$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dea9de0-7411-3dd5-88a3-eefb19300b8c.roa File: 7dea9de0-7411-3dd5-88a3-eefb19300b8c.roa (raw, json) Hash identifier: ayATXSXEBASblgTJpCDWUg/t4+PGoy5QvbvxWUv+3ZI= Subject key identifier: 8A:7D:C8:0B:01:3B:26:6B:35:A9:CC:C3:30:41:6E:D3:A0:22:DB:7B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7350B77BAC08837AC6D17540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dea9de0-7411-3dd5-88a3-eefb19300b8c.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 36622 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b7:7b:ac:08:83:7a:c6:d1:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=1158a31a-cc37-42ae-ad45-e182ba0e6bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:6c:c3:6f:71:ad:75:bd:df:37:a8:c7:4a: fc:d3:20:32:d4:1e:16:ff:b1:06:35:42:ec:02:da: 78:80:05:09:54:f8:25:dc:06:90:cb:46:3c:6c:da: d6:15:4c:56:39:9d:6f:17:dd:9f:0b:97:0d:2f:31: 37:a5:76:1f:87:fc:24:55:96:e9:e5:67:33:9c:ab: 9a:13:4a:ca:84:db:c1:c2:7e:2f:8f:f5:d5:10:52: d4:cb:08:d0:9d:3d:4c:65:97:91:c6:41:d2:de:ee: 34:b5:f0:24:58:0a:5a:67:38:3f:7e:ea:f4:c0:ed: 33:b7:3d:63:7d:3c:88:b1:46:88:e0:5a:c0:7c:d5: 09:91:4c:45:b6:2d:c0:90:65:46:13:f2:d8:66:1d: 40:d6:c8:92:6e:aa:2c:64:e3:45:0d:c4:b8:df:2b: ee:b5:bd:7a:bf:a4:b4:45:77:30:18:0b:14:f1:a4: 74:35:e8:c6:81:05:08:59:fe:68:1e:41:6a:f3:0a: ea:43:e7:03:58:ab:81:18:7a:f6:4a:97:17:60:36: a8:83:be:0e:f5:f6:17:67:ae:f2:2b:0b:b8:26:26: d0:af:12:3b:4d:58:67:3d:17:1a:22:73:60:fa:da: 6d:fe:34:c1:b0:6e:77:22:e5:b7:68:1f:f2:6f:35: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7D:C8:0B:01:3B:26:6B:35:A9:CC:C3:30:41:6E:D3:A0:22:DB:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dea9de0-7411-3dd5-88a3-eefb19300b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:85:32:d4:74:ee:c1:7b:0d:27:5f:69:d8:e6:75:2e:df:50: f5:d1:f8:02:10:de:a1:a2:85:9e:46:48:25:d2:1c:63:07:93: 07:41:ba:f6:3a:79:fb:d1:6a:38:f6:92:f9:8e:eb:27:e3:66: 1a:ea:6b:f2:9b:df:6b:0d:11:0b:1d:eb:55:ad:5a:29:89:88: 65:d6:c5:0d:f3:6f:e6:8c:6e:56:e1:89:c0:48:ce:48:30:22: c7:90:85:34:d6:aa:a5:c5:2b:23:f5:57:d8:5e:ee:f3:d7:35: 82:69:b1:43:c2:e8:33:76:ad:e6:0b:55:6a:f2:e0:f8:55:07: 75:94:a2:df:fc:e6:09:8c:e6:ed:7d:65:09:15:b8:ef:44:11: d7:d6:3a:c2:04:a7:fe:53:36:06:57:47:30:50:76:11:d1:13: 7c:99:f4:89:6c:16:f5:53:7d:a2:0a:3e:bb:86:94:2c:10:f4: 40:e6:80:e8:3b:bf:ec:62:0b:38:ee:1c:c4:7d:68:76:7e:f2: cf:6f:dd:4c:5f:bf:c0:db:08:c9:dc:5a:79:2f:ca:28:b6:f7: 8b:87:ce:0c:34:7c:d8:a3:9e:bc:e2:58:71:d6:b0:3d:34:28: 28:a2:d5:c7:ee:a7:02:7a:8a:23:29:95:8e:1b:60:fa:8c:cc: 4b:64:24:cb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzULd7rAiDesbRdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk MTE1OGEzMWEtY2MzNy00MmFlLWFkNDUtZTE4MmJhMGU2YmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o5sw29xrXW93zeox0r80yAy1B4W/7EGNULs Atp4gAUJVPgl3AaQy0Y8bNrWFUxWOZ1vF92fC5cNLzE3pXYfh/wkVZbp5WcznKua E0rKhNvBwn4vj/XVEFLUywjQnT1MZZeRxkHS3u40tfAkWApaZzg/fur0wO0ztz1j fTyIsUaI4FrAfNUJkUxFti3AkGVGE/LYZh1A1siSbqosZONFDcS43yvutb16v6S0 RXcwGAsU8aR0NejGgQUIWf5oHkFq8wrqQ+cDWKuBGHr2SpcXYDaog74O9fYXZ67y Kwu4JibQrxI7TVhnPRcaInNg+tpt/jTBsG53IuW3aB/ybzV5qQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIp9yAsBOyZrNanMwzBBbtOgItt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2RlYTlkZTAtNzQxMS0z ZGQ1LTg4YTMtZWVmYjE5MzAwYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBthTLUdO7Bew0nX2nY5nUu31D10fgCEN6hooWeRkgl0hxjB5MHQbr2 Onn70Wo49pL5jusn42Ya6mvym99rDRELHetVrVopiYhl1sUN82/mjG5W4YnASM5I MCLHkIU01qqlxSsj9VfYXu7z1zWCabFDwugzdq3mC1Vq8uD4VQd1lKLf/OYJjObt fWUJFbjvRBHX1jrCBKf+UzYGV0cwUHYR0RN8mfSJbBb1U32iCj67hpQsEPRA5oDo O7/sYgs47hzEfWh2fvLPb91MX7/A2wjJ3Fp5L8ootveLh84MNHzYo5684lhx1rA9 NCgootXH7qcCeoojKZWOG2D6jMxLZCTL -----END CERTIFICATE-----Generated at Fri Jul 25 10:52:51 2025 by rpki-client