$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0aadb4ac-42ba-3259-8f4c-8a0de82ce0e9.roa File: 0aadb4ac-42ba-3259-8f4c-8a0de82ce0e9.roa (raw, json) Hash identifier: 9Hw/wyKY12I01bXEKB6sv/TYuhdc/CCB7iFPJIyrWn8= Subject key identifier: 95:50:4D:5D:D9:19:AC:EF:C0:43:75:3B:AE:CC:31:E9:46:2D:A4:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A50E6D41E6AFB8FBD280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0aadb4ac-42ba-3259-8f4c-8a0de82ce0e9.roa Signing time: Tue 01 Jul 2025 14:11:18 +0000 ROA not before: Tue 01 Jul 2025 14:11:18 +0000 ROA not after: Mon 29 Sep 2025 14:11:18 +0000 asID: 36619 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a5:0e:6d:41:e6:af:b8:fb:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:18 2025 GMT Not After : Sep 29 14:11:18 2025 GMT Subject: CN=80ac82a9-4629-4f58-a7ec-225d7b0b5c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:ce:02:75:39:94:00:84:75:c3:08:84:96: f3:27:ca:eb:91:6e:b3:14:2e:a1:51:35:f1:c5:8b: c3:cb:7f:59:44:5f:46:86:e9:67:9d:42:93:1c:25: b0:7b:8d:fd:45:13:fe:4c:a9:01:8c:b7:92:62:44: 3f:0c:b5:3d:50:52:2f:2f:a5:45:8d:01:6c:bd:13: 11:9d:e7:10:b2:93:98:7b:94:1f:83:52:90:73:2f: ce:ee:8d:98:c0:39:47:86:e9:b2:7e:11:a4:85:10: f8:b6:da:00:64:77:ad:a0:5e:18:84:83:2e:88:ee: 32:ba:3d:56:a7:83:c6:65:e3:a6:85:09:3b:d1:0f: 51:6c:fc:eb:26:87:d4:db:0c:70:44:96:f6:23:72: 6f:8e:a4:aa:0c:95:6f:1d:0e:fb:b8:4a:8d:0f:ad: 2c:a7:72:c4:09:19:79:d0:67:84:af:6e:7a:c9:92: bc:ae:3a:83:69:78:9e:cf:6c:c1:49:be:6a:06:43: 7e:af:14:1c:7c:95:a3:c1:9b:48:54:04:62:3f:07: 03:0b:59:4a:3c:2a:d1:68:6d:58:1c:99:30:67:35: 07:45:9a:d6:6b:dc:53:38:a4:9d:7a:66:34:ee:d3: 28:cc:1d:af:c3:92:c1:66:e7:a5:62:6e:6e:57:37: 19:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:50:4D:5D:D9:19:AC:EF:C0:43:75:3B:AE:CC:31:E9:46:2D:A4:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0aadb4ac-42ba-3259-8f4c-8a0de82ce0e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:86:d3:de:26:fc:de:51:04:46:b6:4e:70:e4:83:c0:0c:6e: 29:42:7b:8b:c9:4e:34:c2:3e:21:f3:07:61:23:67:bb:33:d5: 3b:87:13:62:65:a1:44:38:d1:6f:f9:ca:49:13:2d:55:1d:69: a4:02:cc:7a:df:de:62:6b:e0:0c:42:f9:21:db:3b:51:48:a8: c1:98:fa:07:4b:59:bc:8f:09:a7:fe:86:db:d1:6c:1f:e0:23: 10:ae:b6:8f:5f:cf:4d:fc:7f:4c:42:e6:78:82:86:f0:91:0d: c5:94:f3:c4:5f:2a:38:95:74:59:1b:18:bd:13:31:9e:41:9e: 4c:36:e6:de:7e:b8:22:96:76:9f:d0:66:a2:2e:01:92:17:cc: 85:81:82:34:5a:fd:76:9c:1f:46:d7:b8:f1:78:73:f6:2a:1a: ea:2f:94:c8:91:f7:32:45:f0:68:d9:c1:05:b6:4d:81:ac:5c: 1d:19:04:cb:20:9b:02:2e:c2:b0:15:50:0f:2c:32:c5:c9:5d: 8d:48:eb:14:e5:ca:4a:02:6c:dc:3e:a7:44:b8:99:0f:a5:e3: 7f:40:0a:54:58:20:f0:bb:57:52:b2:70:af:a1:c6:0a:b2:be: 64:91:06:02:a0:20:71:3e:a1:d6:71:bc:58:9f:2f:40:74:a7: ba:89:20:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KUObUHmr7j70oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTExOFoXDTI1MDkyOTE0MTExOFowLzEtMCsGA1UEAxMk ODBhYzgyYTktNDYyOS00ZjU4LWE3ZWMtMjI1ZDdiMGI1YzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRDOAnU5lACEdcMIhJbzJ8rrkW6zFC6hUTXx xYvDy39ZRF9GhulnnUKTHCWwe439RRP+TKkBjLeSYkQ/DLU9UFIvL6VFjQFsvRMR necQspOYe5Qfg1KQcy/O7o2YwDlHhumyfhGkhRD4ttoAZHetoF4YhIMuiO4yuj1W p4PGZeOmhQk70Q9RbPzrJofU2wxwRJb2I3JvjqSqDJVvHQ77uEqND60sp3LECRl5 0GeEr256yZK8rjqDaXiez2zBSb5qBkN+rxQcfJWjwZtIVARiPwcDC1lKPCrRaG1Y HJkwZzUHRZrWa9xTOKSdemY07tMozB2vw5LBZuelYm5uVzcZdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVQTV3ZGazvwEN1O67MMelGLaRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGFhZGI0YWMtNDJiYS0z MjU5LThmNGMtOGEwZGU4MmNlMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmG094m/N5RBEa2TnDkg8AMbilCe4vJTjTCPiHzB2EjZ7sz1TuHE2Jl oUQ40W/5ykkTLVUdaaQCzHrf3mJr4AxC+SHbO1FIqMGY+gdLWbyPCaf+htvRbB/g IxCuto9fz038f0xC5niChvCRDcWU88RfKjiVdFkbGL0TMZ5Bnkw25t5+uCKWdp/Q ZqIuAZIXzIWBgjRa/XacH0bXuPF4c/YqGuovlMiR9zJF8GjZwQW2TYGsXB0ZBMsg mwIuwrAVUA8sMsXJXY1I6xTlykoCbNw+p0S4mQ+l439AClRYIPC7V1KycK+hxgqy vmSRBgKgIHE+odZxvFifL0B0p7qJIKA= -----END CERTIFICATE-----Generated at Thu Jul 10 11:32:25 2025 by rpki-client