$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e004d30-156b-3c71-b54e-607e2b8b76c9.roa File: 3e004d30-156b-3c71-b54e-607e2b8b76c9.roa (raw, json) Hash identifier: RiR6tNy6pr7IcUYAPJXNW5w2AWIn39ucmMNpCI4N9e4= Subject key identifier: A7:83:B2:DA:CF:05:51:ED:3E:E7:97:F2:DC:F9:03:A3:F3:21:32:EA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A770412BF5C7E7F0A3C8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e004d30-156b-3c71-b54e-607e2b8b76c9.roa Signing time: Tue 01 Jul 2025 14:11:19 +0000 ROA not before: Tue 01 Jul 2025 14:11:19 +0000 ROA not after: Mon 29 Sep 2025 14:11:19 +0000 asID: 396565 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a7:70:41:2b:f5:c7:e7:f0:a3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:19 2025 GMT Not After : Sep 29 14:11:19 2025 GMT Subject: CN=ab1543e3-9b7e-4e2b-8afe-bcf66e3d6e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:df:47:48:82:6d:e1:75:4e:18:f7:f2:ee:51: 0a:84:2e:7f:62:1d:03:45:06:63:83:d8:b8:79:f8: ad:71:45:43:81:2a:42:99:b2:7d:4a:3c:ef:13:8b: f9:37:40:ff:f7:0f:f0:01:c6:db:bc:49:ae:b4:bb: 7a:57:89:21:d5:13:8b:3b:99:dd:06:b2:28:b1:3a: 72:bc:a4:d5:5c:33:74:ab:d5:e7:06:46:13:3f:b2: e2:61:df:f1:e1:e5:b6:74:84:25:d3:13:b6:79:dc: 51:9d:db:bf:64:35:53:df:49:b1:c5:48:98:be:c0: 51:90:f4:04:db:fa:0d:88:65:96:c1:f4:a1:b2:cf: a1:0b:9a:98:d7:de:02:b0:e8:8e:65:eb:37:27:f1: a2:f8:f3:74:ab:79:e3:1a:7c:d9:fd:f7:93:0c:92: 43:69:0f:45:f5:fb:47:a4:3a:51:56:19:a3:86:03: 12:f1:e1:d1:07:1d:be:95:23:f9:01:98:9b:bd:97: 99:35:a4:0d:2a:df:1f:2c:0f:4b:a7:02:29:dd:39: 47:9c:9d:2d:fa:1b:93:2c:7b:8d:80:17:a3:91:43: 9e:5e:11:72:1c:14:83:5a:56:ee:83:74:af:e6:c7: 56:92:04:ac:0e:35:55:13:17:1a:2c:e3:16:4e:17: 0f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:83:B2:DA:CF:05:51:ED:3E:E7:97:F2:DC:F9:03:A3:F3:21:32:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e004d30-156b-3c71-b54e-607e2b8b76c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9b:96:17:f9:9f:df:09:69:1c:74:4a:d9:3c:21:83:f4:44: 5e:75:fc:be:23:7f:07:af:36:b7:b4:f8:b6:d3:ba:b1:b4:e7: b2:16:19:f8:45:2b:9b:ee:74:15:0f:58:64:06:fa:b5:b8:aa: 78:b2:8a:51:a7:59:8a:62:49:50:c3:0e:21:49:58:52:ce:f3: 23:01:e1:7b:19:d6:ca:0e:17:0a:25:e5:8c:1b:6f:0a:b2:a9: 03:cc:1d:17:a9:e4:0a:5f:16:98:a0:0b:b3:7c:8f:b5:7f:47: f5:a1:aa:ee:f0:78:d0:3b:ad:d9:22:2b:9e:3a:f5:f7:3d:cf: cd:22:76:dc:4b:e8:fe:01:3a:e0:7a:5e:0c:06:ca:09:9a:66: 16:9a:0a:27:13:4e:de:bd:00:61:a6:a2:a6:bf:8b:2d:07:51: c6:02:e4:b1:5b:b3:8b:88:b3:01:5b:a6:9d:38:a5:d3:6c:13: fa:a0:59:6a:28:b2:1f:a3:43:7a:03:19:6a:a7:ad:ca:b8:a7: c3:12:32:44:1c:5d:1f:33:72:49:f5:e9:51:3d:21:9e:c5:fb: 81:92:74:e8:2f:77:5a:5c:10:a8:7f:7d:bc:14:8e:f6:8a:b9: a1:3a:d1:3d:ea:b1:d5:3a:45:38:17:73:f2:a9:92:e3:c6:98: 02:ad:2d:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KdwQSv1x+fwo8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTExOVoXDTI1MDkyOTE0MTExOVowLzEtMCsGA1UEAxMk YWIxNTQzZTMtOWI3ZS00ZTJiLThhZmUtYmNmNjZlM2Q2ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN9HSIJt4XVOGPfy7lEKhC5/Yh0DRQZjg9i4 efitcUVDgSpCmbJ9SjzvE4v5N0D/9w/wAcbbvEmutLt6V4kh1ROLO5ndBrIosTpy vKTVXDN0q9XnBkYTP7LiYd/x4eW2dIQl0xO2edxRndu/ZDVT30mxxUiYvsBRkPQE 2/oNiGWWwfShss+hC5qY194CsOiOZes3J/Gi+PN0q3njGnzZ/feTDJJDaQ9F9ftH pDpRVhmjhgMS8eHRBx2+lSP5AZibvZeZNaQNKt8fLA9LpwIp3TlHnJ0t+huTLHuN gBejkUOeXhFyHBSDWlbug3Sv5sdWkgSsDjVVExcaLOMWThcPKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeDstrPBVHtPueX8tz5A6PzITLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2UwMDRkMzAtMTU2Yi0z YzcxLWI1NGUtNjA3ZTJiOGI3NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiblhf5n98JaRx0Stk8IYP0RF51/L4jfwevNre0+LbTurG057IWGfhF K5vudBUPWGQG+rW4qniyilGnWYpiSVDDDiFJWFLO8yMB4XsZ1soOFwol5Ywbbwqy qQPMHRep5ApfFpigC7N8j7V/R/Whqu7weNA7rdkiK5469fc9z80idtxL6P4BOuB6 XgwGygmaZhaaCicTTt69AGGmoqa/iy0HUcYC5LFbs4uIswFbpp04pdNsE/qgWWoo sh+jQ3oDGWqnrcq4p8MSMkQcXR8zckn16VE9IZ7F+4GSdOgvd1pcEKh/fbwUjvaK uaE60T3qsdU6RTgXc/KpkuPGmAKtLZc= -----END CERTIFICATE-----Generated at Thu Jul 10 12:18:31 2025 by rpki-client