$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d87657e7-c487-341b-8bb9-39757ad4e560.roa File: d87657e7-c487-341b-8bb9-39757ad4e560.roa (raw, json) Hash identifier: y9NWjY97hHa7JcUViZfFq8CZOAve5U2z0KgrXV5MVD0= Subject key identifier: D5:77:9D:99:88:FE:A7:EF:F5:08:6A:87:9B:86:AB:13:21:65:C7:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A761B5901C899E96C5FDC3D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d87657e7-c487-341b-8bb9-39757ad4e560.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 396570 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:59:01:c8:99:e9:6c:5f:dc:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=60f7fe8b-ed16-477c-9156-656bf92d43bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:be:df:04:ad:68:7d:44:1d:a7:7f:4d:9a:e3: 15:99:af:2d:c2:55:9f:3a:d5:38:ba:bc:e1:57:fa: 10:df:de:31:c9:88:b9:3e:44:45:9b:48:29:5f:f7: f7:ad:2d:08:0a:dd:87:c4:b6:0a:ab:74:fa:a4:5d: 82:45:50:f2:0e:8b:ce:12:a1:16:b1:7c:09:f3:91: 89:f9:01:4d:70:73:10:99:26:4a:08:26:73:59:71: c4:23:79:6d:ee:7a:c2:a8:af:5d:9d:cb:db:21:b8: fb:12:98:cb:c0:5d:a6:16:67:9e:bd:49:bb:8a:1d: 5e:6c:b2:89:2b:30:81:78:68:d0:9e:fd:5f:77:d1: 90:d2:e9:36:97:d0:76:fe:30:51:14:85:82:ac:22: 71:45:4b:05:51:91:86:8c:cf:6f:1d:c1:43:09:c6: 0f:ba:cb:4d:41:da:11:00:36:81:dd:d8:20:58:1b: 16:b8:c8:4d:f5:49:b1:c7:af:6d:72:77:9f:60:eb: 43:39:6f:88:bc:aa:cf:41:ec:71:ca:b2:68:13:b1: be:a3:b2:59:fc:5a:aa:d9:b6:b9:b6:a6:9a:7c:17: 42:e6:ee:09:ee:04:09:e5:22:c4:62:f7:5b:fb:de: d3:7f:7b:5b:9a:d5:d6:e6:96:5f:3b:be:1b:ab:18: 08:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:77:9D:99:88:FE:A7:EF:F5:08:6A:87:9B:86:AB:13:21:65:C7:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d87657e7-c487-341b-8bb9-39757ad4e560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:fa:0e:02:6c:b0:45:b5:a2:0b:30:e5:ae:f2:e2:c0:ac:85: 8d:62:ff:57:bc:49:f0:5d:5b:b6:c4:90:f8:f5:8f:81:60:4c: ba:61:84:d2:e5:8b:c1:79:e9:c7:a5:b1:29:68:f1:b9:2a:c9: 8b:9e:29:aa:ea:0b:0c:c1:7d:f6:b8:1a:37:68:60:58:5b:98: 7d:4b:b1:b5:21:bc:24:69:01:1b:75:54:b1:78:80:c5:a7:a7: 5a:33:dd:b8:4f:4e:99:63:63:58:14:54:3c:2b:b0:79:ee:a5: 83:ad:a3:8a:b9:20:c8:61:b5:de:96:c5:98:f2:9f:d0:33:95: e8:17:ab:b1:8b:a4:c9:dc:63:fc:3d:4d:46:9e:ff:33:a3:35: fc:ea:58:19:49:79:c8:b9:b6:39:35:30:30:a2:73:a0:51:ab: 1e:8a:c1:07:dd:42:35:75:46:cf:f8:63:4d:2d:c4:40:ee:bd: c7:1a:a5:74:50:35:5d:46:10:11:cd:0c:0f:79:31:31:57:f0: 76:13:ca:eb:ec:f7:1b:b7:e1:8f:32:80:7a:bb:96:db:e1:14: 82:c0:43:94:cc:a9:60:0f:6d:29:00:25:5f:84:e6:84:9f:02: f5:c3:ca:14:6b:72:15:8a:49:c6:65:3f:7a:14:87:80:f3:14: c3:31:4b:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp2G1kByJnpbF/cPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk NjBmN2ZlOGItZWQxNi00NzdjLTkxNTYtNjU2YmY5MmQ0M2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg77fBK1ofUQdp39NmuMVma8twlWfOtU4urzh V/oQ394xyYi5PkRFm0gpX/f3rS0ICt2HxLYKq3T6pF2CRVDyDovOEqEWsXwJ85GJ +QFNcHMQmSZKCCZzWXHEI3lt7nrCqK9dncvbIbj7EpjLwF2mFmeevUm7ih1ebLKJ KzCBeGjQnv1fd9GQ0uk2l9B2/jBRFIWCrCJxRUsFUZGGjM9vHcFDCcYPustNQdoR ADaB3dggWBsWuMhN9Umxx69tcnefYOtDOW+IvKrPQexxyrJoE7G+o7JZ/Fqq2ba5 tqaafBdC5u4J7gQJ5SLEYvdb+97Tf3tbmtXW5pZfO74bqxgIZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNV3nZmI/qfv9Qhqh5uGqxMhZcfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDg3NjU3ZTctYzQ4Ny0z NDFiLThiYjktMzk3NTdhZDRlNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC7+g4CbLBFtaILMOWu8uLArIWNYv9XvEnwXVu2xJD49Y+BYEy6YYTS 5YvBeenHpbEpaPG5KsmLnimq6gsMwX32uBo3aGBYW5h9S7G1IbwkaQEbdVSxeIDF p6daM924T06ZY2NYFFQ8K7B57qWDraOKuSDIYbXelsWY8p/QM5XoF6uxi6TJ3GP8 PU1Gnv8zozX86lgZSXnIubY5NTAwonOgUaseisEH3UI1dUbP+GNNLcRA7r3HGqV0 UDVdRhARzQwPeTExV/B2E8rr7Pcbt+GPMoB6u5bb4RSCwEOUzKlgD20pACVfhOaE nwL1w8oUa3IViknGZT96FIeA8xTDMUtC -----END CERTIFICATE-----Generated at Wed Jul 23 17:16:14 2025 by rpki-client