$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcb7912b-a3b7-3838-88c8-0be85e2d4066.roa File: bcb7912b-a3b7-3838-88c8-0be85e2d4066.roa (raw, json) Hash identifier: kOon9f0RlLHz4ufWa7FrzCL2M3hiO6gtDnDwVIXYPuE= Subject key identifier: B2:7B:C3:C2:7D:9D:90:D4:55:E4:01:E0:42:59:8B:13:0B:BD:4C:7D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A761B6EF1F3BA295D5DA3A7C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcb7912b-a3b7-3838-88c8-0be85e2d4066.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 396578 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:6e:f1:f3:ba:29:5d:5d:a3:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=95ab2aab-291f-41d7-ad79-fe51023a9a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:d4:07:ee:71:c7:43:ed:11:93:2a:31:76: e3:a8:73:fc:41:10:6f:5e:87:1a:e2:df:db:03:8c: 70:b1:10:8a:9a:6b:28:ee:98:cd:0f:cd:fc:8b:33: 94:fb:c8:ac:cd:e3:df:ec:35:49:8f:50:6c:db:58: 5c:2b:16:f9:ba:e4:3f:9e:24:c2:43:9b:cd:4e:37: ea:73:e5:4b:8d:2f:9e:a4:0f:8b:5e:a0:fc:0e:67: 2e:21:e1:17:99:03:bd:22:e1:ba:e1:c2:ee:9b:b4: c4:7b:01:73:17:59:fe:dc:e1:27:d3:ef:26:d3:8a: 7b:72:4d:e9:3c:fa:64:bc:dd:ed:3c:1c:7e:68:93: 5c:00:27:ee:a1:09:bb:42:8b:d8:3a:2d:25:29:cc: ef:9b:79:f7:6f:d1:4a:ab:3a:e5:b7:55:66:5d:e8: 06:83:fe:c4:f4:a1:d9:76:3c:f1:bf:43:0f:63:f6: 69:2e:57:a3:db:6d:d9:04:94:4a:3c:a0:d9:6d:ec: d6:42:bc:ec:67:ff:32:21:63:81:aa:e0:b2:e1:b4: 38:44:7b:c4:69:4f:d8:dc:8f:37:f6:5d:87:98:77: b6:05:13:e4:a6:24:1f:23:26:d2:f1:52:24:a8:d5: 34:08:81:88:45:53:f1:82:85:8f:fc:6a:e1:4c:b8: 6b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7B:C3:C2:7D:9D:90:D4:55:E4:01:E0:42:59:8B:13:0B:BD:4C:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcb7912b-a3b7-3838-88c8-0be85e2d4066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e9:41:b5:e1:0d:0f:9b:d4:6a:bf:80:21:3a:60:21:07:a6: 18:ee:60:e4:48:04:4c:e1:db:42:4d:54:f1:ab:c4:01:bc:6f: 52:af:3b:2f:b7:10:16:65:5b:c0:05:d3:48:7f:3e:24:d7:51: 31:96:8d:4e:55:23:c3:fc:ef:41:5f:64:22:6e:75:49:38:d9: 79:7c:63:36:88:82:34:af:9b:7d:b2:d3:2a:49:33:cd:eb:62: b9:37:eb:b5:3f:3c:7b:b7:aa:5c:2e:98:71:06:05:f7:54:84: 17:5e:b9:1a:f9:12:fa:0c:05:c9:2b:5f:fe:6a:d6:5e:19:1d: 35:d1:8f:a4:b6:90:7d:34:b2:da:d8:51:b8:9b:f8:a4:a4:9a: f6:b2:a2:1d:4c:c9:0d:95:54:91:fc:71:25:ad:f3:33:67:7a: 0b:6c:d5:9f:8c:87:31:fc:f2:dc:d4:c9:3a:1d:11:b8:81:7b: e2:fc:eb:f2:27:72:5f:7d:0a:e1:ca:48:9b:de:9d:ff:71:c3: 83:04:db:1c:0b:5d:27:7c:7b:63:95:69:5d:2a:27:67:b0:0f: 7d:e0:bb:80:fb:45:3d:b9:b1:fe:ce:7f:be:60:15:b0:4b:e3: aa:c8:79:79:ce:d7:5e:65:59:32:03:c9:0e:d9:ec:61:20:db: f2:fa:99:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp2G27x87opXV2jp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk OTVhYjJhYWItMjkxZi00MWQ3LWFkNzktZmU1MTAyM2E5YTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHLUB+5xx0PtEZMqMXbjqHP8QRBvXoca4t/b A4xwsRCKmmso7pjND838izOU+8iszePf7DVJj1Bs21hcKxb5uuQ/niTCQ5vNTjfq c+VLjS+epA+LXqD8DmcuIeEXmQO9IuG64cLum7TEewFzF1n+3OEn0+8m04p7ck3p PPpkvN3tPBx+aJNcACfuoQm7QovYOi0lKczvm3n3b9FKqzrlt1VmXegGg/7E9KHZ djzxv0MPY/ZpLlej223ZBJRKPKDZbezWQrzsZ/8yIWOBquCy4bQ4RHvEaU/Y3I83 9l2HmHe2BRPkpiQfIybS8VIkqNU0CIGIRVPxgoWP/GrhTLhrpQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLJ7w8J9nZDUVeQB4EJZixMLvUx9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmNiNzkxMmItYTNiNy0z ODM4LTg4YzgtMGJlODVlMmQ0MDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQ6UG14Q0Pm9Rqv4AhOmAhB6YY7mDkSARM4dtCTVTxq8QBvG9Srzsv txAWZVvABdNIfz4k11Exlo1OVSPD/O9BX2QibnVJONl5fGM2iII0r5t9stMqSTPN 62K5N+u1Pzx7t6pcLphxBgX3VIQXXrka+RL6DAXJK1/+atZeGR010Y+ktpB9NLLa 2FG4m/ikpJr2sqIdTMkNlVSR/HElrfMzZ3oLbNWfjIcx/PLc1Mk6HRG4gXvi/Ovy J3JffQrhykib3p3/ccODBNscC10nfHtjlWldKidnsA994LuA+0U9ubH+zn++YBWw S+OqyHl5ztdeZVkyA8kO2exhINvy+pn/ -----END CERTIFICATE-----Generated at Wed Jul 23 17:14:55 2025 by rpki-client