$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7db93dfc-bdca-3be1-a57c-2d3e5359c245.roa File: 7db93dfc-bdca-3be1-a57c-2d3e5359c245.roa (raw, json) Hash identifier: 5NyTmHgCrplT8viAxDEDZFYylnwFRXYhU49dryizA98= Subject key identifier: 19:37:33:BE:D9:88:79:51:44:6E:3D:95:61:54:BB:AD:58:F5:BD:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFEE6C5CB50459C1B49A51B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7db93dfc-bdca-3be1-a57c-2d3e5359c245.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 397201 IP address blocks: 192.42.176.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:c5:cb:50:45:9c:1b:49:a5:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=e2358238-f31c-4f38-bfe1-f817fe3d5945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:96:79:0b:70:7b:16:d8:53:2f:81:87:fe: d9:0a:6d:ae:38:b5:f4:38:16:a3:18:90:df:99:63: 42:80:82:d5:11:32:e1:de:51:b5:39:94:fb:d2:39: 19:6f:35:9f:c4:85:e6:de:a3:cb:83:e6:0e:30:de: d3:a8:57:b5:f1:8f:d4:24:6d:19:2e:83:bf:66:a7: 03:fd:a9:f6:40:bf:26:c9:fb:d5:71:da:d3:8f:cc: 34:34:4a:31:91:9d:9e:22:e4:9d:1b:e6:43:e9:eb: ba:e2:44:fe:09:52:0a:d7:68:18:19:8e:c9:c8:e8: 9a:64:6d:9f:ad:ed:a6:9c:79:ca:e9:20:64:36:43: bc:eb:69:97:c4:67:58:b2:2a:cb:49:70:03:78:1f: c8:24:b7:a1:aa:13:8c:2f:2c:5b:3b:5b:c8:ce:ad: fe:1c:36:21:91:e9:5b:8b:08:b3:b7:78:c9:31:f8: 3b:14:64:26:48:d6:7e:04:d5:cd:63:6b:a1:f6:86: 21:9f:23:b0:26:09:39:47:df:da:3b:66:43:8b:d4: 2a:eb:dc:11:69:34:9e:2f:25:9d:57:ef:16:ef:b3: 5a:0e:6e:ee:65:b4:7c:9f:bf:af:9e:f2:48:a3:bb: df:23:ec:f1:ca:cf:d6:d8:f2:d7:f7:4a:09:32:9b: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:37:33:BE:D9:88:79:51:44:6E:3D:95:61:54:BB:AD:58:F5:BD:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7db93dfc-bdca-3be1-a57c-2d3e5359c245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:47:2c:ad:00:8f:b3:7f:ea:e2:b3:c7:34:b9:95:17:11:c7: ac:06:1d:7b:b9:40:0b:70:89:a1:5a:a9:fa:14:c8:1b:b9:52: e5:6f:fc:78:44:8b:e9:1b:d9:c3:b2:aa:66:7f:bb:ab:87:d7: 10:33:51:4c:fd:be:bc:00:7b:8c:fe:45:2a:03:7c:af:07:72: 12:a3:96:e0:f1:f5:59:da:61:11:da:97:e8:b0:5c:87:74:c5: 35:1b:da:4d:46:5d:5a:87:04:61:6f:4b:76:19:bd:92:fb:a2: 1e:56:ca:10:dc:4f:42:b8:21:5c:e6:56:d1:69:99:7f:20:4f: c7:4c:8f:00:fa:03:38:44:92:8a:06:0b:38:fa:26:1b:93:f9: 12:bb:17:46:6a:69:56:44:26:f6:15:40:b9:00:03:0d:55:52: 30:cf:33:b5:be:7c:73:5d:86:af:ac:91:ff:69:d7:0c:ad:6b: e0:dd:2f:42:ee:ec:81:2c:24:30:e2:88:c6:84:95:b2:d7:70: d9:5a:db:b9:59:21:63:77:54:e8:e5:d9:85:ac:ba:70:c5:7d: 68:0d:22:75:06:c5:ec:e9:42:84:eb:3f:46:85:80:ca:74:bb: a6:b2:a3:32:e4:f7:75:c2:16:4f:47:56:99:4f:7c:9a:e8:f1: b2:f6:03:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr+5sXLUEWcG0mlGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZTIzNTgyMzgtZjMxYy00ZjM4LWJmZTEtZjgxN2ZlM2Q1OTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4KWeQtwexbYUy+Bh/7ZCm2uOLX0OBajGJDf mWNCgILVETLh3lG1OZT70jkZbzWfxIXm3qPLg+YOMN7TqFe18Y/UJG0ZLoO/ZqcD /an2QL8myfvVcdrTj8w0NEoxkZ2eIuSdG+ZD6eu64kT+CVIK12gYGY7JyOiaZG2f re2mnHnK6SBkNkO862mXxGdYsirLSXADeB/IJLehqhOMLyxbO1vIzq3+HDYhkelb iwizt3jJMfg7FGQmSNZ+BNXNY2uh9oYhnyOwJgk5R9/aO2ZDi9Qq69wRaTSeLyWd V+8W77NaDm7uZbR8n7+vnvJIo7vfI+zxys/W2PLX90oJMpvJ3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBk3M77ZiHlRRG49lWFUu61Y9b36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2RiOTNkZmMtYmRjYS0z YmUxLWE1N2MtMmQzZTUzNTljMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsRyytAI+zf+ris8c0uZUXEcesBh17uUALcImhWqn6FMgbuVLlb/x4 RIvpG9nDsqpmf7urh9cQM1FM/b68AHuM/kUqA3yvB3ISo5bg8fVZ2mER2pfosFyH dMU1G9pNRl1ahwRhb0t2Gb2S+6IeVsoQ3E9CuCFc5lbRaZl/IE/HTI8A+gM4RJKK Bgs4+iYbk/kSuxdGamlWRCb2FUC5AAMNVVIwzzO1vnxzXYavrJH/adcMrWvg3S9C 7uyBLCQw4ojGhJWy13DZWtu5WSFjd1To5dmFrLpwxX1oDSJ1BsXs6UKE6z9GhYDK dLumsqMy5Pd1whZPR1aZT3ya6PGy9gPi -----END CERTIFICATE-----Generated at Wed Sep 10 17:48:17 2025 by rpki-client