$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/251d491e-55e0-3fbe-9fd3-65ea9619569b.roa File: 251d491e-55e0-3fbe-9fd3-65ea9619569b.roa (raw, json) Hash identifier: XGI2uVqbVxtN4IOzNRolcTsbbUFrKiYmHRfCQGh5wU8= Subject key identifier: 4E:CA:BE:70:4C:9A:B8:9F:E5:93:CF:F0:B3:93:34:5D:E6:48:9D:95 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A5A0C9E37FDC4A351E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/251d491e-55e0-3fbe-9fd3-65ea9619569b.roa Signing time: Tue 01 Jul 2025 14:11:19 +0000 ROA not before: Tue 01 Jul 2025 14:11:19 +0000 ROA not after: Mon 29 Sep 2025 14:11:19 +0000 asID: 397201 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a5:a0:c9:e3:7f:dc:4a:35:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:19 2025 GMT Not After : Sep 29 14:11:19 2025 GMT Subject: CN=d951cc40-e9a7-40b7-95bd-a05070428192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0d:f8:d2:4e:b6:3d:90:8e:cd:2d:45:2e:62: cd:f4:cb:a1:a6:cf:f4:f9:9b:93:1a:18:82:85:2d: 30:cb:ff:70:dc:72:c3:eb:b7:3c:96:58:93:25:19: 9c:de:f2:4d:1b:04:71:5f:e6:eb:ed:70:32:e9:7f: 65:d7:d7:69:af:04:9c:e3:c1:53:bb:4d:4f:65:cf: 14:11:11:c7:c1:05:40:58:46:54:2e:de:8a:9e:e5: 18:14:c4:85:3c:ca:1c:8a:d8:c5:4b:49:f4:8a:5f: d8:f6:19:e9:62:c7:50:1c:70:3a:b4:fe:8b:83:1f: b7:b9:17:0d:71:81:00:97:57:32:ef:1d:13:c0:4e: d4:00:c3:66:ed:2d:a9:c4:b3:33:21:5d:8b:be:60: b0:54:05:54:7e:8f:ad:61:6c:a3:33:a7:90:76:97: f9:a5:93:2b:0d:6f:a8:76:5c:2e:80:cb:24:98:93: 6d:41:b6:57:27:77:3d:2b:0b:43:d0:b3:48:6f:e7: 5d:ec:2e:ba:3f:64:0d:8f:60:d4:8e:71:37:88:f1: 99:69:ba:d2:ee:8b:d3:e8:7c:57:3d:63:90:26:85: 7a:0f:f1:01:ba:c7:5c:69:eb:73:21:09:c9:91:3e: 28:36:96:9f:17:e6:b3:35:ae:48:46:6b:55:8e:62: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CA:BE:70:4C:9A:B8:9F:E5:93:CF:F0:B3:93:34:5D:E6:48:9D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/251d491e-55e0-3fbe-9fd3-65ea9619569b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:00:91:ad:1d:37:0f:77:c1:22:1f:94:09:ca:9e:1b:97:a7: fc:fe:3f:94:d8:05:e2:e0:c2:66:70:b1:63:8d:a5:e2:62:e0: c8:ea:11:cc:48:2e:c7:42:69:ce:24:27:02:2e:23:1e:af:3c: 43:5f:17:4a:c0:f8:8d:3e:53:ed:aa:81:cc:76:b6:b0:bf:76: 0f:bd:ff:39:b6:d1:89:02:00:91:b4:94:f0:a4:19:e1:80:86: 1a:f9:9d:4d:46:4a:c6:90:6f:73:2d:3a:2a:9f:33:bf:ca:0e: 22:f4:7b:81:79:3e:e8:5a:1e:b2:be:d6:1e:d5:06:db:bd:31: 1d:dd:64:7b:8e:cf:4a:73:b8:01:ca:32:8f:8b:38:ec:d5:4f: e4:92:83:30:2e:2e:50:bd:62:9d:cd:f0:30:ec:57:a3:70:3e: 4a:b4:4f:ce:e8:8e:fe:83:dc:89:c5:3e:8b:58:4e:b4:ab:0c: 97:55:5c:8c:a9:32:2e:76:5b:07:bf:f5:16:29:61:59:c7:5e: cf:b6:a1:3a:d4:a8:54:2b:8b:0b:38:d2:4d:e7:b5:21:f4:4b: 8d:e8:50:b6:bc:ef:c3:dd:b0:c6:d9:20:ec:88:a0:68:8b:f8: 1b:5a:39:74:c3:1e:a7:6c:c1:d7:e6:1f:18:c3:fc:69:a1:34: d0:d5:ff:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KWgyeN/3Eo1HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTExOVoXDTI1MDkyOTE0MTExOVowLzEtMCsGA1UEAxMk ZDk1MWNjNDAtZTlhNy00MGI3LTk1YmQtYTA1MDcwNDI4MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA340k62PZCOzS1FLmLN9Muhps/0+ZuTGhiC hS0wy/9w3HLD67c8lliTJRmc3vJNGwRxX+br7XAy6X9l19dprwSc48FTu01PZc8U ERHHwQVAWEZULt6KnuUYFMSFPMocitjFS0n0il/Y9hnpYsdQHHA6tP6Lgx+3uRcN cYEAl1cy7x0TwE7UAMNm7S2pxLMzIV2LvmCwVAVUfo+tYWyjM6eQdpf5pZMrDW+o dlwugMskmJNtQbZXJ3c9KwtD0LNIb+dd7C66P2QNj2DUjnE3iPGZabrS7ovT6HxX PWOQJoV6D/EBusdcaetzIQnJkT4oNpafF+azNa5IRmtVjmKnswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7KvnBMmrif5ZPP8LOTNF3mSJ2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjUxZDQ5MWUtNTVlMC0z ZmJlLTlmZDMtNjVlYTk2MTk1NjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAAka0dNw93wSIflAnKnhuXp/z+P5TYBeLgwmZwsWONpeJi4MjqEcxI LsdCac4kJwIuIx6vPENfF0rA+I0+U+2qgcx2trC/dg+9/zm20YkCAJG0lPCkGeGA hhr5nU1GSsaQb3MtOiqfM7/KDiL0e4F5PuhaHrK+1h7VBtu9MR3dZHuOz0pzuAHK Mo+LOOzVT+SSgzAuLlC9Yp3N8DDsV6NwPkq0T87ojv6D3InFPotYTrSrDJdVXIyp Mi52Wwe/9RYpYVnHXs+2oTrUqFQriws40k3ntSH0S43oULa878PdsMbZIOyIoGiL +BtaOXTDHqdswdfmHxjD/GmhNNDV//g= -----END CERTIFICATE-----Generated at Thu Jul 10 07:04:46 2025 by rpki-client