$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf67ad3-6d8e-32b1-961e-93f99ea9eb7e.roa File: aaf67ad3-6d8e-32b1-961e-93f99ea9eb7e.roa (raw, json) Hash identifier: 2IOocWaMuiKEuQQxT9i3E3fUvS6daUhOUjgYaXTTWCs= Subject key identifier: 3E:CB:11:54:D0:84:97:74:11:92:ED:19:0E:89:2D:14:0E:A1:8A:5E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A761B7245991289A32AD5CE00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf67ad3-6d8e-32b1-961e-93f99ea9eb7e.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 396562 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:72:45:99:12:89:a3:2a:d5:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=c26544c3-440f-46df-834f-971d749f5b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:93:32:e4:72:53:d0:28:99:f3:47:75:35: 5c:5d:90:1c:21:7c:28:fc:44:e1:87:a2:a2:4e:38: 42:7b:ad:5a:44:9b:e3:76:f9:a3:34:7f:49:71:2e: d8:8d:ec:02:bf:ef:3b:3d:a1:d4:06:6a:d6:08:78: 46:cf:73:a0:3a:7f:2a:30:7d:97:25:6f:54:58:f9: b5:d1:9a:c8:85:2a:88:30:07:e8:25:a8:b0:31:61: 2b:40:bf:f2:05:e0:69:f4:c2:50:50:20:df:57:cc: bb:df:f3:65:95:e8:e9:48:13:12:1b:b3:af:de:a9: ab:86:b1:a7:20:8f:7f:a4:a4:21:ea:02:11:39:b4: e7:20:4f:a4:f5:10:f0:54:69:ab:49:79:b1:25:e9: 79:36:9c:e4:40:06:90:97:48:b0:92:9e:ca:53:8a: 4c:6e:f2:5a:67:d4:1f:a0:00:19:d5:b7:e1:6b:b3: 9e:2e:f5:8a:77:d4:39:d1:20:a9:99:7d:d5:c0:10: 29:92:6c:8f:91:cf:03:17:ef:4a:10:61:b6:53:10: 5b:c3:d2:5a:27:a5:d1:58:98:e6:4e:0f:9f:4f:e7: 46:18:da:df:ef:da:63:6a:98:b5:2f:00:3d:a3:47: 4e:79:0f:e3:a6:15:53:e6:e3:49:3e:25:16:69:e2: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CB:11:54:D0:84:97:74:11:92:ED:19:0E:89:2D:14:0E:A1:8A:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf67ad3-6d8e-32b1-961e-93f99ea9eb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9c:21:95:25:99:10:0a:f9:c4:27:ea:11:3a:55:0b:1c:99: 15:60:67:14:9f:f0:3f:19:29:50:5c:c2:80:47:72:8f:37:66: 5b:56:ab:86:5c:8f:3b:a3:28:e7:47:fa:54:7d:b0:72:df:96: f4:a4:55:88:3f:9d:b3:53:65:6b:af:9b:68:04:34:c1:6d:42: 31:03:ef:d4:2b:15:9d:e3:00:0c:f8:78:92:f5:7f:f7:8f:5e: 7a:9b:2b:d9:8f:c2:4c:4c:87:f8:db:bc:63:7f:16:e4:2b:43: 61:31:be:f3:04:bb:a7:1e:7d:fa:d7:b4:2c:31:75:30:74:ba: 03:8a:c9:5a:1c:49:94:3a:77:8a:68:5c:59:fb:8b:2c:fd:30: d2:cc:78:19:91:a8:30:cf:1d:1b:7b:eb:70:24:a1:0e:fd:00: 64:8f:0c:1c:d8:9e:74:7e:09:da:87:3c:2f:84:0a:5d:ca:39: 00:b2:07:51:77:c8:ad:ea:3d:8d:c7:60:23:52:17:b6:57:68: 0f:5b:cf:85:2a:b2:66:bc:50:77:21:83:fd:62:f4:3e:a3:be: 2f:58:ce:ae:b2:76:c7:7d:f9:90:92:1d:a5:cc:d1:7f:b4:7e: f1:59:d5:36:fa:ec:55:e8:64:8b:91:bb:da:54:6b:0b:38:1d: 98:08:a1:f8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp2G3JFmRKJoyrVzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk YzI2NTQ0YzMtNDQwZi00NmRmLTgzNGYtOTcxZDc0OWY1YjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpmTMuRyU9AomfNHdTVcXZAcIXwo/EThh6Ki TjhCe61aRJvjdvmjNH9JcS7YjewCv+87PaHUBmrWCHhGz3OgOn8qMH2XJW9UWPm1 0ZrIhSqIMAfoJaiwMWErQL/yBeBp9MJQUCDfV8y73/NllejpSBMSG7Ov3qmrhrGn II9/pKQh6gIRObTnIE+k9RDwVGmrSXmxJel5NpzkQAaQl0iwkp7KU4pMbvJaZ9Qf oAAZ1bfha7OeLvWKd9Q50SCpmX3VwBApkmyPkc8DF+9KEGG2UxBbw9JaJ6XRWJjm Tg+fT+dGGNrf79pjapi1LwA9o0dOeQ/jphVT5uNJPiUWaeLVVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD7LEVTQhJd0EZLtGQ6JLRQOoYpeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFmNjdhZDMtNmQ4ZS0z MmIxLTk2MWUtOTNmOTllYTllYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvnCGVJZkQCvnEJ+oROlULHJkVYGcUn/A/GSlQXMKAR3KPN2ZbVquG XI87oyjnR/pUfbBy35b0pFWIP52zU2Vrr5toBDTBbUIxA+/UKxWd4wAM+HiS9X/3 j156myvZj8JMTIf427xjfxbkK0NhMb7zBLunHn3617QsMXUwdLoDislaHEmUOneK aFxZ+4ss/TDSzHgZkagwzx0be+twJKEO/QBkjwwc2J50fgnahzwvhApdyjkAsgdR d8it6j2Nx2AjUhe2V2gPW8+FKrJmvFB3IYP9YvQ+o74vWM6usnbHffmQkh2lzNF/ tH7xWdU2+uxV6GSLkbvaVGsLOB2YCKH4 -----END CERTIFICATE-----Generated at Wed Jul 23 17:12:13 2025 by rpki-client