$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9088123a-2d9a-3000-84d5-ac5a11255e69.roa File: 9088123a-2d9a-3000-84d5-ac5a11255e69.roa (raw, json) Hash identifier: XUdmLGFu+hxMEz3e1Gq8UKTAbLbAFH7XYwhbqnLNLM0= Subject key identifier: 5D:4E:82:09:5A:49:CB:F8:58:38:D7:28:89:B8:5C:D8:4B:01:DA:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A87A7A0A256E889C9F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9088123a-2d9a-3000-84d5-ac5a11255e69.roa Signing time: Tue 01 Jul 2025 14:11:20 +0000 ROA not before: Tue 01 Jul 2025 14:11:20 +0000 ROA not after: Mon 29 Sep 2025 14:11:20 +0000 asID: 36622 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a8:7a:7a:0a:25:6e:88:9c:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:20 2025 GMT Not After : Sep 29 14:11:20 2025 GMT Subject: CN=ad71bca8-a598-49c9-9e2b-294590a9139a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:a2:c1:54:7e:d4:70:4d:cc:e5:41:03:5d: b5:9f:35:23:ae:91:09:3f:63:90:09:69:c8:4d:e3: 18:61:69:12:91:a1:b2:fc:9f:fc:0d:72:88:82:50: dd:ff:89:62:05:13:95:68:1a:2f:f9:1e:5e:f4:d6: 51:be:c6:9a:8a:71:b6:90:5b:ba:d7:24:1e:f0:76: 6f:d1:c0:43:f5:78:aa:22:a2:bc:47:88:b1:eb:07: 39:25:b0:f0:3a:39:c8:68:03:56:6b:5b:a7:86:79: 3e:ee:ce:0b:07:9f:b9:70:df:38:75:23:9c:8a:e4: b7:f6:74:8f:1f:62:1d:2a:cd:fa:46:bd:5b:1f:a8: aa:43:bd:8a:cf:c4:47:99:34:30:e7:2f:01:7a:c4: d0:4c:62:25:db:8d:c9:d7:5d:9c:d1:fc:b7:7c:6e: 73:e9:06:7d:a1:ee:e7:50:4c:55:16:ee:bf:be:65: ed:63:ba:d2:ac:f4:d7:75:90:7d:a9:ba:9d:01:9d: 44:e9:67:05:ec:eb:c7:55:0d:bf:b1:60:b4:50:7f: a3:ae:ec:fe:ea:f1:d5:d1:52:d2:7b:cf:91:9c:da: f5:77:05:33:66:56:a0:98:85:7b:6b:64:57:a9:8f: c6:82:f4:78:16:c3:5d:ea:b9:0f:00:b4:a9:6f:83: 9c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4E:82:09:5A:49:CB:F8:58:38:D7:28:89:B8:5C:D8:4B:01:DA:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9088123a-2d9a-3000-84d5-ac5a11255e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:a2:0e:ae:58:ff:d0:4a:85:8a:e4:2c:f9:58:bc:3f:22:2b: 46:2c:5f:98:fc:98:dc:bd:63:08:ff:a8:a8:3d:bb:20:1b:bf: 09:31:1a:5b:11:81:16:6d:17:e5:82:44:86:4b:0b:75:18:54: d7:5c:b2:dd:7a:1f:c6:c1:62:19:ba:31:e5:c3:7a:df:34:53: c5:2c:61:26:c1:e8:93:d5:a2:03:da:3b:05:70:96:51:94:b3: 34:19:14:c4:4b:21:73:fd:29:8b:55:56:f5:29:a1:fc:66:42: 8c:19:37:41:04:6d:de:09:da:c3:ac:9b:7e:0f:76:37:e1:f9: 47:8b:26:40:e2:00:d0:28:9e:67:cd:de:26:7c:3b:ae:3a:2d: c3:c9:63:97:14:83:ed:a1:49:23:bc:0f:cf:31:ef:52:49:67: d0:88:8f:91:b8:47:f3:65:9b:b0:84:06:f2:b7:2e:dd:17:a7: 68:a9:af:71:ca:20:71:c5:0e:2e:e8:74:78:94:d1:03:c6:03: 6a:b6:ab:dc:c5:54:b9:61:f9:00:72:cb:44:14:3c:fd:55:28: 6f:d5:f4:bd:c1:a0:90:76:4f:c2:04:4a:1e:d3:ac:2e:6c:98: b1:b1:53:b8:e2:22:63:e2:d9:30:23:d0:47:9c:d3:3b:ae:e7: cd:6e:ca:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6Kh6egolboicn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTEyMFoXDTI1MDkyOTE0MTEyMFowLzEtMCsGA1UEAxMk YWQ3MWJjYTgtYTU5OC00OWM5LTllMmItMjk0NTkwYTkxMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSKiwVR+1HBNzOVBA121nzUjrpEJP2OQCWnI TeMYYWkSkaGy/J/8DXKIglDd/4liBROVaBov+R5e9NZRvsaainG2kFu61yQe8HZv 0cBD9XiqIqK8R4ix6wc5JbDwOjnIaANWa1unhnk+7s4LB5+5cN84dSOciuS39nSP H2IdKs36Rr1bH6iqQ72Kz8RHmTQw5y8BesTQTGIl243J112c0fy3fG5z6QZ9oe7n UExVFu6/vmXtY7rSrPTXdZB9qbqdAZ1E6WcF7OvHVQ2/sWC0UH+jruz+6vHV0VLS e8+RnNr1dwUzZlagmIV7a2RXqY/GgvR4FsNd6rkPALSpb4OcuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1OgglaScv4WDjXKIm4XNhLAdrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTA4ODEyM2EtMmQ5YS0z MDAwLTg0ZDUtYWM1YTExMjU1ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaiDq5Y/9BKhYrkLPlYvD8iK0YsX5j8mNy9Ywj/qKg9uyAbvwkxGlsR gRZtF+WCRIZLC3UYVNdcst16H8bBYhm6MeXDet80U8UsYSbB6JPVogPaOwVwllGU szQZFMRLIXP9KYtVVvUpofxmQowZN0EEbd4J2sOsm34Pdjfh+UeLJkDiANAonmfN 3iZ8O646LcPJY5cUg+2hSSO8D88x71JJZ9CIj5G4R/Nlm7CEBvK3Lt0Xp2ipr3HK IHHFDi7odHiU0QPGA2q2q9zFVLlh+QByy0QUPP1VKG/V9L3BoJB2T8IESh7TrC5s mLGxU7jiImPi2TAj0Eec0zuu581uypU= -----END CERTIFICATE-----Generated at Thu Jul 10 07:51:51 2025 by rpki-client