$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8bd3f74a-9f36-3d94-9a64-ba222754f077.roa File: 8bd3f74a-9f36-3d94-9a64-ba222754f077.roa (raw, json) Hash identifier: H3q3YCBRxhV3RzWwN/5QbpqU9jX1VebB9/DrICzxhsw= Subject key identifier: 77:63:AE:5E:CE:23:30:88:58:FE:D5:CB:DA:66:A7:AC:74:9A:4F:21 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A905C6F8B38842910D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8bd3f74a-9f36-3d94-9a64-ba222754f077.roa Signing time: Tue 01 Jul 2025 14:11:20 +0000 ROA not before: Tue 01 Jul 2025 14:11:20 +0000 ROA not after: Mon 29 Sep 2025 14:11:20 +0000 asID: 396542 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a9:05:c6:f8:b3:88:42:91:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:20 2025 GMT Not After : Sep 29 14:11:20 2025 GMT Subject: CN=9643e37e-d62e-41b7-ace1-a1943927dd64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:d7:1e:ef:c2:17:8b:b7:80:ae:56:ef:cd: 5a:fb:43:94:f4:bf:6f:c2:65:44:76:fe:ac:11:6c: de:79:b1:b4:a7:2a:09:71:d6:87:02:20:48:4b:01: 51:16:61:86:e3:1a:cc:99:46:38:45:f0:a4:a4:c8: 6e:9c:7c:28:bf:c3:66:ab:5f:51:ce:55:af:1e:32: 79:fa:84:68:83:de:a8:d1:d8:56:05:2b:95:29:79: f3:1e:33:f6:ed:dd:f4:4d:fd:53:88:7b:02:48:43: 54:3e:d0:c2:47:40:e1:0d:fd:8d:e0:4d:25:da:4b: 36:f5:d2:f3:9d:f0:d1:85:72:7b:82:8c:73:f6:e9: c4:23:35:8a:f3:ae:8f:56:dc:02:8a:3b:49:29:e6: d2:a9:c6:bd:8c:41:d3:c8:14:cc:d3:23:0f:01:dd: df:43:1f:e2:1a:4a:73:96:07:91:21:bc:82:9d:d5: c8:a6:1f:03:00:df:0d:78:b3:2d:42:b2:5c:bb:82: 57:b6:79:10:63:ca:e1:1e:96:c7:55:d7:67:05:50: 9c:97:b6:91:21:95:e3:5a:4e:9d:82:d7:b2:17:b6: b1:70:d4:95:39:44:ab:fd:7c:3e:c9:4d:75:d7:a6: da:5f:ac:8a:71:c7:1f:65:45:2f:9e:ce:5f:f5:ee: 8e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:63:AE:5E:CE:23:30:88:58:FE:D5:CB:DA:66:A7:AC:74:9A:4F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8bd3f74a-9f36-3d94-9a64-ba222754f077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e2:aa:36:d4:19:e5:f9:ca:88:e0:f1:3b:a3:7f:2c:17:ec: b7:4e:cc:45:f6:1b:48:6d:a2:cf:42:c2:c5:25:62:ae:61:bc: 32:9f:26:a8:25:27:df:ad:87:af:c2:ba:fc:50:a2:3a:9f:10: 8b:1e:cf:b7:a8:f9:4e:f9:1e:4e:06:15:fc:a8:9d:aa:7b:e2: af:2b:45:6e:91:1e:1c:62:69:fe:ed:1c:3f:b7:6a:f5:95:97: b0:6d:a5:57:bd:cf:09:f5:db:38:4a:ae:ac:72:5f:b1:bb:30: 52:d3:74:05:c1:50:f8:a8:9d:d8:fc:db:4f:95:de:d4:9d:d5: 5c:ce:e3:23:c6:22:3a:d8:06:17:4a:e4:3c:6a:1e:19:9a:e9: e9:9a:44:00:66:c4:0f:b9:ca:e7:3c:ec:76:ce:10:39:6b:da: e7:80:ff:63:7d:9a:45:04:95:b2:98:81:f0:17:7a:86:44:40: be:2b:3b:41:cf:07:34:ec:6b:be:de:96:db:37:42:78:79:ff: af:8f:20:8c:66:37:c3:e5:bb:7f:f8:20:68:ae:f7:be:b2:db: 34:10:dd:de:d2:73:05:8d:5d:08:e8:3e:14:99:a2:aa:e5:f4: ee:8f:44:8b:c1:1a:11:e8:10:10:6f:31:57:74:d0:a8:e4:97: 65:cf:0a:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KkFxviziEKRDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTEyMFoXDTI1MDkyOTE0MTEyMFowLzEtMCsGA1UEAxMk OTY0M2UzN2UtZDYyZS00MWI3LWFjZTEtYTE5NDM5MjdkZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7bXHu/CF4u3gK5W781a+0OU9L9vwmVEdv6s EWzeebG0pyoJcdaHAiBISwFRFmGG4xrMmUY4RfCkpMhunHwov8Nmq19RzlWvHjJ5 +oRog96o0dhWBSuVKXnzHjP27d30Tf1TiHsCSENUPtDCR0DhDf2N4E0l2ks29dLz nfDRhXJ7goxz9unEIzWK866PVtwCijtJKebSqca9jEHTyBTM0yMPAd3fQx/iGkpz lgeRIbyCndXIph8DAN8NeLMtQrJcu4JXtnkQY8rhHpbHVddnBVCcl7aRIZXjWk6d gteyF7axcNSVOUSr/Xw+yU1116baX6yKcccfZUUvns5f9e6ObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdjrl7OIzCIWP7Vy9pmp6x0mk8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGJkM2Y3NGEtOWYzNi0z ZDk0LTlhNjQtYmEyMjI3NTRmMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFriqjbUGeX5yojg8TujfywX7LdOzEX2G0htos9CwsUlYq5hvDKfJqgl J9+th6/CuvxQojqfEIsez7eo+U75Hk4GFfyonap74q8rRW6RHhxiaf7tHD+3avWV l7BtpVe9zwn12zhKrqxyX7G7MFLTdAXBUPiondj820+V3tSd1VzO4yPGIjrYBhdK 5DxqHhma6emaRABmxA+5yuc87HbOEDlr2ueA/2N9mkUElbKYgfAXeoZEQL4rO0HP BzTsa77elts3Qnh5/6+PIIxmN8Plu3/4IGiu976y2zQQ3d7ScwWNXQjoPhSZoqrl 9O6PRIvBGhHoEBBvMVd00Kjkl2XPCrU= -----END CERTIFICATE-----Generated at Thu Jul 10 13:19:07 2025 by rpki-client