$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89f4704-3804-3d4c-ab7e-73dacece75fe.roa File: f89f4704-3804-3d4c-ab7e-73dacece75fe.roa (raw, json) Hash identifier: d3zleYfesor+gsmjab19T77wg6gnXUNwVkMQ8ORjkEk= Subject key identifier: 4B:BE:15:16:2E:00:D1:60:6D:E2:C3:E9:24:B7:DD:5E:B9:35:09:C0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A66C08797DC5771F39688DF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89f4704-3804-3d4c-ab7e-73dacece75fe.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 396550 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:87:97:dc:57:71:f3:96:88:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=8e52aab2-5c10-42ea-a901-02ff8a38874e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d8:09:63:88:b6:0c:1a:0d:2a:18:90:cd:7f: 0a:7f:a9:b2:47:f9:fc:f3:fe:59:40:5c:9a:0b:67: ed:fb:89:21:c3:a0:21:63:04:e0:9e:f9:f6:b3:99: 0e:4e:4c:56:78:c0:92:91:bf:ed:36:31:9c:56:6b: ad:f9:36:35:4e:9d:7e:7a:c3:29:eb:66:f2:06:6b: 83:d3:0b:2b:f9:9e:2a:07:7a:78:56:6c:10:2b:06: 46:1d:f0:af:46:e5:37:33:00:45:ec:ff:d9:ac:e6: b5:e9:57:53:73:44:71:9c:a2:8a:9c:de:30:f9:b9: 04:c7:3a:4b:8b:5f:0d:5e:a6:4b:77:3c:c9:06:b9: cf:95:61:0e:0c:81:72:1d:2e:a5:94:70:17:72:9c: d5:16:66:ae:a5:ee:03:90:6c:63:2c:e7:61:02:f8: 7c:69:e8:12:81:48:8a:40:8e:c4:d7:cc:98:21:d5: 5d:1c:60:51:c4:9d:34:6a:c1:fd:d9:36:62:62:ac: da:79:db:df:c1:82:a1:ab:f9:4d:94:cc:bf:a5:8e: f0:6d:dc:19:0f:42:61:28:7d:f2:4e:10:4c:2e:01: ac:d8:0e:d0:a6:0f:08:f7:0c:9c:a2:25:dc:37:5f: a2:d6:cc:9f:d3:1a:41:37:f6:b8:d4:dc:b1:ce:b1: 0f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BE:15:16:2E:00:D1:60:6D:E2:C3:E9:24:B7:DD:5E:B9:35:09:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89f4704-3804-3d4c-ab7e-73dacece75fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a0:4d:87:54:3b:63:61:7b:bc:0c:52:25:29:fa:6a:24:c7: 19:92:88:34:5a:5f:dd:df:7a:99:28:69:aa:5f:ee:38:74:a5: 73:c3:3f:6b:a8:61:61:88:8d:62:44:4c:37:68:7a:a5:66:29: 6a:4c:37:55:35:9e:d1:08:62:8c:35:a4:f3:eb:97:26:7e:c3: d8:a6:87:5e:8d:fe:c0:80:45:9e:af:9b:1f:94:35:f3:da:a7: 68:3e:92:36:22:5c:5c:0d:15:73:50:cb:3a:09:b1:8f:d4:91: 05:77:09:06:d1:6b:54:93:cb:22:3f:ed:1c:92:1b:80:6b:e6: b0:ab:51:5f:f9:4d:b1:ff:c1:d8:44:94:f6:73:bc:8e:1a:69: 6a:76:48:68:4b:85:cc:a0:ff:7b:d7:9a:a2:85:44:7c:e8:99: 07:4f:be:cd:87:ec:cf:69:d7:8d:61:39:57:d1:a8:60:98:16: 59:23:d1:ce:02:b9:a5:8d:d8:65:91:07:3f:00:15:c5:83:54: 7b:f6:c1:a8:1f:5b:0e:77:3f:d6:e6:21:f2:83:4e:bd:0e:86: d6:16:77:09:3a:13:97:4b:80:77:4c:be:57:b3:e5:7f:b0:8d: 7d:bd:5d:e2:7f:50:b8:68:48:a9:71:8d:cd:e6:b8:5b:41:32: b0:39:e3:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwIeX3Fdx85aI34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk OGU1MmFhYjItNWMxMC00MmVhLWE5MDEtMDJmZjhhMzg4NzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9gJY4i2DBoNKhiQzX8Kf6myR/n88/5ZQFya C2ft+4khw6AhYwTgnvn2s5kOTkxWeMCSkb/tNjGcVmut+TY1Tp1+esMp62byBmuD 0wsr+Z4qB3p4VmwQKwZGHfCvRuU3MwBF7P/ZrOa16VdTc0RxnKKKnN4w+bkExzpL i18NXqZLdzzJBrnPlWEODIFyHS6llHAXcpzVFmaupe4DkGxjLOdhAvh8aegSgUiK QI7E18yYIdVdHGBRxJ00asH92TZiYqzaedvfwYKhq/lNlMy/pY7wbdwZD0JhKH3y ThBMLgGs2A7Qpg8I9wycoiXcN1+i1syf0xpBN/a41NyxzrEP5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEu+FRYuANFgbeLD6SS33V65NQnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjg5ZjQ3MDQtMzgwNC0z ZDRjLWFiN2UtNzNkYWNlY2U3NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxoE2HVDtjYXu8DFIlKfpqJMcZkog0Wl/d33qZKGmqX+44dKVzwz9r qGFhiI1iREw3aHqlZilqTDdVNZ7RCGKMNaTz65cmfsPYpodejf7AgEWer5sflDXz 2qdoPpI2IlxcDRVzUMs6CbGP1JEFdwkG0WtUk8siP+0ckhuAa+awq1Ff+U2x/8HY RJT2c7yOGmlqdkhoS4XMoP9715qihUR86JkHT77Nh+zPadeNYTlX0ahgmBZZI9HO ArmljdhlkQc/ABXFg1R79sGoH1sOdz/W5iHyg069DobWFncJOhOXS4B3TL5Xs+V/ sI19vV3if1C4aEipcY3N5rhbQTKwOeNu -----END CERTIFICATE-----Generated at Wed Jul 23 23:22:49 2025 by rpki-client