$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29307df3-e2cb-3fc5-a3ab-cdaf24f0a3f9.roa File: 29307df3-e2cb-3fc5-a3ab-cdaf24f0a3f9.roa (raw, json) Hash identifier: sS31uxAlIPrZ3otWyO/XdfsT3k5hV+JWiASIXpMAPww= Subject key identifier: 3C:64:17:EC:04:A1:B2:37:6D:1B:F1:83:D9:3A:94:41:FE:49:1E:89 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A5B07DAE235A24B8BC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29307df3-e2cb-3fc5-a3ab-cdaf24f0a3f9.roa Signing time: Tue 01 Jul 2025 14:11:19 +0000 ROA not before: Tue 01 Jul 2025 14:11:19 +0000 ROA not after: Mon 29 Sep 2025 14:11:19 +0000 asID: 32651 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a5:b0:7d:ae:23:5a:24:b8:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:19 2025 GMT Not After : Sep 29 14:11:19 2025 GMT Subject: CN=8f91dc5f-4030-4bf3-ba79-48657f55c02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:6b:0e:ec:d5:84:5a:41:86:b9:56:a1:89: 54:90:51:9b:2a:5c:70:e5:9d:5b:f3:37:3a:4e:50: 87:6d:0b:30:08:01:a9:8a:2d:d2:d7:76:13:7f:0e: 7a:9e:b8:61:69:e5:f1:f2:d5:df:9d:39:0c:14:b6: a7:73:26:2a:cf:ed:6e:8e:23:c5:67:86:3e:a4:dc: 91:98:5f:f6:49:39:6e:b5:49:97:3d:78:44:fa:89: 18:c6:f8:01:44:cd:c0:cc:b6:74:c9:17:d0:39:95: e1:95:66:60:fc:a6:13:14:aa:94:31:01:7f:9a:99: d1:51:0a:61:d7:39:31:7a:1a:95:bd:d0:0c:06:89: 1a:ec:68:11:26:76:ef:c4:09:51:67:a1:00:70:a7: 20:4d:02:44:ec:fe:c5:2e:d6:83:fb:77:cf:df:48: f2:c2:8d:5b:64:64:00:49:3c:8b:4f:ea:5d:4a:df: c8:34:22:79:55:9f:6f:17:c2:e4:e0:cc:18:45:5a: f1:47:62:62:ed:4c:03:f1:1d:ff:e2:34:21:8e:2b: f0:19:45:33:39:15:88:c3:12:c3:25:ab:cf:3e:69: e5:90:c3:c9:de:2e:db:1f:7e:fa:d7:fc:a5:9b:0b: f9:36:fa:df:9a:f9:93:99:b3:e0:e0:d0:58:53:cc: 2c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:64:17:EC:04:A1:B2:37:6D:1B:F1:83:D9:3A:94:41:FE:49:1E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29307df3-e2cb-3fc5-a3ab-cdaf24f0a3f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9d:b6:1c:1f:0e:5a:a7:a1:bb:9d:a5:92:43:22:8f:f7:45: 14:81:10:04:05:14:ba:8d:26:8b:68:06:89:7a:3e:76:2d:cc: 7f:e2:48:fd:b3:93:78:05:81:1b:e1:0d:8f:45:40:b3:01:7d: 6a:03:40:58:92:ba:10:d3:3b:bd:d7:ec:30:ab:d0:40:fe:07: 9e:75:85:d9:9a:25:3a:06:4d:58:39:49:84:1b:7f:25:ea:3c: 2f:f2:3c:0f:dc:bd:cc:30:36:98:29:18:7f:2e:e0:3a:28:d3: 01:69:75:97:d7:51:ba:3f:9b:2e:df:b0:e2:10:8a:5d:12:df: 43:9c:68:61:aa:11:5c:c8:9d:13:06:18:05:9a:e3:ed:20:b1: ec:6a:4a:20:2c:01:ec:b8:26:2e:85:3f:49:3d:5d:5e:c3:86: ce:1a:c7:f0:ca:3b:67:70:b3:8c:0a:1a:34:c8:5b:95:58:a3: 43:34:3c:36:9b:a9:84:c8:0f:a7:18:a2:37:7f:dc:4b:da:16: 63:a1:a5:ae:2e:95:ac:79:c4:83:84:3c:21:9e:74:b1:15:58: ef:20:d9:6d:c9:a7:4d:50:34:92:a1:fd:39:6a:b5:dd:c0:7b: 0f:b8:6d:0f:66:69:b5:46:10:ea:21:3c:5b:6f:63:b0:06:d8: 98:c5:f3:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KWwfa4jWiS4vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTExOVoXDTI1MDkyOTE0MTExOVowLzEtMCsGA1UEAxMk OGY5MWRjNWYtNDAzMC00YmYzLWJhNzktNDg2NTdmNTVjMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1VrDuzVhFpBhrlWoYlUkFGbKlxw5Z1b8zc6 TlCHbQswCAGpii3S13YTfw56nrhhaeXx8tXfnTkMFLancyYqz+1ujiPFZ4Y+pNyR mF/2STlutUmXPXhE+okYxvgBRM3AzLZ0yRfQOZXhlWZg/KYTFKqUMQF/mpnRUQph 1zkxehqVvdAMBoka7GgRJnbvxAlRZ6EAcKcgTQJE7P7FLtaD+3fP30jywo1bZGQA STyLT+pdSt/INCJ5VZ9vF8Lk4MwYRVrxR2Ji7UwD8R3/4jQhjivwGUUzORWIwxLD JavPPmnlkMPJ3i7bH3761/ylmwv5NvrfmvmTmbPg4NBYU8wsAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxkF+wEobI3bRvxg9k6lEH+SR6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjkzMDdkZjMtZTJjYi0z ZmM1LWEzYWItY2RhZjI0ZjBhM2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSdthwfDlqnobudpZJDIo/3RRSBEAQFFLqNJotoBol6PnYtzH/iSP2z k3gFgRvhDY9FQLMBfWoDQFiSuhDTO73X7DCr0ED+B551hdmaJToGTVg5SYQbfyXq PC/yPA/cvcwwNpgpGH8u4Doo0wFpdZfXUbo/my7fsOIQil0S30OcaGGqEVzInRMG GAWa4+0gsexqSiAsAey4Ji6FP0k9XV7Dhs4ax/DKO2dws4wKGjTIW5VYo0M0PDab qYTID6cYojd/3EvaFmOhpa4ulax5xIOEPCGedLEVWO8g2W3Jp01QNJKh/Tlqtd3A ew+4bQ9mabVGEOohPFtvY7AG2JjF82g= -----END CERTIFICATE-----Generated at Thu Jul 10 04:04:26 2025 by rpki-client