$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd2f2a3f-6407-31e6-8478-9a7142db6ff9.roa File: bd2f2a3f-6407-31e6-8478-9a7142db6ff9.roa (raw, json) Hash identifier: CE5RTdYWq/NIt/t8FVa5ZGiIZcN9C6sVD9+LzmR3r3c= Subject key identifier: 18:FE:37:A7:23:63:81:9F:BD:77:04:A6:F4:DA:94:D1:86:FF:CA:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A761B4D6ADE2F96636FCDEE00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd2f2a3f-6407-31e6-8478-9a7142db6ff9.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 36621 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:4d:6a:de:2f:96:63:6f:cd:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=0df4c4be-aa93-432d-a800-eb201cadd8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:e4:a8:f9:26:92:12:ea:d9:7c:19:d3:1f: e9:17:de:03:33:a1:86:3b:68:7c:3f:50:71:69:a8: 4d:f9:62:e6:0a:4d:09:f7:05:c7:40:c8:50:1e:e9: 6f:70:c0:d2:1a:0a:ed:3b:d0:e6:70:29:77:18:d3: 20:12:a3:90:7a:58:c1:a7:93:e4:f3:7f:09:5f:90: a0:22:7b:9b:59:07:c7:28:18:9c:6a:40:15:8b:6b: 6b:55:a8:71:2d:c0:b0:7b:fe:56:c0:44:6d:dc:a7: 4f:db:72:aa:43:e9:a0:8e:fd:56:4c:02:f5:c0:1a: f8:46:e1:ec:77:41:0d:49:b7:bd:65:af:5a:3f:2e: 35:18:0b:74:53:9d:c2:f2:12:b1:9e:99:5e:0b:f6: f6:63:44:99:25:3a:2f:3a:08:5c:37:7d:5d:0a:61: 89:5c:7b:81:2f:62:6c:97:b2:53:cb:0e:68:ee:54: 23:01:2c:ad:46:a1:26:85:f7:f7:38:25:3d:aa:b8: 8e:b2:e7:4e:5e:8d:ac:fe:67:f6:98:47:79:69:64: 7a:f6:69:ad:6e:ae:77:4a:a1:6a:f3:fd:e9:8c:f7: 36:23:c0:9a:75:9a:cd:32:dd:b4:b5:dd:d0:f3:3f: 84:23:d6:41:e2:b9:6f:0c:b8:49:e5:34:26:f5:5c: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FE:37:A7:23:63:81:9F:BD:77:04:A6:F4:DA:94:D1:86:FF:CA:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd2f2a3f-6407-31e6-8478-9a7142db6ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0c:ce:21:a3:5d:23:02:18:e3:b8:85:36:17:aa:be:76:1d: a5:e7:82:e6:ce:89:1f:2e:db:d0:da:51:76:2a:b6:72:71:d5: 2a:9a:50:f0:af:c4:84:bc:6b:57:b2:f9:c0:66:d2:11:a2:2d: a3:0f:76:af:b7:41:29:a6:b8:27:93:a0:de:ad:28:e3:80:45: 06:f2:92:c8:05:09:1d:d4:e9:9e:64:4f:f1:ad:58:9b:73:0b: 8a:44:1c:bc:82:66:f0:87:00:38:47:80:b8:a7:ee:95:04:76: 19:2a:cd:3f:e5:32:85:87:24:60:e4:d0:86:ac:42:c5:54:ac: a0:77:8b:93:fa:26:9e:2e:fb:75:b5:ff:8a:9f:fc:15:90:32: bb:ae:f1:2f:56:3e:06:49:12:ae:51:32:64:3c:d9:2f:3f:a4: 0c:c0:ba:4c:6c:a7:a4:7e:e7:31:c0:1d:88:b3:d9:5e:4a:53: 75:59:c6:c0:43:90:11:ca:d7:5b:69:06:4f:f0:dc:58:03:66: 99:d3:90:db:16:b9:b6:44:ca:69:c6:cf:b3:a7:b2:d7:a3:b2: 96:f0:cd:83:d8:e2:2e:cc:4d:f6:2f:f2:0d:79:9a:3d:39:c6: 22:02:68:9c:20:92:15:9f:65:a1:4e:30:04:97:7a:e8:c9:81: 16:01:a3:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp2G01q3i+WY2/N7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk MGRmNGM0YmUtYWE5My00MzJkLWE4MDAtZWIyMDFjYWRkOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDDkqPkmkhLq2XwZ0x/pF94DM6GGO2h8P1Bx aahN+WLmCk0J9wXHQMhQHulvcMDSGgrtO9DmcCl3GNMgEqOQeljBp5Pk838JX5Cg InubWQfHKBicakAVi2trVahxLcCwe/5WwERt3KdP23KqQ+mgjv1WTAL1wBr4RuHs d0ENSbe9Za9aPy41GAt0U53C8hKxnpleC/b2Y0SZJTovOghcN31dCmGJXHuBL2Js l7JTyw5o7lQjASytRqEmhff3OCU9qriOsudOXo2s/mf2mEd5aWR69mmtbq53SqFq 8/3pjPc2I8CadZrNMt20td3Q8z+EI9ZB4rlvDLhJ5TQm9Vw6ZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBj+N6cjY4GfvXcEpvTalNGG/8qRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmQyZjJhM2YtNjQwNy0z MWU2LTg0NzgtOWE3MTQyZGI2ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIDM4ho10jAhjjuIU2F6q+dh2l54LmzokfLtvQ2lF2KrZycdUqmlDw r8SEvGtXsvnAZtIRoi2jD3avt0Epprgnk6DerSjjgEUG8pLIBQkd1OmeZE/xrVib cwuKRBy8gmbwhwA4R4C4p+6VBHYZKs0/5TKFhyRg5NCGrELFVKygd4uT+iaeLvt1 tf+Kn/wVkDK7rvEvVj4GSRKuUTJkPNkvP6QMwLpMbKekfucxwB2Is9leSlN1WcbA Q5ARytdbaQZP8NxYA2aZ05DbFrm2RMppxs+zp7LXo7KW8M2D2OIuzE32L/INeZo9 OcYiAmicIJIVn2WhTjAEl3royYEWAaOm -----END CERTIFICATE-----Generated at Wed Jul 23 23:27:05 2025 by rpki-client