$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76f4953a-1dcf-39c4-b2ed-016da4fad40c.roa File: 76f4953a-1dcf-39c4-b2ed-016da4fad40c.roa (raw, json) Hash identifier: MZyo+PDckbQmoJlduR5hLI7vbs4OR1n/VMtsBaN6snE= Subject key identifier: B7:A3:55:12:98:83:EB:8F:69:D9:FB:B6:58:F5:E3:80:41:A5:54:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A89B839B0C4067A5BD40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76f4953a-1dcf-39c4-b2ed-016da4fad40c.roa Signing time: Tue 01 Jul 2025 14:11:20 +0000 ROA not before: Tue 01 Jul 2025 14:11:20 +0000 ROA not after: Mon 29 Sep 2025 14:11:20 +0000 asID: 396611 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a8:9b:83:9b:0c:40:67:a5:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:20 2025 GMT Not After : Sep 29 14:11:20 2025 GMT Subject: CN=9b5a70c8-4789-42b8-9f3f-c0fdd877e785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:07:71:49:8b:25:9f:71:1e:9b:b9:bf:8b:a7: 34:ae:52:53:61:28:67:fe:55:ad:f5:ee:a0:71:ff: 89:65:43:85:9f:05:0a:5c:7e:c1:65:53:ed:f2:1d: f3:c6:b9:0c:7f:0d:44:61:f2:f8:e3:04:51:96:4d: 87:1b:75:8a:35:6c:54:9b:04:47:1f:42:4d:a6:f7: 55:e7:71:e7:e0:c1:a5:01:f2:24:0e:aa:5a:6d:d9: 6e:84:32:ab:a8:79:20:c7:b8:6b:01:7f:f0:74:07: 83:da:da:a2:e6:a4:b8:4c:a9:52:ef:0d:91:08:5b: f5:30:3d:eb:e8:dc:78:27:ef:1f:25:f7:a5:cd:19: fb:aa:a1:89:92:df:ac:5a:aa:67:10:17:fb:51:74: 32:c6:12:99:c0:36:31:6a:b1:25:24:eb:80:99:ec: dd:cc:3b:53:8f:d4:31:76:04:85:35:f3:4d:a0:33: b4:2c:0f:3f:eb:ae:a7:7a:f5:7d:8a:18:98:af:7e: 1f:34:f4:48:a4:45:0d:c8:06:12:ed:32:7a:75:4b: 3c:8d:ea:bd:fe:05:f8:60:b7:d7:1d:68:e0:74:3e: db:fe:c2:13:2c:f9:71:ad:68:5e:91:42:cc:95:1d: 70:c0:03:1e:83:db:a0:c6:69:47:ea:82:69:36:7a: 5e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A3:55:12:98:83:EB:8F:69:D9:FB:B6:58:F5:E3:80:41:A5:54:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76f4953a-1dcf-39c4-b2ed-016da4fad40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5a:49:e9:89:e6:1d:32:d5:bb:7a:ca:1f:4f:b2:f9:d3:95: ab:be:5c:55:18:00:ed:57:86:42:32:68:a0:fa:72:aa:2e:ad: 21:f9:a6:d8:2d:77:77:8a:ab:6c:50:8e:bf:ea:2c:5a:08:90: 58:64:02:ba:61:2c:73:00:a2:13:f3:39:4a:43:b5:39:7a:8f: 70:31:25:5c:75:a9:e0:b9:c9:4e:09:3a:27:4a:0d:ce:49:cb: b6:b1:88:ac:75:1d:0a:00:4b:30:3e:6f:1b:8b:1e:ec:2d:a3: 06:59:72:a5:db:55:be:38:31:21:f2:bb:c4:9f:3a:95:45:3a: ef:49:6c:81:3a:50:5e:df:34:d8:3f:8c:0a:da:e4:d3:43:a0: 66:37:93:23:fd:ce:2e:7c:07:5a:7f:a7:ba:d0:98:4f:c7:b4: 30:a4:a5:c1:91:89:c3:7c:78:bd:fc:1e:32:5f:51:d2:1d:8c: 2e:25:e7:28:09:36:29:7f:96:e5:e1:f7:89:4b:db:b0:ce:bb: 6b:65:46:38:a5:dc:49:2c:d9:b3:f1:e7:c7:2f:d1:b1:c3:e8: 8c:22:f9:2b:1d:9c:f9:e3:c9:20:2f:35:7d:02:24:85:6e:0f: e0:70:06:46:45:40:53:4e:1e:55:67:31:e9:ad:4c:b6:4e:fe: e7:34:20:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6Kibg5sMQGelvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTEyMFoXDTI1MDkyOTE0MTEyMFowLzEtMCsGA1UEAxMk OWI1YTcwYzgtNDc4OS00MmI4LTlmM2YtYzBmZGQ4NzdlNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wdxSYsln3Eem7m/i6c0rlJTYShn/lWt9e6g cf+JZUOFnwUKXH7BZVPt8h3zxrkMfw1EYfL44wRRlk2HG3WKNWxUmwRHH0JNpvdV 53Hn4MGlAfIkDqpabdluhDKrqHkgx7hrAX/wdAeD2tqi5qS4TKlS7w2RCFv1MD3r 6Nx4J+8fJfelzRn7qqGJkt+sWqpnEBf7UXQyxhKZwDYxarElJOuAmezdzDtTj9Qx dgSFNfNNoDO0LA8/666nevV9ihiYr34fNPRIpEUNyAYS7TJ6dUs8jeq9/gX4YLfX HWjgdD7b/sITLPlxrWhekULMlR1wwAMeg9ugxmlH6oJpNnpeGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLejVRKYg+uPadn7tlj144BBpVSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzZmNDk1M2EtMWRjZi0z OWM0LWIyZWQtMDE2ZGE0ZmFkNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJaSemJ5h0y1bt6yh9PsvnTlau+XFUYAO1XhkIyaKD6cqourSH5ptgt d3eKq2xQjr/qLFoIkFhkArphLHMAohPzOUpDtTl6j3AxJVx1qeC5yU4JOidKDc5J y7axiKx1HQoASzA+bxuLHuwtowZZcqXbVb44MSHyu8SfOpVFOu9JbIE6UF7fNNg/ jAra5NNDoGY3kyP9zi58B1p/p7rQmE/HtDCkpcGRicN8eL38HjJfUdIdjC4l5ygJ Nil/luXh94lL27DOu2tlRjil3Eks2bPx58cv0bHD6Iwi+SsdnPnjySAvNX0CJIVu D+BwBkZFQFNOHlVnMemtTLZO/uc0IDU= -----END CERTIFICATE-----Generated at Thu Jul 10 11:29:30 2025 by rpki-client