$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaa3acd7-7043-375d-889a-3b1a95fbca98.roa File: aaa3acd7-7043-375d-889a-3b1a95fbca98.roa (raw, json) Hash identifier: IvbF8j9CvU95tz6/o7XwdPYZSAbLCoRSHv5zkINwvvw= Subject key identifier: 44:06:47:77:7E:8C:6D:F6:83:3B:67:39:D8:5B:E8:7B:80:99:53:BA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7350B90B36884C03EBB35900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaa3acd7-7043-375d-889a-3b1a95fbca98.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 396583 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b9:0b:36:88:4c:03:eb:b3:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=2adbc4fa-5547-4204-8b6f-79dc9a84a414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:eb:16:1f:9e:c0:44:3e:20:90:c2:17:a0:c6: b9:bb:9b:7e:22:10:5a:0c:b8:55:56:38:56:f3:5c: d1:69:91:8d:a9:39:2c:c9:dd:cd:0d:2f:37:f2:de: 78:64:fb:13:54:93:0d:2b:ea:ca:ce:77:59:96:bb: c3:11:66:a8:f6:db:53:ce:09:4e:6b:77:74:ba:17: 97:aa:60:96:0b:01:78:e4:b4:ca:df:69:90:4d:6e: 8c:5c:bf:b2:40:a4:50:eb:48:0f:ee:af:a3:5b:be: d3:0a:37:4e:d4:4c:fd:7b:a3:b4:dd:50:9b:ab:36: 8a:1d:aa:67:0f:a8:fd:6a:25:54:8f:d5:5d:1d:b2: b7:e7:5b:50:07:36:9b:b1:7c:c3:53:1e:24:95:e8: d1:24:b9:ad:e3:37:35:51:f8:45:60:dc:ec:5d:52: 6c:c4:e7:3f:16:93:3b:38:0c:c6:c2:e9:4d:0e:c5: e4:bc:ca:41:d6:1c:0d:b3:81:0a:db:71:ee:21:98: f7:8d:d4:ce:09:ad:c1:69:c2:3a:91:b6:81:53:a1: db:34:8d:93:91:f6:ed:9c:79:98:cd:26:f3:3e:d4: ec:81:19:59:2f:df:65:fa:96:68:ba:4e:45:aa:62: 36:a8:74:8e:01:df:1c:72:ca:3d:dd:0f:4d:6a:1e: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:06:47:77:7E:8C:6D:F6:83:3B:67:39:D8:5B:E8:7B:80:99:53:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaa3acd7-7043-375d-889a-3b1a95fbca98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:dd:ee:78:86:b7:ea:b9:a1:30:84:2c:d9:b2:ab:cf:68:5b: 3c:91:20:19:d3:7a:16:82:fe:6e:fc:62:2f:c6:8d:82:81:d5: 68:b4:fc:9d:98:ca:66:85:49:78:e2:b7:a9:8f:1f:52:68:da: 8f:9a:d3:cc:3e:c4:47:87:ab:fe:1a:9a:d0:b1:94:46:da:bf: 25:2d:6a:30:53:34:0e:f3:3f:f5:0a:f1:1f:4d:0c:0a:61:a3: 12:8e:0f:c5:b2:e4:a0:21:4b:a2:70:3a:4e:11:9f:33:6c:db: b0:20:b1:22:e0:07:7e:1c:d7:03:1e:a8:7d:9e:2d:5e:52:32: 29:d8:07:40:ae:72:44:86:7d:1c:41:93:2b:41:6e:86:18:5c: d2:49:1c:29:a7:13:82:b3:d7:04:69:89:80:ae:8b:d7:11:44: df:4f:5b:25:1d:32:bc:62:d4:db:18:d3:30:9c:fe:4f:33:91: a5:74:53:8e:71:59:6e:4c:1a:32:79:27:20:a9:47:e1:93:f2: 68:9c:d2:23:8b:e6:3f:a6:85:9d:20:da:6f:43:8d:4b:b1:29: 7c:36:3b:42:5a:e2:d7:c8:16:7f:41:52:bb:e8:bc:d8:42:0a: 4d:5b:4c:84:aa:70:d9:99:c1:27:1e:0b:5b:a7:e5:45:b2:71: 72:c9:19:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzULkLNohMA+uzWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk MmFkYmM0ZmEtNTU0Ny00MjA0LThiNmYtNzlkYzlhODRhNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOsWH57ARD4gkMIXoMa5u5t+IhBaDLhVVjhW 81zRaZGNqTksyd3NDS838t54ZPsTVJMNK+rKzndZlrvDEWao9ttTzglOa3d0uheX qmCWCwF45LTK32mQTW6MXL+yQKRQ60gP7q+jW77TCjdO1Ez9e6O03VCbqzaKHapn D6j9aiVUj9VdHbK351tQBzabsXzDUx4klejRJLmt4zc1UfhFYNzsXVJsxOc/FpM7 OAzGwulNDsXkvMpB1hwNs4EK23HuIZj3jdTOCa3BacI6kbaBU6HbNI2TkfbtnHmY zSbzPtTsgRlZL99l+pZouk5FqmI2qHSOAd8ccso93Q9Nah7CJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEQGR3d+jG32gztnOdhb6HuAmVO6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFhM2FjZDctNzA0My0z NzVkLTg4OWEtM2IxYTk1ZmJjYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC43e54hrfquaEwhCzZsqvPaFs8kSAZ03oWgv5u/GIvxo2CgdVotPyd mMpmhUl44repjx9SaNqPmtPMPsRHh6v+GprQsZRG2r8lLWowUzQO8z/1CvEfTQwK YaMSjg/FsuSgIUuicDpOEZ8zbNuwILEi4Ad+HNcDHqh9ni1eUjIp2AdArnJEhn0c QZMrQW6GGFzSSRwppxOCs9cEaYmArovXEUTfT1slHTK8YtTbGNMwnP5PM5GldFOO cVluTBoyeScgqUfhk/JonNIji+Y/poWdINpvQ41LsSl8NjtCWuLXyBZ/QVK76LzY QgpNW0yEqnDZmcEnHgtbp+VFsnFyyRlU -----END CERTIFICATE-----Generated at Wed Jul 23 17:21:36 2025 by rpki-client