$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/721e1e48-71cb-3933-822d-b957f053a2cf.roa File: 721e1e48-71cb-3933-822d-b957f053a2cf.roa (raw, json) Hash identifier: 3riWEwfHn6cB8LJySXC1JEBd9J65rwcrxOeitwB/7r0= Subject key identifier: 5B:B7:C9:E9:D6:ED:0D:C2:63:0E:7A:05:AB:44:16:2D:63:DF:93:AC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8AA4257958396A0565040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/721e1e48-71cb-3933-822d-b957f053a2cf.roa Signing time: Tue 01 Jul 2025 14:11:21 +0000 ROA not before: Tue 01 Jul 2025 14:11:21 +0000 ROA not after: Mon 29 Sep 2025 14:11:21 +0000 asID: 396592 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:aa:42:57:95:83:96:a0:56:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:21 2025 GMT Not After : Sep 29 14:11:21 2025 GMT Subject: CN=bf16b627-76b5-4822-9eee-b7924de68f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:24:81:fb:2e:8e:26:26:80:09:1b:6a:26:ea: cb:f2:f0:79:e7:9c:4f:50:a4:7f:78:32:78:88:c2: 40:25:f0:54:73:c8:ca:6d:04:0a:bb:10:b0:9d:b4: 3b:7c:9e:98:85:73:f5:fe:47:ba:53:51:2e:69:8e: 9a:b1:a7:4b:a5:6f:b1:34:01:b1:c8:6b:05:8a:88: 61:8e:b2:24:cd:a0:02:b0:d4:e6:bb:e0:e7:93:e3: 02:d4:58:65:3c:2d:3f:c5:27:70:ba:b7:57:e6:55: 5f:11:66:96:5d:0d:73:bf:a9:13:2a:ef:e1:e4:00: 73:94:22:de:b1:90:37:28:65:c2:98:1a:b9:06:d7: 39:e4:86:65:52:56:7f:6d:bb:a5:f9:84:75:c1:da: 8a:53:15:01:97:f6:4a:7f:7a:55:bd:81:8f:a4:45: 81:a6:8b:aa:71:8d:df:a9:55:73:0f:02:76:9a:68: fb:73:8a:b6:a4:d5:fc:76:e4:55:74:4a:5f:21:e3: 75:df:2a:be:33:0e:4c:58:0a:82:2b:69:af:fa:f1: 2e:9a:26:1b:48:87:d9:fd:55:90:42:23:b7:3c:de: 41:38:d4:c2:09:0e:40:b3:77:ec:09:15:ba:4e:22: 01:c6:ea:d5:9b:0a:48:de:ee:53:f5:49:5d:b3:5b: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B7:C9:E9:D6:ED:0D:C2:63:0E:7A:05:AB:44:16:2D:63:DF:93:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/721e1e48-71cb-3933-822d-b957f053a2cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:4f:40:95:68:48:b9:e7:61:47:cd:38:80:9a:11:c2:c6:4f: f3:45:bb:98:b4:2b:27:17:8d:78:9b:49:3d:9c:fa:d0:cb:fc: 1e:00:bf:8a:44:39:3a:96:d3:7a:80:38:eb:56:f1:8f:92:7f: c7:dd:87:4b:02:98:04:2d:f8:c0:49:66:1c:c2:42:1c:e2:a5: 65:2f:d0:b5:72:a1:d7:9f:a6:c9:88:6d:df:c3:9f:2a:7f:7c: 2f:a8:ca:65:d4:7c:54:81:ee:15:f1:58:7b:56:de:14:f9:ce: f6:a2:38:90:34:c9:ed:14:95:5f:7e:dd:c1:49:e2:26:86:ea: b4:0c:9f:06:db:b2:28:c3:7f:0f:9e:f7:4e:0e:42:13:0a:60: 6f:24:a6:73:47:c1:71:65:48:9e:f8:d5:be:35:9e:7c:f5:07: ef:3c:2c:ef:a4:b5:c6:b1:f6:8f:35:8b:19:d7:0c:04:4e:26: 1b:41:3c:33:ad:42:d8:12:5b:d4:e6:c3:fe:c5:5d:0e:22:ed: e8:a6:ef:2c:5a:9c:f7:b1:37:1e:47:28:30:b7:f5:de:57:ec: fc:db:51:82:2c:64:f8:0c:2c:17:80:9f:f6:7d:47:d9:cd:5a: 65:c7:a3:f5:3b:24:37:24:fb:a7:8c:f2:93:84:ab:b9:16:91: 0a:b0:9f:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KpCV5WDlqBWUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTEyMVoXDTI1MDkyOTE0MTEyMVowLzEtMCsGA1UEAxMk YmYxNmI2MjctNzZiNS00ODIyLTllZWUtYjc5MjRkZTY4Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiSB+y6OJiaACRtqJurL8vB555xPUKR/eDJ4 iMJAJfBUc8jKbQQKuxCwnbQ7fJ6YhXP1/ke6U1EuaY6asadLpW+xNAGxyGsFiohh jrIkzaACsNTmu+Dnk+MC1FhlPC0/xSdwurdX5lVfEWaWXQ1zv6kTKu/h5ABzlCLe sZA3KGXCmBq5Btc55IZlUlZ/bbul+YR1wdqKUxUBl/ZKf3pVvYGPpEWBpouqcY3f qVVzDwJ2mmj7c4q2pNX8duRVdEpfIeN13yq+Mw5MWAqCK2mv+vEumiYbSIfZ/VWQ QiO3PN5BONTCCQ5As3fsCRW6TiIBxurVmwpI3u5T9Ulds1uXbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFu3yenW7Q3CYw56BatEFi1j35OsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzIxZTFlNDgtNzFjYi0z OTMzLTgyMmQtYjk1N2YwNTNhMmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpPQJVoSLnnYUfNOICaEcLGT/NFu5i0KycXjXibST2c+tDL/B4Av4pE OTqW03qAOOtW8Y+Sf8fdh0sCmAQt+MBJZhzCQhzipWUv0LVyodefpsmIbd/Dnyp/ fC+oymXUfFSB7hXxWHtW3hT5zvaiOJA0ye0UlV9+3cFJ4iaG6rQMnwbbsijDfw+e 904OQhMKYG8kpnNHwXFlSJ741b41nnz1B+88LO+ktcax9o81ixnXDAROJhtBPDOt QtgSW9Tmw/7FXQ4i7eim7yxanPexNx5HKDC39d5X7PzbUYIsZPgMLBeAn/Z9R9nN WmXHo/U7JDck+6eM8pOEq7kWkQqwnzc= -----END CERTIFICATE-----Generated at Thu Jul 10 05:36:00 2025 by rpki-client