$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1dd69bd-882b-3881-a60b-e8aa60add848.roa File: c1dd69bd-882b-3881-a60b-e8aa60add848.roa (raw, json) Hash identifier: stjpceP6njwJ3ZSwC6qmYPmuRjONzeGWLJ52NNUfs1c= Subject key identifier: AB:94:89:25:F4:B1:4C:70:89:E2:F0:A5:1A:01:88:8B:C2:93:49:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A761B6C5EC20EE68CB9134800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1dd69bd-882b-3881-a60b-e8aa60add848.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 36617 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:6c:5e:c2:0e:e6:8c:b9:13:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=85c7878a-bbf1-4983-a6ce-d7e980681277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:90:53:4f:f5:10:d5:e3:01:c1:26:15:85: 94:e4:41:7c:a5:a2:05:79:ef:37:2c:56:db:9e:99: 43:2d:e3:1a:c3:89:1c:47:86:32:6a:6a:b2:50:64: 74:c6:09:53:17:ba:72:0f:d6:13:7c:14:29:97:d6: 2f:dd:e4:37:35:79:9d:c4:ac:a1:2c:6a:21:30:1c: 75:4d:46:e3:44:10:f8:d2:8f:ff:b2:6c:cd:e4:81: a9:53:67:ba:c8:7a:b0:26:20:91:ea:e5:2c:5c:45: b1:e3:97:43:86:56:37:ce:3b:04:fb:cc:86:71:23: 57:17:3b:d9:d1:5f:5d:7f:0a:f6:7f:c2:7f:f2:19: fc:31:48:69:3b:60:cc:69:56:75:8a:94:10:6c:13: 64:e4:5f:77:ac:03:d2:ba:83:88:64:53:df:c0:dd: 92:45:d8:7d:4c:d7:66:ba:d0:a8:ff:d2:a4:02:cf: b3:d0:5a:2f:5c:a9:f4:6e:48:89:06:99:36:6c:4c: 07:64:2c:de:d0:dc:62:df:23:b5:f9:96:82:17:81: 6a:ad:53:6c:7f:2e:3e:7c:ad:4e:10:9d:aa:92:ce: 2d:b2:5b:50:7e:80:d7:d0:dc:27:e6:c1:4e:ee:a5: f8:92:89:57:40:c2:a6:44:96:39:dd:19:a9:04:62: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:94:89:25:F4:B1:4C:70:89:E2:F0:A5:1A:01:88:8B:C2:93:49:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1dd69bd-882b-3881-a60b-e8aa60add848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:27:c0:e7:00:75:57:75:cb:b8:b6:ef:cf:5f:78:82:6e:b5: 68:6f:8f:18:91:df:57:24:36:18:fd:ac:01:a9:de:53:70:53: 12:0e:2b:bd:6d:85:e5:b1:f7:11:aa:5e:21:61:ae:5a:1a:10: c5:4c:d8:28:ef:4b:cd:10:22:f0:8e:4c:ac:79:c6:6f:90:83: 07:d3:55:6d:4a:c1:3c:15:bd:4a:7a:52:04:73:56:ed:ba:37: 49:29:4b:3c:d4:5b:c5:2f:28:16:75:88:dd:7c:36:f6:d8:ea: 57:ad:30:27:ef:d5:c2:4d:df:1f:36:59:5e:95:ce:bf:43:41: f2:c4:b2:ef:ff:f3:1a:19:77:8b:d9:d6:b7:fa:e6:62:9a:b7: 14:48:14:35:69:c2:b5:d6:b7:a0:ec:11:dc:c5:f1:81:2a:c8: fb:83:86:4c:65:cd:95:e0:6a:86:c3:8e:8d:e5:c4:02:5d:48: ec:4a:38:fe:f6:63:7b:32:48:50:0d:b1:0b:42:c4:74:ae:b5: 1b:f7:fe:f3:ff:77:a4:ec:5d:b6:9b:1d:93:f9:a1:b5:09:62: 13:ba:28:f8:1d:20:a2:8f:01:ed:73:b2:22:c6:f2:e5:49:40: 0e:56:c8:36:a4:03:a6:00:cc:fa:3b:fa:56:58:a0:54:8f:67: 8c:0e:4f:2e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp2G2xewg7mjLkTSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk ODVjNzg3OGEtYmJmMS00OTgzLWE2Y2UtZDdlOTgwNjgxMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI2QU0/1ENXjAcEmFYWU5EF8paIFee83LFbb nplDLeMaw4kcR4YyamqyUGR0xglTF7pyD9YTfBQpl9Yv3eQ3NXmdxKyhLGohMBx1 TUbjRBD40o//smzN5IGpU2e6yHqwJiCR6uUsXEWx45dDhlY3zjsE+8yGcSNXFzvZ 0V9dfwr2f8J/8hn8MUhpO2DMaVZ1ipQQbBNk5F93rAPSuoOIZFPfwN2SRdh9TNdm utCo/9KkAs+z0FovXKn0bkiJBpk2bEwHZCze0Nxi3yO1+ZaCF4FqrVNsfy4+fK1O EJ2qks4tsltQfoDX0Nwn5sFO7qX4kolXQMKmRJY53RmpBGKWdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKuUiSX0sUxwieLwpRoBiIvCk0mlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzFkZDY5YmQtODgyYi0z ODgxLWE2MGItZThhYTYwYWRkODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDJ8DnAHVXdcu4tu/PX3iCbrVob48Ykd9XJDYY/awBqd5TcFMSDiu9 bYXlsfcRql4hYa5aGhDFTNgo70vNECLwjkysecZvkIMH01VtSsE8Fb1KelIEc1bt ujdJKUs81FvFLygWdYjdfDb22OpXrTAn79XCTd8fNllelc6/Q0HyxLLv//MaGXeL 2da3+uZimrcUSBQ1acK11reg7BHcxfGBKsj7g4ZMZc2V4GqGw46N5cQCXUjsSjj+ 9mN7MkhQDbELQsR0rrUb9/7z/3ek7F22mx2T+aG1CWITuij4HSCijwHtc7IixvLl SUAOVsg2pAOmAMz6O/pWWKBUj2eMDk8u -----END CERTIFICATE-----Generated at Fri Jul 25 00:57:22 2025 by rpki-client