$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa File: ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa (raw, json) Hash identifier: QhW7DCKD2UVicp8qtNhBsKBbQrylXRIV1Ap4W9AjMfM= Subject key identifier: 13:7C:AA:1C:77:FF:BF:8B:68:8B:6D:49:B3:9D:1A:B1:50:91:0C:66 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7350B6F767E730D8FFDE9100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 396554 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b6:f7:67:e7:30:d8:ff:de:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=c2aab285-3141-4d86-b240-4be57cdbe5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:17:dc:48:62:bc:58:16:35:a8:c1:f4:99: 5f:07:fb:d7:a7:93:f2:58:11:31:fa:f2:79:81:d0: f2:0e:2c:2b:16:2b:a7:40:18:d7:2a:aa:e2:8d:f2: 16:ab:93:90:2a:e7:05:d7:a4:bb:61:86:af:e2:b8: 11:ab:fe:d2:08:1a:a2:87:e8:92:13:93:50:08:38: a5:9f:43:45:c5:40:d8:aa:49:f6:ba:d9:98:68:bb: 01:a5:97:8f:3d:c6:d6:be:12:ed:72:09:9e:39:1f: df:09:23:8b:8b:e0:23:32:08:22:ca:f0:5f:11:2e: ac:43:25:cf:9e:e7:71:7f:fb:32:0b:ad:79:b1:11: 32:e1:7c:f9:08:aa:e0:91:9b:91:3b:d6:21:0a:9c: ff:41:55:79:63:7f:c4:42:3e:c7:cb:22:b2:fe:68: 8c:70:c1:b7:6f:34:80:e4:72:3f:a5:5a:2f:3d:61: e6:f2:c2:27:6c:09:cb:4a:a3:99:04:50:93:9f:33: 5e:d2:85:03:ea:19:fe:1f:09:ee:c8:8a:4a:98:62: ff:65:83:70:e1:47:cb:45:f3:9e:54:49:52:f4:e9: b1:99:25:f9:ac:d3:ee:24:17:5f:4a:8d:4c:3c:aa: ad:33:9f:17:2d:80:8b:fc:e1:61:a5:89:7c:ec:f7: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7C:AA:1C:77:FF:BF:8B:68:8B:6D:49:B3:9D:1A:B1:50:91:0C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:63:60:9c:b5:1b:a8:6c:de:a4:2c:4c:0a:9a:ef:5f:3a:e5: 17:0c:e7:a0:f6:93:ca:13:84:6c:cc:7d:ab:ea:02:1f:a9:84: 7c:dd:2f:e1:dd:e3:1b:44:20:88:fa:0d:12:99:39:bc:70:5d: 3a:49:3e:bd:0d:9f:ae:04:bf:37:cf:05:7f:63:0f:41:58:cf: c0:8e:07:79:69:8b:09:84:18:53:63:6c:1a:ee:68:7f:5f:8d: 98:b3:5c:7c:ec:81:dc:61:36:fb:83:95:94:31:ff:df:b7:1d: 2f:a5:57:78:da:01:a2:16:63:ee:64:cf:83:5f:ce:33:20:12: f1:58:29:fd:4d:1f:34:69:76:4d:db:23:1d:2e:a2:b3:cf:8c: c8:56:90:72:a8:d5:2e:38:02:84:26:68:e5:e1:71:04:8c:64: 86:1b:20:b7:aa:db:b4:1c:e9:c2:93:fd:cb:93:3a:b7:8f:72: 7e:8c:64:c5:b3:4a:18:bc:5b:d2:d9:1d:88:4a:10:19:58:c4: d6:38:1e:35:e0:bd:91:9a:6b:25:12:77:f4:02:6a:57:4d:18: 08:99:a9:47:1d:a1:6c:86:18:89:1b:56:8f:c7:ac:30:74:ad: 7c:62:8a:7d:c4:7c:ba:e0:a5:7e:97:ea:fc:df:c8:5f:6e:3e: b4:af:2c:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzULb3Z+cw2P/ekQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk YzJhYWIyODUtMzE0MS00ZDg2LWIyNDAtNGJlNTdjZGJlNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriIX3EhivFgWNajB9JlfB/vXp5PyWBEx+vJ5 gdDyDiwrFiunQBjXKqrijfIWq5OQKucF16S7YYav4rgRq/7SCBqih+iSE5NQCDil n0NFxUDYqkn2utmYaLsBpZePPcbWvhLtcgmeOR/fCSOLi+AjMggiyvBfES6sQyXP nudxf/syC615sREy4Xz5CKrgkZuRO9YhCpz/QVV5Y3/EQj7HyyKy/miMcMG3bzSA 5HI/pVovPWHm8sInbAnLSqOZBFCTnzNe0oUD6hn+HwnuyIpKmGL/ZYNw4UfLRfOe VElS9OmxmSX5rNPuJBdfSo1MPKqtM58XLYCL/OFhpYl87PdGcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBN8qhx3/7+LaIttSbOdGrFQkQxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmY1YThkYjktMDQwMC0z YzYzLThkZTQtNmRkODQ4OWExMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmY2CctRuobN6kLEwKmu9fOuUXDOeg9pPKE4RszH2r6gIfqYR83S/h 3eMbRCCI+g0SmTm8cF06ST69DZ+uBL83zwV/Yw9BWM/Ajgd5aYsJhBhTY2wa7mh/ X42Ys1x87IHcYTb7g5WUMf/ftx0vpVd42gGiFmPuZM+DX84zIBLxWCn9TR80aXZN 2yMdLqKzz4zIVpByqNUuOAKEJmjl4XEEjGSGGyC3qtu0HOnCk/3Lkzq3j3J+jGTF s0oYvFvS2R2IShAZWMTWOB414L2RmmslEnf0AmpXTRgImalHHaFshhiJG1aPx6ww dK18Yop9xHy64KV+l+r838hfbj60ryyZ -----END CERTIFICATE-----Generated at Wed Jul 23 17:19:52 2025 by rpki-client