$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3ccd0c-29a1-3e77-9ddf-f812180997f1.roa File: aa3ccd0c-29a1-3e77-9ddf-f812180997f1.roa (raw, json) Hash identifier: Qbz4yo3KJ164s5CvhH16ju609sjASbRNqCbJVehRoQI= Subject key identifier: 97:57:98:3D:95:79:6A:2C:4F:78:7E:48:E7:28:77:43:E6:B9:1B:E9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A6290962F5BDFADA41F4570E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3ccd0c-29a1-3e77-9ddf-f812180997f1.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 396566 IP address blocks: 192.12.94.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:96:2f:5b:df:ad:a4:1f:45:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=14b0e5d2-31b7-4bc4-b0a3-22e29d6defd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:04:fb:1f:97:00:63:88:e4:f7:8f:ba:b6: 0f:48:37:6f:8d:1c:09:d3:ab:2f:87:1d:da:93:08: a6:1d:cd:36:24:fc:78:64:49:d3:e5:5a:db:da:bb: f8:8e:eb:dc:c4:56:2f:9f:52:1c:7b:da:a7:c1:85: e7:9b:bf:a1:af:d5:c3:ec:82:aa:8f:34:21:87:e3: 88:cf:00:42:c5:35:7e:86:4b:47:06:f3:20:56:67: 75:1c:4f:d1:bc:ca:44:b3:14:dc:12:ba:ce:48:cc: f6:a2:99:c7:55:4c:69:50:84:32:34:34:64:3a:87: 37:4d:24:9f:54:e9:2f:42:f4:05:7e:83:c6:77:2e: 96:da:c2:e9:d6:ab:11:7c:4e:bd:b4:59:4a:7c:5d: f0:7a:7f:75:e2:37:93:5a:6d:6e:cb:c5:71:df:c9: d5:df:7c:8e:6c:2d:a7:9e:0e:ea:8b:85:8d:d0:78: 0c:aa:16:48:d4:0f:c7:db:8d:d4:92:5e:01:4d:25: 21:a2:f2:0e:a0:d3:9a:d3:8c:27:89:15:d3:7d:a9: 2b:e0:bc:06:5c:66:23:47:cf:07:e1:31:51:87:1a: 67:a7:f1:68:24:02:16:a4:8a:b9:92:f9:bc:f1:2d: 45:dd:7e:7b:59:55:2c:b0:92:9f:27:5f:b6:66:11: 66:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:57:98:3D:95:79:6A:2C:4F:78:7E:48:E7:28:77:43:E6:B9:1B:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3ccd0c-29a1-3e77-9ddf-f812180997f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6d:94:21:22:14:aa:7c:c1:62:e1:ee:34:dc:07:36:15:d2: 15:02:e5:d6:a0:54:1e:d6:18:57:71:35:f6:83:9e:5b:c3:7b: 7f:db:78:9f:e9:ce:9b:9f:d6:ae:05:da:a3:a1:f9:98:38:40: bf:d2:7a:d3:cc:c7:c4:45:4f:88:07:1a:85:31:bd:50:c2:61: 20:ec:1d:6f:7a:cb:c4:f6:ef:d0:4f:67:e9:bb:df:e9:d9:d3: b7:32:62:4a:08:6f:7c:4b:44:5b:c5:4f:89:71:c2:c9:cb:8b: f5:b1:38:14:3e:e9:54:0a:d1:6f:cd:53:0d:d7:2d:a5:74:fc: 5f:e9:4c:9a:10:81:0a:c6:b9:9e:d0:38:4f:d2:43:76:1b:39: 9d:7c:83:63:e2:70:e6:2e:e9:d5:cb:68:b4:09:49:45:b9:ae: 8d:9b:77:8d:d4:6c:8a:65:3a:36:00:e7:7e:85:db:93:a8:bd: 55:b8:f5:29:61:74:74:5f:f1:12:98:b3:1d:d4:16:dd:f3:d5: c3:5f:9d:8a:1b:96:49:a9:aa:4a:7f:86:46:b7:2d:07:f6:c7: dd:9c:3f:0d:a5:0a:0b:74:8d:b1:72:72:b1:51:d2:20:7f:0d: 38:08:43:fd:fa:38:ae:13:a1:70:be:fc:47:e8:62:f5:b4:a7: ee:29:fe:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpikJYvW9+tpB9FcOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MTRiMGU1ZDItMzFiNy00YmM0LWIwYTMtMjJlMjlkNmRlZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp68E+x+XAGOI5PePurYPSDdvjRwJ06svhx3a kwimHc02JPx4ZEnT5Vrb2rv4juvcxFYvn1Ice9qnwYXnm7+hr9XD7IKqjzQhh+OI zwBCxTV+hktHBvMgVmd1HE/RvMpEsxTcErrOSMz2opnHVUxpUIQyNDRkOoc3TSSf VOkvQvQFfoPGdy6W2sLp1qsRfE69tFlKfF3wen914jeTWm1uy8Vx38nV33yObC2n ng7qi4WN0HgMqhZI1A/H243Ukl4BTSUhovIOoNOa04wniRXTfakr4LwGXGYjR88H 4TFRhxpnp/FoJAIWpIq5kvm88S1F3X57WVUssJKfJ1+2ZhFmsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJdXmD2VeWosT3h+SOcod0PmuRvpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWEzY2NkMGMtMjlhMS0z ZTc3LTlkZGYtZjgxMjE4MDk5N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGbZQhIhSqfMFi4e403Ac2FdIVAuXWoFQe1hhXcTX2g55bw3t/23if 6c6bn9auBdqjofmYOEC/0nrTzMfERU+IBxqFMb1QwmEg7B1vesvE9u/QT2fpu9/p 2dO3MmJKCG98S0RbxU+JccLJy4v1sTgUPulUCtFvzVMN1y2ldPxf6UyaEIEKxrme 0DhP0kN2GzmdfINj4nDmLunVy2i0CUlFua6Nm3eN1GyKZTo2AOd+hduTqL1VuPUp YXR0X/ESmLMd1Bbd89XDX52KG5ZJqapKf4ZGty0H9sfdnD8NpQoLdI2xcnKxUdIg fw04CEP9+jiuE6FwvvxH6GL1tKfuKf4y -----END CERTIFICATE-----Generated at Wed Jul 23 23:21:08 2025 by rpki-client