$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80c0a7b5-6b51-369a-a1d6-b6ba008e5b5a.roa File: 80c0a7b5-6b51-369a-a1d6-b6ba008e5b5a.roa (raw, json) Hash identifier: Mq5vUz0HMfimD8p4p6Dx6JWSMnMDUbvVKBb06z9w7k8= Subject key identifier: 57:71:AE:48:CD:58:A3:AB:64:E7:D0:CF:E7:79:C2:36:41:60:F4:63 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A82BDC744C64706CCD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80c0a7b5-6b51-369a-a1d6-b6ba008e5b5a.roa Signing time: Tue 01 Jul 2025 14:11:20 +0000 ROA not before: Tue 01 Jul 2025 14:11:20 +0000 ROA not after: Mon 29 Sep 2025 14:11:20 +0000 asID: 397198 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a8:2b:dc:74:4c:64:70:6c:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:20 2025 GMT Not After : Sep 29 14:11:20 2025 GMT Subject: CN=1b0f7d6b-672c-4548-ba1c-2d41764877d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b6:c1:ce:ed:c2:86:22:0f:d1:be:ce:8d:56: 06:01:4f:af:03:03:17:ab:45:75:bc:63:24:61:ab: 08:f2:d4:be:df:af:2b:c9:8a:25:e5:66:33:fe:32: 51:e8:fe:8d:08:13:bd:ce:3e:ce:5a:23:14:6f:fa: 36:84:9d:0b:c9:ab:dc:00:66:5e:a5:f1:e5:3c:b7: f5:83:7e:a8:5a:c8:8a:3e:87:42:7e:84:fc:4a:32: 77:eb:af:8e:bc:0d:f5:42:04:00:3d:06:be:dd:7d: 87:26:79:a6:22:3a:5e:30:6c:91:68:73:c6:fe:d3: 52:0e:fa:b5:cc:a8:2c:a2:70:2c:d4:a3:56:ff:1e: e5:d5:65:1e:ad:f7:88:1d:bd:da:a9:89:54:e0:20: 1e:a5:3c:95:b4:ff:03:c5:87:c3:fa:93:17:fa:42: 1a:fb:b0:95:77:8d:cd:59:4c:ed:10:ef:6c:d9:85: ad:11:1f:c1:7f:71:e1:8f:99:35:20:f4:62:01:e7: 1c:b8:7c:16:08:a4:6e:69:47:32:3b:70:f6:eb:46: cc:da:bb:7d:d3:5a:7e:81:0d:8c:62:6a:f5:23:1d: 21:ee:bb:a9:69:8b:83:60:67:b5:43:0b:c3:e4:e3: ac:d7:ad:e9:3e:bb:47:d5:00:2c:43:b6:56:39:ec: af:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:71:AE:48:CD:58:A3:AB:64:E7:D0:CF:E7:79:C2:36:41:60:F4:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80c0a7b5-6b51-369a-a1d6-b6ba008e5b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:b1:d4:ac:d4:fe:fa:98:85:5e:81:47:10:9b:da:75:dc:f7: 1c:32:be:95:10:b0:e2:73:51:b4:1d:b6:ab:ed:71:ef:2e:c6: 6e:55:ae:25:1e:24:08:86:9c:40:b4:54:d9:91:34:f2:3b:86: f2:5b:ad:ce:a8:e8:91:cc:28:a3:1e:1a:77:af:45:06:63:23: 7e:9c:b6:54:00:14:ee:94:64:a5:9c:d4:3e:ec:8a:60:e1:3a: 27:0f:25:4b:c8:cd:60:67:0d:ea:7d:36:f9:58:b7:98:69:ec: b4:cc:d1:ac:39:79:34:e6:c1:2c:88:db:9a:58:17:bd:cc:17: 00:12:c1:3e:1f:1c:1f:36:97:af:1a:b2:9e:fd:ba:b5:d9:34: c0:8e:a5:3c:ac:ea:c4:94:d8:2d:18:e0:c8:1d:5b:71:9d:af: f0:d5:25:48:96:16:1f:b6:17:83:e8:c3:d2:b6:91:a7:3e:eb: 38:8e:24:29:5a:94:13:e0:8d:de:4e:c9:3f:0a:72:78:77:eb: de:e5:6b:09:e8:f2:f7:5e:f2:2d:bc:8e:59:87:0f:f9:c3:0f: 3f:ed:c7:76:a2:ee:29:c0:66:65:77:5a:89:5e:74:3d:6d:b1: 26:51:09:65:ec:67:42:70:ba:1c:db:3e:3d:c1:e8:87:2d:ee: f5:c1:85:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6Kgr3HRMZHBszQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTEyMFoXDTI1MDkyOTE0MTEyMFowLzEtMCsGA1UEAxMk MWIwZjdkNmItNjcyYy00NTQ4LWJhMWMtMmQ0MTc2NDg3N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbbBzu3ChiIP0b7OjVYGAU+vAwMXq0V1vGMk YasI8tS+368ryYol5WYz/jJR6P6NCBO9zj7OWiMUb/o2hJ0LyavcAGZepfHlPLf1 g36oWsiKPodCfoT8SjJ366+OvA31QgQAPQa+3X2HJnmmIjpeMGyRaHPG/tNSDvq1 zKgsonAs1KNW/x7l1WUerfeIHb3aqYlU4CAepTyVtP8DxYfD+pMX+kIa+7CVd43N WUztEO9s2YWtER/Bf3Hhj5k1IPRiAeccuHwWCKRuaUcyO3D260bM2rt901p+gQ2M Ymr1Ix0h7rupaYuDYGe1QwvD5OOs163pPrtH1QAsQ7ZWOeyv1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdxrkjNWKOrZOfQz+d5wjZBYPRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODBjMGE3YjUtNmI1MS0z NjlhLWExZDYtYjZiYTAwOGU1YjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOx1KzU/vqYhV6BRxCb2nXc9xwyvpUQsOJzUbQdtqvtce8uxm5VriUe JAiGnEC0VNmRNPI7hvJbrc6o6JHMKKMeGnevRQZjI36ctlQAFO6UZKWc1D7simDh OicPJUvIzWBnDep9NvlYt5hp7LTM0aw5eTTmwSyI25pYF73MFwASwT4fHB82l68a sp79urXZNMCOpTys6sSU2C0Y4MgdW3Gdr/DVJUiWFh+2F4Pow9K2kac+6ziOJCla lBPgjd5OyT8Kcnh3697lawno8vde8i28jlmHD/nDDz/tx3ai7inAZmV3WoledD1t sSZRCWXsZ0JwuhzbPj3B6Ict7vXBhUg= -----END CERTIFICATE-----Generated at Thu Jul 10 11:19:00 2025 by rpki-client