$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a52d0a5b-8107-3fd4-b682-3a1782eebb77.roa File: a52d0a5b-8107-3fd4-b682-3a1782eebb77.roa (raw, json) Hash identifier: 9pRNSlt7NcQfUnRcmjQhUEyy4Upqr0aY1eKjqVOKue4= Subject key identifier: 30:19:6A:B2:58:2B:AC:48:25:34:69:19:94:55:00:B9:1C:2D:55:09 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7350BC57C60E2D9900E2291A Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a52d0a5b-8107-3fd4-b682-3a1782eebb77.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 396555 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:bc:57:c6:0e:2d:99:00:e2:29:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=ae89da18-9619-43c1-90d1-b53bf5256f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:8a:7e:e6:a0:27:ab:7b:f6:2e:28:f7:13: 1c:59:a2:56:f7:69:f5:e3:a6:07:0d:fe:21:a5:3a: 64:32:aa:32:92:12:fd:36:b0:3c:9e:4e:b2:37:33: 4d:5c:f6:0d:84:b0:d1:46:ac:39:55:3d:71:99:2d: 4d:24:dc:e8:9b:9d:62:67:8b:75:65:0a:34:e5:98: 14:27:2f:1a:48:08:d1:10:a7:4d:9c:74:35:84:81: e6:f3:15:69:1c:1c:79:20:37:29:cf:58:a9:57:1d: 6d:d5:36:85:be:c5:2c:cb:f4:20:a4:e3:3f:c5:7d: 16:b5:4f:7d:9a:9d:91:ca:c0:b5:8d:d1:af:45:b2: a0:d5:48:67:00:18:2b:7e:25:72:f1:99:40:a1:f1: 02:4b:d1:b2:c7:88:6f:91:51:33:4d:aa:c2:a5:63: 47:2d:51:3a:ac:75:27:40:f8:fd:d6:88:d5:0f:10: 40:83:ae:94:43:2a:c4:0c:e2:56:04:e8:1b:ac:fe: a4:0a:ab:4f:fa:ca:3b:75:8e:ae:ad:72:b7:df:9b: cd:fa:09:ba:31:0d:7c:21:a2:a6:78:0b:60:f6:1b: 19:82:10:71:89:69:b6:78:d8:b5:bc:e1:49:c8:12: 4c:4f:d7:b4:48:75:89:0d:af:41:8e:a0:ab:2e:04: 2c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:19:6A:B2:58:2B:AC:48:25:34:69:19:94:55:00:B9:1C:2D:55:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a52d0a5b-8107-3fd4-b682-3a1782eebb77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:8e:84:61:bf:85:89:9f:18:a1:07:2f:c3:0b:a5:ab:8c:a6: 7f:6f:13:4d:44:12:89:4f:87:e2:22:be:4d:2d:0c:60:37:32: b1:c9:31:1d:57:7f:90:38:c6:d0:0a:2e:62:b7:78:ce:71:c4: 2e:bb:8f:30:a7:85:43:05:aa:2f:9b:65:ba:e0:03:6f:11:4c: d8:6a:6e:7c:e3:56:44:98:e1:61:85:3c:ca:36:50:a9:20:84: 05:23:b8:e3:dd:8e:9d:53:77:66:26:e2:80:26:d6:26:bb:b2: 4a:c9:19:99:dd:7f:fe:fc:92:b5:7c:f6:dc:18:b3:1b:a4:73: c1:d5:7b:dc:59:ff:02:93:9d:18:6c:90:13:43:f2:83:cf:b1: fa:b9:38:4e:7c:b9:f0:d8:25:4e:70:af:3f:0a:a1:12:03:17: 1a:6d:ce:42:0c:72:42:6d:2c:54:35:5c:43:23:43:5f:98:c7: 2f:15:32:a1:19:4e:c8:78:79:d3:80:fc:59:97:94:83:6d:c8: 30:18:2c:68:be:4e:90:8b:ab:b4:2d:b5:aa:51:4e:cb:96:98: 15:26:3f:56:ec:08:fd:b6:c8:4c:92:7d:b5:8b:51:87:4a:2b: 1f:e8:87:b6:f8:32:be:3c:23:2f:7a:26:13:3c:b7:c9:be:cf: 68:01:1e:10 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzULxXxg4tmQDiKRowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk YWU4OWRhMTgtOTYxOS00M2MxLTkwZDEtYjUzYmY1MjU2ZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLeKfuagJ6t79i4o9xMcWaJW92n146YHDf4h pTpkMqoykhL9NrA8nk6yNzNNXPYNhLDRRqw5VT1xmS1NJNzom51iZ4t1ZQo05ZgU Jy8aSAjREKdNnHQ1hIHm8xVpHBx5IDcpz1ipVx1t1TaFvsUsy/QgpOM/xX0WtU99 mp2RysC1jdGvRbKg1UhnABgrfiVy8ZlAofECS9Gyx4hvkVEzTarCpWNHLVE6rHUn QPj91ojVDxBAg66UQyrEDOJWBOgbrP6kCqtP+so7dY6urXK335vN+gm6MQ18IaKm eAtg9hsZghBxiWm2eNi1vOFJyBJMT9e0SHWJDa9BjqCrLgQsAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDAZarJYK6xIJTRpGZRVALkcLVUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTUyZDBhNWItODEwNy0z ZmQ0LWI2ODItM2ExNzgyZWViYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3joRhv4WJnxihBy/DC6WrjKZ/bxNNRBKJT4fiIr5NLQxgNzKxyTEd V3+QOMbQCi5it3jOccQuu48wp4VDBaovm2W64ANvEUzYam5841ZEmOFhhTzKNlCp IIQFI7jj3Y6dU3dmJuKAJtYmu7JKyRmZ3X/+/JK1fPbcGLMbpHPB1XvcWf8Ck50Y bJATQ/KDz7H6uThOfLnw2CVOcK8/CqESAxcabc5CDHJCbSxUNVxDI0NfmMcvFTKh GU7IeHnTgPxZl5SDbcgwGCxovk6Qi6u0LbWqUU7LlpgVJj9W7Aj9tshMkn21i1GH Sisf6Ie2+DK+PCMveiYTPLfJvs9oAR4Q -----END CERTIFICATE-----Generated at Wed Jul 23 17:19:51 2025 by rpki-client