$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3e54935-87ab-3337-b0a3-815b6773e535.roa File: f3e54935-87ab-3337-b0a3-815b6773e535.roa (raw, json) Hash identifier: TBCk+KVtVW/5sKmTAC1dbHEm986swBAhZsq8+onjtpQ= Subject key identifier: B0:28:25:C6:47:8B:65:71:5A:EF:E0:C3:97:87:E6:61:F6:17:D5:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A66C087B8EC3D0183E38A1480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3e54935-87ab-3337-b0a3-815b6773e535.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 396611 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:87:b8:ec:3d:01:83:e3:8a:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=4bfd96e1-8e3d-4d04-99a9-b006592396b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0a:43:72:22:58:e7:f6:dc:ac:47:b5:b5:9d: 76:b8:0c:6e:b0:16:5d:f8:5f:17:04:6a:93:56:ba: 91:fa:42:a3:9c:0c:61:ba:21:2a:8f:2c:4a:17:62: 1a:c1:1e:53:00:34:5c:82:9e:1b:2d:f1:be:2d:3a: d4:9a:da:a7:39:a7:a8:88:b3:c6:51:b9:68:74:c0: 2b:cf:23:46:bf:28:e7:f1:d0:8d:d4:c2:68:78:3f: a7:69:7d:bc:07:19:78:6d:60:cd:09:eb:95:d6:32: 1c:33:24:e9:d1:5e:b2:0c:7f:f9:43:fd:70:2f:0e: aa:b2:ea:ae:62:4d:5f:80:c3:97:c8:cb:16:f7:1f: 20:fb:83:00:e8:ca:76:ce:f5:d5:a3:d1:da:7b:36: 7c:5e:c2:f7:6f:3e:aa:60:46:5a:31:3e:64:db:bf: e7:24:af:c7:7d:70:00:ba:05:22:ef:d9:8f:cb:80: 76:ac:a4:5e:03:bc:ce:7e:83:f9:b0:70:69:03:b0: c5:c3:a9:71:6f:5d:d4:41:4d:4b:bd:e7:a3:01:d7: 8f:82:1e:c9:61:d0:66:72:70:19:84:28:b7:bc:a3: dc:e6:11:66:0b:71:aa:02:e3:53:cb:7c:5b:87:9d: 1c:15:aa:bd:8e:d3:70:82:fc:b4:cd:3e:15:ea:09: 35:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:28:25:C6:47:8B:65:71:5A:EF:E0:C3:97:87:E6:61:F6:17:D5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3e54935-87ab-3337-b0a3-815b6773e535.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:76:50:da:05:f0:1f:10:a1:bc:55:d1:9c:32:b0:6b:20:46: 3f:d2:b2:e4:80:e6:12:e0:ba:0d:93:2f:52:6b:3d:70:ff:cf: b3:e9:3e:53:ee:2d:28:77:22:31:d8:47:55:31:dd:8a:e6:aa: 51:8c:5c:6f:db:b3:34:b1:d6:e3:a0:d7:2d:a7:e0:11:57:7f: 09:c8:ba:75:a6:97:d9:43:a4:57:04:cc:59:0b:31:98:46:50: 96:5b:89:1d:8b:b9:bb:09:7b:da:ad:bf:01:d2:a9:2b:c9:bd: 4f:f1:7d:48:44:cb:28:f1:26:98:c5:da:72:88:89:b3:83:16: 51:e6:db:3a:04:9e:38:2c:63:26:12:09:8b:5c:2f:47:1c:6a: 17:77:df:f0:bb:f2:3f:7f:ac:2e:51:0d:08:35:20:4d:b2:ec: c6:03:02:d5:f5:a3:c0:fd:64:30:13:12:66:b5:29:af:4f:64: 94:95:bc:0d:26:0f:9b:67:28:72:02:95:cf:db:b4:77:07:91: 9f:41:f1:8d:8d:41:dd:ce:df:c0:ef:b7:99:5a:8a:2d:46:a0: c5:e3:bc:29:81:af:22:cd:33:6e:65:e1:fe:e6:e0:dc:44:a9: bb:3f:0a:c8:9a:3b:9d:1a:21:fc:32:b7:65:7d:d6:4d:93:f9: 32:f1:e8:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwIe47D0Bg+OKFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk NGJmZDk2ZTEtOGUzZC00ZDA0LTk5YTktYjAwNjU5MjM5NmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwpDciJY5/bcrEe1tZ12uAxusBZd+F8XBGqT VrqR+kKjnAxhuiEqjyxKF2IawR5TADRcgp4bLfG+LTrUmtqnOaeoiLPGUblodMAr zyNGvyjn8dCN1MJoeD+naX28Bxl4bWDNCeuV1jIcMyTp0V6yDH/5Q/1wLw6qsuqu Yk1fgMOXyMsW9x8g+4MA6Mp2zvXVo9HaezZ8XsL3bz6qYEZaMT5k27/nJK/HfXAA ugUi79mPy4B2rKReA7zOfoP5sHBpA7DFw6lxb13UQU1LveejAdePgh7JYdBmcnAZ hCi3vKPc5hFmC3GqAuNTy3xbh50cFaq9jtNwgvy0zT4V6gk1VwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLAoJcZHi2VxWu/gw5eH5mH2F9WAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjNlNTQ5MzUtODdhYi0z MzM3LWIwYTMtODE1YjY3NzNlNTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrdlDaBfAfEKG8VdGcMrBrIEY/0rLkgOYS4LoNky9Saz1w/8+z6T5T 7i0odyIx2EdVMd2K5qpRjFxv27M0sdbjoNctp+ARV38JyLp1ppfZQ6RXBMxZCzGY RlCWW4kdi7m7CXvarb8B0qkryb1P8X1IRMso8SaYxdpyiImzgxZR5ts6BJ44LGMm EgmLXC9HHGoXd9/wu/I/f6wuUQ0INSBNsuzGAwLV9aPA/WQwExJmtSmvT2SUlbwN Jg+bZyhyApXP27R3B5GfQfGNjUHdzt/A77eZWootRqDF47wpga8izTNuZeH+5uDc RKm7PwrImjudGiH8MrdlfdZNk/ky8eib -----END CERTIFICATE-----Generated at Thu Jul 24 23:36:21 2025 by rpki-client