$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c694a23-7442-3025-a376-b0933c00fe23.roa File: 9c694a23-7442-3025-a376-b0933c00fe23.roa (raw, json) Hash identifier: Tk2iKj7hDsyqQb6cg689bRLMVW31PtciWhtJfsf82Eg= Subject key identifier: 88:7B:A9:77:F6:8B:D5:7C:04:AD:48:E5:6D:92:98:61:EB:E8:9D:4D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7350BC8781B780A12CA20AC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c694a23-7442-3025-a376-b0933c00fe23.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 396826 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:bc:87:81:b7:80:a1:2c:a2:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=c49e410b-d75d-4272-a143-4407b8d6240e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b6:88:46:a6:26:5c:d5:c6:13:8d:56:64:9a: b2:da:54:03:b1:d4:b6:90:3a:88:8e:9e:29:9c:fa: 7b:05:c2:c2:96:71:b7:f5:f7:f8:8f:5a:65:91:47: 38:df:48:bc:24:97:e9:7a:2b:76:f6:3c:c8:f0:fa: 13:bb:97:bc:fc:e0:73:fb:19:bd:87:72:b2:c6:30: 19:9f:2c:17:9e:5a:67:93:b2:b6:6e:53:6d:ca:5f: 33:54:5b:dd:e1:3e:f0:81:6c:af:19:b0:b9:a6:de: 07:18:17:51:f8:a9:9f:35:d7:6b:ce:f5:93:17:44: a2:60:e7:da:6e:23:7f:f7:50:c2:2d:bc:3f:cf:d7: 3d:2b:01:dd:24:2e:9d:fd:6a:dd:a3:a5:02:d3:75: a4:b7:c8:07:c0:d8:fa:a3:13:f0:c6:4a:4a:b3:95: 24:31:a3:fe:8a:44:a4:e2:90:94:d7:31:f6:fe:19: 95:fc:67:6b:f1:5c:3f:f1:af:aa:3b:5d:34:65:f6: 29:c3:e0:2b:70:42:b7:cd:cf:2b:69:02:5c:9f:5f: 33:ce:8f:50:45:8b:e9:df:3a:8d:36:c8:49:bf:70: 37:e0:de:21:ef:dd:74:e4:96:9e:14:06:aa:ef:c7: 4c:4c:53:01:d9:db:3b:ab:1d:61:33:64:60:3b:16: 08:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7B:A9:77:F6:8B:D5:7C:04:AD:48:E5:6D:92:98:61:EB:E8:9D:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c694a23-7442-3025-a376-b0933c00fe23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c3:6d:65:b1:85:b9:2a:20:fe:60:90:76:33:6e:88:77:82: b8:a1:d4:72:8e:a3:59:45:98:f6:c4:10:98:ee:71:cd:9e:87: e0:84:19:72:4d:48:ce:cf:ea:42:f1:ed:9b:58:ad:93:36:9b: 3a:9a:d5:c8:29:1e:df:1a:1b:e7:b1:ca:e3:55:97:ea:33:13: 7a:34:ea:7e:f7:d4:96:6e:b3:69:08:f5:73:ee:6e:22:21:5f: 68:71:41:60:81:e5:93:b9:a5:ab:f8:95:9c:34:3f:c8:6b:a2: 73:0f:a9:08:b7:f4:cf:82:64:c8:80:1d:23:5a:65:8b:61:62: 00:34:d7:ea:5d:06:35:bc:87:37:54:ef:56:c0:73:94:e7:ef: a7:34:a5:95:32:49:c9:57:48:fb:82:c8:c7:66:d7:1c:78:86: 91:74:3a:08:97:38:26:c7:af:7e:25:66:2e:05:f5:60:79:2f: 0e:79:4f:f1:0c:e7:40:b8:44:a8:c4:8c:49:ef:f1:02:b3:a2: 29:4e:f2:73:50:71:47:bd:74:10:7c:67:74:a4:96:31:94:96: 25:1a:fc:d6:50:03:85:84:8a:a2:6a:65:2b:3e:f3:ed:3e:35: 14:83:0d:d7:c1:2d:b4:2c:bc:5f:81:ef:fe:62:7f:d1:fd:07: a6:80:fa:83 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzULyHgbeAoSyiCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk YzQ5ZTQxMGItZDc1ZC00MjcyLWExNDMtNDQwN2I4ZDYyNDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLaIRqYmXNXGE41WZJqy2lQDsdS2kDqIjp4p nPp7BcLClnG39ff4j1plkUc430i8JJfpeit29jzI8PoTu5e8/OBz+xm9h3KyxjAZ nywXnlpnk7K2blNtyl8zVFvd4T7wgWyvGbC5pt4HGBdR+KmfNddrzvWTF0SiYOfa biN/91DCLbw/z9c9KwHdJC6d/Wrdo6UC03Wkt8gHwNj6oxPwxkpKs5UkMaP+ikSk 4pCU1zH2/hmV/Gdr8Vw/8a+qO100ZfYpw+ArcEK3zc8raQJcn18zzo9QRYvp3zqN NshJv3A34N4h79105JaeFAaq78dMTFMB2ds7qx1hM2RgOxYITwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIh7qXf2i9V8BK1I5W2SmGHr6J1NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWM2OTRhMjMtNzQ0Mi0z MDI1LWEzNzYtYjA5MzNjMDBmZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCUw21lsYW5KiD+YJB2M26Id4K4odRyjqNZRZj2xBCY7nHNnofghBly TUjOz+pC8e2bWK2TNps6mtXIKR7fGhvnscrjVZfqMxN6NOp+99SWbrNpCPVz7m4i IV9ocUFggeWTuaWr+JWcND/Ia6JzD6kIt/TPgmTIgB0jWmWLYWIANNfqXQY1vIc3 VO9WwHOU5++nNKWVMknJV0j7gsjHZtcceIaRdDoIlzgmx69+JWYuBfVgeS8OeU/x DOdAuESoxIxJ7/ECs6IpTvJzUHFHvXQQfGd0pJYxlJYlGvzWUAOFhIqiamUrPvPt PjUUgw3XwS20LLxfge/+Yn/R/QemgPqD -----END CERTIFICATE-----Generated at Wed Jul 23 17:16:40 2025 by rpki-client