$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9c9aa7-86df-3a68-b98f-36bd34c5a754.roa File: 3c9c9aa7-86df-3a68-b98f-36bd34c5a754.roa (raw, json) Hash identifier: dzDH5bHIUv9z1dyZQcyowntEOgoewgmiJZdq8wtXYWs= Subject key identifier: A4:38:6E:9B:6F:B1:36:4F:F4:73:8D:14:A4:C5:56:A0:C5:60:24:4A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A365695F409C5C5D3200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9c9aa7-86df-3a68-b98f-36bd34c5a754.roa Signing time: Tue 01 Jul 2025 14:11:18 +0000 ROA not before: Tue 01 Jul 2025 14:11:18 +0000 ROA not after: Mon 29 Sep 2025 14:11:18 +0000 asID: 20172 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a3:65:69:5f:40:9c:5c:5d:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:18 2025 GMT Not After : Sep 29 14:11:18 2025 GMT Subject: CN=ef0d9955-5414-49ca-91c2-abae9f70676c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:02:bc:10:f6:e8:3d:a3:c5:c1:b4:dc:f7: 21:ef:0a:e5:aa:31:c6:18:a1:2b:e3:ad:0d:57:94: 55:bb:72:3c:13:ba:73:93:73:91:79:e8:60:d8:09: f1:86:99:d5:e1:a7:0c:4b:8a:35:66:f8:2c:3a:fd: ac:9b:de:f9:ef:c1:b3:38:4a:c4:7c:1e:49:64:91: a2:f9:5f:e3:77:a2:9d:77:4d:84:9c:02:eb:81:b7: 3f:76:2b:c1:66:cb:8c:10:6b:6f:04:60:1d:04:c8: 63:46:82:8c:73:0b:f8:77:80:7d:34:cf:f8:e6:ae: 03:3f:c8:1b:ce:ba:ca:0c:87:95:ce:33:dc:1d:6c: 97:f9:2c:54:09:18:63:e8:23:d6:f5:48:a7:98:71: d6:24:8c:94:5c:aa:f1:03:61:49:e0:72:a3:44:69: 17:fd:11:b8:11:42:a6:53:81:e0:f2:07:4e:53:84: be:a3:16:64:ce:a4:b3:aa:86:d6:1c:75:7a:01:b8: 75:86:cc:22:45:99:0b:b9:c0:dd:62:b0:25:fa:86: 57:77:66:e4:39:44:02:4e:6f:a3:ba:80:49:7f:45: b9:f9:16:5d:b7:b4:da:b5:1c:0a:43:f1:3f:d8:2c: 85:ad:da:d4:da:e9:2a:2b:fd:37:6b:20:af:e1:73: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:38:6E:9B:6F:B1:36:4F:F4:73:8D:14:A4:C5:56:A0:C5:60:24:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9c9aa7-86df-3a68-b98f-36bd34c5a754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:82:d7:0c:25:78:d9:d8:ca:a2:a4:5a:d3:ae:59:13:7d:80: 2f:f8:aa:aa:f2:46:5c:95:19:1e:39:c9:77:96:8b:70:09:c5: c2:48:e0:f3:f6:c8:86:f2:ca:d5:0e:03:89:4e:02:f9:0e:92: 48:e8:3e:69:5c:a0:02:b8:95:d3:36:9d:1d:a9:6e:04:f6:23: d2:92:f6:bd:fe:92:1a:7f:ef:1d:b4:1b:60:46:0b:63:fc:90: 8d:ac:69:8a:5e:52:05:b6:4b:a5:0d:48:cf:ef:32:81:1d:a5: a5:aa:f1:71:64:e8:a0:61:07:52:76:ed:f0:bc:ff:f6:07:79: c8:e1:f0:d8:76:48:2a:12:16:f3:8e:f6:0c:c1:5c:15:a1:a3: 8f:0c:e8:78:17:4e:f7:34:ee:bf:f7:31:76:d2:ae:35:d5:8f: 62:ae:44:ac:79:7c:93:f5:e5:a8:8f:70:5c:23:87:64:8f:19: 56:e9:00:60:6e:f5:e7:92:25:bd:62:3d:3e:02:d5:30:5e:4f: 4b:ef:2c:03:81:96:64:78:40:d0:46:03:94:00:95:6e:8c:95: 23:72:15:86:31:b8:bb:39:41:07:ba:16:84:fd:fd:d2:38:86: d4:13:43:45:2e:4a:5d:85:db:b4:23:71:25:da:d3:8a:1f:b5: 65:12:0d:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KNlaV9AnFxdMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTExOFoXDTI1MDkyOTE0MTExOFowLzEtMCsGA1UEAxMk ZWYwZDk5NTUtNTQxNC00OWNhLTkxYzItYWJhZTlmNzA2NzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LgCvBD26D2jxcG03Pch7wrlqjHGGKEr460N V5RVu3I8E7pzk3OReehg2AnxhpnV4acMS4o1ZvgsOv2sm97578GzOErEfB5JZJGi +V/jd6Kdd02EnALrgbc/divBZsuMEGtvBGAdBMhjRoKMcwv4d4B9NM/45q4DP8gb zrrKDIeVzjPcHWyX+SxUCRhj6CPW9UinmHHWJIyUXKrxA2FJ4HKjRGkX/RG4EUKm U4Hg8gdOU4S+oxZkzqSzqobWHHV6Abh1hswiRZkLucDdYrAl+oZXd2bkOUQCTm+j uoBJf0W5+RZdt7TatRwKQ/E/2CyFrdrU2ukqK/03ayCv4XPt/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQ4bptvsTZP9HONFKTFVqDFYCRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2M5YzlhYTctODZkZi0z YTY4LWI5OGYtMzZiZDM0YzVhNzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGC1wwleNnYyqKkWtOuWRN9gC/4qqryRlyVGR45yXeWi3AJxcJI4PP2 yIbyytUOA4lOAvkOkkjoPmlcoAK4ldM2nR2pbgT2I9KS9r3+khp/7x20G2BGC2P8 kI2saYpeUgW2S6UNSM/vMoEdpaWq8XFk6KBhB1J27fC8//YHecjh8Nh2SCoSFvOO 9gzBXBWho48M6HgXTvc07r/3MXbSrjXVj2KuRKx5fJP15aiPcFwjh2SPGVbpAGBu 9eeSJb1iPT4C1TBeT0vvLAOBlmR4QNBGA5QAlW6MlSNyFYYxuLs5QQe6FoT9/dI4 htQTQ0UuSl2F27QjcSXa04oftWUSDfQ= -----END CERTIFICATE-----Generated at Thu Jul 10 04:09:11 2025 by rpki-client