$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8864e176-302d-3c93-9771-2b340f4b9db4.roa File: 8864e176-302d-3c93-9771-2b340f4b9db4.roa (raw, json) Hash identifier: jkMChXMRrNnOOBrOQsXvYf+wmpu0BtSO/E31GhSwf4U= Subject key identifier: 1E:34:86:B2:E7:64:C1:96:97:90:CF:72:8A:BF:CD:E6:46:9E:60:3C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A172645E3A615606AD5A72C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8864e176-302d-3c93-9771-2b340f4b9db4.roa Signing time: Thu 05 Jun 2025 12:41:28 +0000 ROA not before: Thu 05 Jun 2025 12:41:28 +0000 ROA not after: Wed 03 Sep 2025 12:41:28 +0000 asID: 397196 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:26:45:e3:a6:15:60:6a:d5:a7:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 5 12:41:28 2025 GMT Not After : Sep 3 12:41:28 2025 GMT Subject: CN=d9d4c214-97fb-446c-b2c6-a37e1f747adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:73:60:d6:c1:08:95:9c:86:f4:e3:e2:7c:5e: 4a:22:4a:06:b6:ad:17:3d:85:dd:c1:d7:73:5e:79: 8e:6b:24:2a:2a:b1:8b:02:d8:19:9d:0a:17:b5:04: 65:7d:b9:df:6f:c2:f9:4d:3c:ba:bc:42:e6:8b:49: 04:62:85:20:af:a6:89:7b:da:2c:ef:d8:ab:19:a0: 57:bb:d2:f3:a7:7b:7d:4c:c1:24:e8:d7:b8:4d:c6: e8:90:b7:1a:a5:6e:6e:16:42:30:51:98:24:bc:79: 6d:a6:2a:40:c8:a3:80:05:15:0a:d1:d8:be:13:eb: 91:88:97:ba:a8:e7:4b:5a:98:fb:fe:82:c1:b7:ab: 2a:91:98:87:0c:b1:4d:b1:36:94:5b:13:b6:43:0d: 77:f4:fb:6a:e3:a3:7c:3d:64:4a:e8:3b:10:da:f8: 9c:1b:d1:33:a0:c3:8f:b0:df:89:84:ce:bf:9d:9a: fe:d1:30:c8:95:eb:46:a1:96:c0:b4:81:54:32:8e: 17:5f:32:5d:98:9b:a5:77:e0:85:6a:a7:ed:30:ce: 5b:25:38:f9:67:c6:02:a0:34:25:4d:95:83:50:e1: 44:1f:36:80:c3:28:97:74:1c:16:f8:9b:d9:de:18: 83:f1:66:cf:d8:aa:49:ab:a1:85:da:fb:0c:58:1a: e7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:34:86:B2:E7:64:C1:96:97:90:CF:72:8A:BF:CD:E6:46:9E:60:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8864e176-302d-3c93-9771-2b340f4b9db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:98:5a:86:19:7e:52:67:86:79:91:ec:b4:c5:2e:ef:7c:bd: 12:16:16:bc:48:a5:17:aa:3b:b8:7f:0c:ce:9b:9b:4f:ca:f7: 86:80:77:df:85:91:02:1e:04:66:f0:8b:ed:cf:c4:85:75:05: 91:5c:54:a9:4f:8f:4a:37:a8:d0:49:32:28:4a:0b:e6:2d:af: 7a:1c:f2:ff:e6:b1:33:09:93:f6:64:55:f4:c5:86:63:e8:32: 31:a8:05:38:8c:f1:79:c9:ca:f6:60:36:0c:d7:eb:3c:ce:e1: a2:47:33:f8:b2:3a:bc:d7:fd:a7:cb:0c:bc:2b:b5:55:59:9a: 13:22:bf:f9:22:4a:51:f1:66:9f:d4:00:f6:f4:5f:91:fa:f4: 28:90:04:e8:2b:1e:8e:71:6e:c0:98:e4:3b:5d:f9:49:75:07: 26:ac:b9:fc:21:ce:70:5b:ba:c2:f4:d8:91:e1:c1:7e:4e:83: 62:b8:3d:b0:be:2a:15:db:fb:ae:f6:fa:0f:58:27:8c:a9:e7: 2b:d2:d3:94:97:f0:93:ab:05:8c:40:3a:0a:a0:7c:86:b9:95: 30:ce:91:98:d0:67:fd:0f:9f:9b:03:0c:fb:fe:7c:39:5d:8e: f7:14:33:99:79:87:d0:02:48:cb:7f:8c:fb:37:3c:17:ba:16: dd:7e:f9:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXJkXjphVgatWnLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNTEyNDEyOFoXDTI1MDkwMzEyNDEyOFowLzEtMCsGA1UEAxMk ZDlkNGMyMTQtOTdmYi00NDZjLWIyYzYtYTM3ZTFmNzQ3YWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Ng1sEIlZyG9OPifF5KIkoGtq0XPYXdwddz XnmOayQqKrGLAtgZnQoXtQRlfbnfb8L5TTy6vELmi0kEYoUgr6aJe9os79irGaBX u9Lzp3t9TMEk6Ne4TcbokLcapW5uFkIwUZgkvHltpipAyKOABRUK0di+E+uRiJe6 qOdLWpj7/oLBt6sqkZiHDLFNsTaUWxO2Qw139Ptq46N8PWRK6DsQ2vicG9EzoMOP sN+JhM6/nZr+0TDIletGoZbAtIFUMo4XXzJdmJuld+CFaqftMM5bJTj5Z8YCoDQl TZWDUOFEHzaAwyiXdBwW+JvZ3hiD8WbP2KpJq6GF2vsMWBrnowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB40hrLnZMGWl5DPcoq/zeZGnmA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODg2NGUxNzYtMzAyZC0z YzkzLTk3NzEtMmIzNDBmNGI5ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOYWoYZflJnhnmR7LTFLu98vRIWFrxIpReqO7h/DM6bm0/K94aAd9+F kQIeBGbwi+3PxIV1BZFcVKlPj0o3qNBJMihKC+Ytr3oc8v/msTMJk/ZkVfTFhmPo MjGoBTiM8XnJyvZgNgzX6zzO4aJHM/iyOrzX/afLDLwrtVVZmhMiv/kiSlHxZp/U APb0X5H69CiQBOgrHo5xbsCY5Dtd+Ul1ByasufwhznBbusL02JHhwX5Og2K4PbC+ KhXb+672+g9YJ4yp5yvS05SX8JOrBYxAOgqgfIa5lTDOkZjQZ/0Pn5sDDPv+fDld jvcUM5l5h9ACSMt/jPs3PBe6Ft1++e4= -----END CERTIFICATE-----Generated at Sun Jun 8 13:36:29 2025 by rpki-client