$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ea8905d-dce4-3add-830c-ad3e2af0b690.roa File: 5ea8905d-dce4-3add-830c-ad3e2af0b690.roa (raw, json) Hash identifier: 4Dvu8W943EUDNVCDdPgUtEJskYhL/R2n7RIRtR8RCXg= Subject key identifier: DF:E8:18:8C:AB:54:A2:82:5C:E7:FC:60:23:A3:3A:65:3E:8A:93:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A2AAEC5AED47DE82DB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ea8905d-dce4-3add-830c-ad3e2af0b690.roa Signing time: Tue 01 Jul 2025 14:11:17 +0000 ROA not before: Tue 01 Jul 2025 14:11:17 +0000 ROA not after: Mon 29 Sep 2025 14:11:17 +0000 asID: 396586 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a2:aa:ec:5a:ed:47:de:82:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:17 2025 GMT Not After : Sep 29 14:11:17 2025 GMT Subject: CN=f9910461-4999-4680-b3c2-a0a0c29c3abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ab:f0:a0:22:83:a8:10:8f:10:3b:2e:58:ae: fe:40:ad:18:20:0f:11:57:01:81:fa:ec:b7:ab:05: 36:79:c7:61:66:f8:4b:92:d8:94:54:66:e4:12:c8: 77:90:b9:6d:ac:2f:40:fb:89:76:5c:cb:9b:a1:3a: 2f:04:55:ba:3b:8e:be:31:ee:79:04:d5:a6:b5:3f: ad:93:e3:c4:f1:64:e0:05:f5:2f:38:cb:d1:e0:69: fb:59:07:1e:f7:e7:5d:24:59:3a:1c:d9:eb:a5:ff: f5:86:fd:1f:9e:af:35:a8:e0:52:aa:e4:1a:d0:1d: 22:72:9a:bd:7f:a4:ff:64:1e:01:da:34:bf:71:9b: 41:6d:09:c0:cd:75:71:03:6f:3a:84:1e:f1:19:06: 59:5b:55:55:c6:33:96:e1:4b:87:4f:63:b8:b0:27: 31:e0:0e:f4:fa:03:9c:e7:4c:2b:a4:8b:c2:a9:dd: b3:4b:9e:8c:bd:21:3c:f9:df:d0:26:6b:bd:e9:87: d5:3d:1b:7b:fa:73:48:1c:40:5c:57:f8:f1:f8:fa: 04:1e:fc:6a:2d:49:a7:3c:99:28:38:2d:d5:c7:61: 5a:0f:3e:3e:79:45:3a:db:8d:57:58:78:d2:d5:74: 00:27:83:5d:77:80:6d:e4:7d:c5:24:28:7d:fe:d2: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E8:18:8C:AB:54:A2:82:5C:E7:FC:60:23:A3:3A:65:3E:8A:93:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ea8905d-dce4-3add-830c-ad3e2af0b690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b4:96:fd:73:c8:03:14:9b:9c:82:1f:51:59:7f:56:f0:65: 51:5e:8f:21:09:f8:ff:cc:15:da:63:c0:8c:0c:e0:8e:71:3e: d4:7b:b4:3e:7f:83:bd:85:08:ea:13:08:96:4f:3e:17:09:3f: b7:90:96:05:4f:7a:fb:cf:2c:21:c4:b6:80:95:8b:9d:c2:bc: 40:32:1c:a4:b5:37:2e:cf:cb:b8:16:ca:58:c3:0d:7d:a0:e6: 9f:77:07:86:4b:2c:e2:1b:a5:df:e2:40:9f:a6:8f:26:de:ef: aa:ec:7f:28:96:a6:25:69:13:1f:f8:52:2f:65:05:1b:fe:06: 4e:39:b8:0b:97:ee:26:72:53:e4:6c:05:b4:0c:85:10:3a:a4: 91:b9:20:15:2e:5f:18:23:fe:d7:37:e9:10:e3:ed:c3:0e:5a: e5:e0:e7:fd:b7:6b:66:99:20:37:3d:d0:16:4f:97:94:0f:45: 30:92:b1:7e:53:b4:57:29:ca:5c:06:a6:2e:4b:57:53:8f:95: 96:e5:1d:aa:6c:a2:b6:f4:a7:3f:90:52:c1:c6:3a:51:3f:e4: 7c:4d:e1:b0:5d:fc:19:17:6e:27:70:f4:75:48:35:8c:bc:1a: 11:2e:20:c0:a3:9e:8a:12:cb:83:b1:71:d5:68:c4:9d:77:7d: e2:20:97:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KKq7FrtR96C24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTExN1oXDTI1MDkyOTE0MTExN1owLzEtMCsGA1UEAxMk Zjk5MTA0NjEtNDk5OS00NjgwLWIzYzItYTBhMGMyOWMzYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6vwoCKDqBCPEDsuWK7+QK0YIA8RVwGB+uy3 qwU2ecdhZvhLktiUVGbkEsh3kLltrC9A+4l2XMuboTovBFW6O46+Me55BNWmtT+t k+PE8WTgBfUvOMvR4Gn7WQce9+ddJFk6HNnrpf/1hv0fnq81qOBSquQa0B0icpq9 f6T/ZB4B2jS/cZtBbQnAzXVxA286hB7xGQZZW1VVxjOW4UuHT2O4sCcx4A70+gOc 50wrpIvCqd2zS56MvSE8+d/QJmu96YfVPRt7+nNIHEBcV/jx+PoEHvxqLUmnPJko OC3Vx2FaDz4+eUU6241XWHjS1XQAJ4Ndd4Bt5H3FJCh9/tJ3owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/oGIyrVKKCXOf8YCOjOmU+ipOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWVhODkwNWQtZGNlNC0z YWRkLTgzMGMtYWQzZTJhZjBiNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy0lv1zyAMUm5yCH1FZf1bwZVFejyEJ+P/MFdpjwIwM4I5xPtR7tD5/ g72FCOoTCJZPPhcJP7eQlgVPevvPLCHEtoCVi53CvEAyHKS1Ny7Py7gWyljDDX2g 5p93B4ZLLOIbpd/iQJ+mjybe76rsfyiWpiVpEx/4Ui9lBRv+Bk45uAuX7iZyU+Rs BbQMhRA6pJG5IBUuXxgj/tc36RDj7cMOWuXg5/23a2aZIDc90BZPl5QPRTCSsX5T tFcpylwGpi5LV1OPlZblHapsorb0pz+QUsHGOlE/5HxN4bBd/BkXbidw9HVINYy8 GhEuIMCjnooSy4OxcdVoxJ13feIglyk= -----END CERTIFICATE-----Generated at Thu Jul 10 04:26:26 2025 by rpki-client