hHNd5KETl7yQCGowuY6iAL0rlbtshlmmE/lM9YntDkhZ1AIksONnwQUuEM5igxRT B3MmO5BacSO5iBanXfSefFH+8GhXqx5N9Lo0XxutmrRJWJWqfRKVNQ6XjORkU+FN bIvFldGkYOvWeWSwz2JwTyXhxgms8Bl0VS9RfXer1N0QDa8Df0gbobJ/TThhjTQg r8SMOWR7JAliXH1B7ZFu5JG6QT8EEnMeihvzkaXbOK7mL9i4DPU5vMhGQ4+AZOJz Nayqv/YM2lFhfpedKzGLD21ytYn7rhdEY03QoQreeHKTPR/kIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH3Cn4HTS5vo1tovVzziUqM+WSgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjhlYWQwMTgtYTc2NS0z MWE4LWI0MjYtZjIwMDg0ZDQwMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCaG2qwMbK7u3lrsyJlVgIAWLYalGQBINF10Vm1mGiPlgMe1oh8aX2f MQNP+6Zh53031HT2AKgX5QGCghA7l4fAVn24o+O04rnJg3ViRiFuHFYEj1JJjw6t CP+KlntAYOdgKiBQWqYoLrQ/Xq2xUTREEaMERgOdZyxb767XGnxakydQ/KVWMETp t7YBP2N4dhiFQM4bt14iBMN2/nJZkq+oZFOksCOJxdFvPxaDmBaNlCobLsiaQKtN 2oohQg0axPDH5LZ+wZo42m6uFAugCFpQIsYk6ZxR5jiZOuiIlcWg1+MdtRj+OJrU P3RCQIHiROIDcFlF/joxf8ISTQNfSj7i -----END CERTIFICATE-----Generated at Wed Jul 23 17:19:25 2025 by rpki-client