$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/955d1222-ee4c-3737-9535-c264a4417a71.roa File: 955d1222-ee4c-3737-9535-c264a4417a71.roa (raw, json) Hash identifier: wfohnohSH4iNC3af7l/RJ18s2jnyCnarXEWBjopxJDY= Subject key identifier: B6:23:94:43:F9:38:71:F8:59:C1:CF:76:68:9A:D4:94:98:90:8E:53 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5335ADBA46C87EC087C4AE40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/955d1222-ee4c-3737-9535-c264a4417a71.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 397211 IP address blocks: 192.42.174.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:ad:ba:46:c8:7e:c0:87:c4:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=61b4663d-3c2e-48da-8307-2cb1635e3da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e0:f6:4b:8b:cf:82:11:c5:56:9f:e1:32:21: 3b:76:41:6c:20:a7:80:aa:4f:00:18:30:1c:db:77: f1:92:81:21:00:84:cc:dd:c0:09:c6:80:39:af:31: 4f:91:76:66:78:69:2c:32:9b:49:77:03:a9:eb:f0: db:35:89:2f:14:e9:2c:b4:c6:3d:96:ee:3a:ef:e0: eb:c9:55:64:97:46:5a:1f:22:ec:46:51:ff:3b:87: a2:85:e7:6a:91:37:e6:68:1c:70:f1:38:aa:0d:41: 8b:b0:5a:34:a6:69:37:3a:58:13:34:6d:b8:5d:86: 91:4a:be:d7:b7:72:4a:74:11:3d:cb:fb:75:a6:21: f5:46:2d:0a:96:a9:2b:df:96:3c:63:68:c6:9d:76: 61:e2:7d:2b:26:61:83:f5:22:f6:b7:f2:79:dc:2e: da:77:cc:5e:a8:67:49:ba:94:da:e2:bc:19:c5:67: 36:be:1a:35:2a:db:7e:5c:11:15:bf:91:1d:a6:88: 10:9d:1a:22:dc:07:b0:c7:73:1d:75:99:d1:40:70: 62:b1:43:f6:10:95:8c:16:11:1a:33:42:40:fb:1f: 29:83:fd:01:69:e3:26:8b:bf:7d:c5:46:1a:46:be: 24:11:36:48:c9:08:1e:b3:24:22:74:ef:70:d2:bb: fe:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:23:94:43:F9:38:71:F8:59:C1:CF:76:68:9A:D4:94:98:90:8E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/955d1222-ee4c-3737-9535-c264a4417a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8c:69:e1:4c:04:79:2b:14:fc:a8:3d:3c:fc:64:8a:2d:79: fe:70:22:85:d2:4b:75:8e:18:ee:58:1d:80:3e:14:92:4d:68: 3f:9e:b5:64:80:b5:46:3e:1a:6e:cb:14:ae:23:2c:8f:28:b0: 87:51:4a:16:fa:7a:01:15:60:53:f3:09:61:f2:ae:57:56:d7: ba:bc:fa:4e:97:88:73:e9:9f:86:3b:15:57:da:ea:7e:5f:5f: d9:19:2c:63:da:1f:73:df:ac:6b:6a:69:f9:2e:85:f2:ac:c3: 06:21:2d:b2:8e:9a:ba:fb:29:68:db:4a:5c:18:af:fd:9a:ab: 80:4c:d5:f1:7e:5b:fd:18:f0:99:6c:f0:89:73:8d:64:bc:c7: a6:c5:6e:a7:3e:b3:05:06:d3:30:fc:d0:4f:bf:93:a4:61:58: 67:cf:c8:14:14:22:7c:4e:d9:f1:a3:d9:be:7f:73:98:4d:52: 72:fe:3b:00:c2:36:5e:28:6b:54:fc:7b:04:cb:37:ee:6f:a0: c4:f3:06:03:43:04:6e:05:69:28:3e:02:c2:d7:eb:aa:f3:0e: e7:f0:c1:7e:60:69:d5:ea:fc:60:68:3a:f4:64:1b:26:56:c6: 86:57:55:01:20:4f:83:9e:48:13:a8:cf:0a:22:d3:ce:a4:c7: 18:2f:7d:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpTNa26Rsh+wIfErkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk NjFiNDY2M2QtM2MyZS00OGRhLTgzMDctMmNiMTYzNWUzZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuD2S4vPghHFVp/hMiE7dkFsIKeAqk8AGDAc 23fxkoEhAITM3cAJxoA5rzFPkXZmeGksMptJdwOp6/DbNYkvFOkstMY9lu467+Dr yVVkl0ZaHyLsRlH/O4eihedqkTfmaBxw8TiqDUGLsFo0pmk3OlgTNG24XYaRSr7X t3JKdBE9y/t1piH1Ri0Klqkr35Y8Y2jGnXZh4n0rJmGD9SL2t/J53C7ad8xeqGdJ upTa4rwZxWc2vho1Ktt+XBEVv5EdpogQnRoi3Aewx3MddZnRQHBisUP2EJWMFhEa M0JA+x8pg/0BaeMmi799xUYaRr4kETZIyQgesyQidO9w0rv+1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLYjlEP5OHH4WcHPdmia1JSYkI5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTU1ZDEyMjItZWU0Yy0z NzM3LTk1MzUtYzI2NGE0NDE3YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYjGnhTAR5KxT8qD08/GSKLXn+cCKF0kt1jhjuWB2APhSSTWg/nrVk gLVGPhpuyxSuIyyPKLCHUUoW+noBFWBT8wlh8q5XVte6vPpOl4hz6Z+GOxVX2up+ X1/ZGSxj2h9z36xramn5LoXyrMMGIS2yjpq6+ylo20pcGK/9mquATNXxflv9GPCZ bPCJc41kvMemxW6nPrMFBtMw/NBPv5OkYVhnz8gUFCJ8Ttnxo9m+f3OYTVJy/jsA wjZeKGtU/HsEyzfub6DE8wYDQwRuBWkoPgLC1+uq8w7n8MF+YGnV6vxgaDr0ZBsm VsaGV1UBIE+DnkgTqM8KItPOpMcYL30R -----END CERTIFICATE-----Generated at Wed Jul 23 17:22:28 2025 by rpki-client