$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f496f70-8de4-3c50-8b8d-dc8c0876b954.roa File: 6f496f70-8de4-3c50-8b8d-dc8c0876b954.roa (raw, json) Hash identifier: Y7IlQuOMaZBTxJEPZO4BjALzI4aQHH4d1+jgZ4k0ABg= Subject key identifier: AC:A9:A3:01:BC:40:3D:5E:E5:9F:97:B7:71:96:C5:7C:ED:83:69:F4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A3A8198BB2D6804CEC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f496f70-8de4-3c50-8b8d-dc8c0876b954.roa Signing time: Tue 01 Jul 2025 14:11:18 +0000 ROA not before: Tue 01 Jul 2025 14:11:18 +0000 ROA not after: Mon 29 Sep 2025 14:11:18 +0000 asID: 396591 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a3:a8:19:8b:b2:d6:80:4c:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:18 2025 GMT Not After : Sep 29 14:11:18 2025 GMT Subject: CN=62ee2c37-4e5f-48dc-b5c2-52c26f04fa2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:2b:83:a8:da:73:b9:21:e3:7e:ed:f2:79: aa:9e:a4:b2:9f:07:0f:f9:93:e9:ad:cc:d7:15:b3: b3:c7:2e:99:bc:27:03:16:13:95:9b:d4:55:d8:35: 3c:50:ed:cc:47:e7:cc:15:c7:04:d5:48:72:99:b2: a3:17:38:c2:95:90:f0:63:3a:6f:84:65:fe:87:2f: da:65:ea:ac:36:8f:e8:92:d9:aa:6a:44:9e:d4:15: d7:8b:d4:2c:4c:19:48:fc:94:91:2e:f0:d5:89:1a: 7f:9c:0f:c3:5f:a4:e5:e5:b3:27:ce:d4:ff:74:54: 35:22:67:a0:91:31:7e:ad:6c:01:a2:39:cb:8b:51: 18:13:93:b0:3a:f6:9a:8e:cd:19:89:8b:e0:b4:05: c1:58:a6:d1:b0:ab:6d:e5:89:21:eb:0d:be:f5:2c: ce:98:d0:b8:1a:c3:0b:b4:d3:9c:8d:ab:4f:48:84: 83:0e:8a:96:80:a3:04:e1:86:4d:fa:79:f7:f8:50: 47:5f:7e:a2:2f:2e:77:15:7d:4f:d7:1a:fd:65:39: 95:3a:76:18:37:d5:01:0f:bd:24:20:ff:1d:0f:63: f5:c8:b9:84:e0:ad:71:bb:7e:09:64:3c:48:73:ca: ea:4a:93:d3:5c:54:0a:37:a2:fa:7a:88:1a:c2:8f: 4b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A9:A3:01:BC:40:3D:5E:E5:9F:97:B7:71:96:C5:7C:ED:83:69:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f496f70-8de4-3c50-8b8d-dc8c0876b954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:cc:ec:42:e7:3c:43:d3:62:8b:4f:21:79:1b:29:a6:7a:f7: 4e:24:72:ce:73:93:40:69:7a:16:92:5a:69:33:8f:6c:4c:a5: 8c:95:be:25:18:56:78:52:99:ed:9d:98:4e:2f:56:0b:a9:0b: 6d:7d:9b:52:2f:2c:15:cb:52:60:62:95:86:82:98:5e:20:f0: 09:0e:b6:67:fd:78:0b:d2:59:1c:05:49:a4:34:86:75:55:2a: 74:08:62:1f:f1:e3:d5:7b:10:ca:eb:33:d9:a1:a3:53:ec:82: 0c:aa:55:ff:68:3f:ab:a2:34:a6:5d:9a:15:01:b3:5d:00:c4: 24:67:50:ba:df:6a:79:44:98:c4:db:32:8a:43:57:85:62:11: 30:ed:79:2f:3d:b0:a2:59:25:d0:79:a3:be:75:19:38:be:d5: 09:a7:07:a2:5e:19:07:e0:69:03:80:d9:58:02:ce:79:18:e9: ce:96:c3:0f:82:2c:d1:e0:b0:8b:72:ab:b4:a5:82:66:3e:87: 45:6d:cc:23:61:fc:44:34:47:b0:43:21:52:a1:65:ed:c5:d7: 12:26:10:91:19:7a:bd:92:28:45:69:8d:88:2b:5e:b4:b4:1c: 0b:2c:53:41:58:ba:e1:92:07:10:f1:ea:f4:26:73:21:47:90: c4:71:4a:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KOoGYuy1oBM7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTExOFoXDTI1MDkyOTE0MTExOFowLzEtMCsGA1UEAxMk NjJlZTJjMzctNGU1Zi00OGRjLWI1YzItNTJjMjZmMDRmYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9Urg6jac7kh437t8nmqnqSynwcP+ZPprczX FbOzxy6ZvCcDFhOVm9RV2DU8UO3MR+fMFccE1UhymbKjFzjClZDwYzpvhGX+hy/a ZeqsNo/oktmqakSe1BXXi9QsTBlI/JSRLvDViRp/nA/DX6Tl5bMnztT/dFQ1Imeg kTF+rWwBojnLi1EYE5OwOvaajs0ZiYvgtAXBWKbRsKtt5Ykh6w2+9SzOmNC4GsML tNOcjatPSISDDoqWgKME4YZN+nn3+FBHX36iLy53FX1P1xr9ZTmVOnYYN9UBD70k IP8dD2P1yLmE4K1xu34JZDxIc8rqSpPTXFQKN6L6eogawo9LgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKypowG8QD1e5Z+Xt3GWxXztg2n0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmY0OTZmNzAtOGRlNC0z YzUwLThiOGQtZGM4YzA4NzZiOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzM7ELnPEPTYotPIXkbKaZ6904kcs5zk0BpehaSWmkzj2xMpYyVviUY VnhSme2dmE4vVgupC219m1IvLBXLUmBilYaCmF4g8AkOtmf9eAvSWRwFSaQ0hnVV KnQIYh/x49V7EMrrM9mho1PsggyqVf9oP6uiNKZdmhUBs10AxCRnULrfanlEmMTb MopDV4ViETDteS89sKJZJdB5o751GTi+1QmnB6JeGQfgaQOA2VgCznkY6c6Www+C LNHgsItyq7SlgmY+h0VtzCNh/EQ0R7BDIVKhZe3F1xImEJEZer2SKEVpjYgrXrS0 HAssU0FYuuGSBxDx6vQmcyFHkMRxSh8= -----END CERTIFICATE-----Generated at Thu Jul 10 11:59:26 2025 by rpki-client