$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9172d664-7cb9-379a-a042-b824504b9e7c.roa File: 9172d664-7cb9-379a-a042-b824504b9e7c.roa (raw, json) Hash identifier: mA3GtHNLpekVDAjMjPzNvRXfzgAkUhHuCmupQy0yviY= Subject key identifier: A6:7C:48:8C:9D:0A:5A:80:CE:A3:9F:35:28:F8:9C:B0:27:2D:2E:92 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A8185827EC961FF69000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9172d664-7cb9-379a-a042-b824504b9e7c.roa Signing time: Tue 01 Jul 2025 14:11:20 +0000 ROA not before: Tue 01 Jul 2025 14:11:20 +0000 ROA not after: Mon 29 Sep 2025 14:11:20 +0000 asID: 211369 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a8:18:58:27:ec:96:1f:f6:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:20 2025 GMT Not After : Sep 29 14:11:20 2025 GMT Subject: CN=1538f155-0112-434e-bf32-b4f05532525b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:56:25:5e:36:51:03:c8:b9:c3:fc:ad:ca: ec:d7:06:49:e0:a4:c9:a1:ac:ae:e7:d3:9b:26:00: 84:ea:b2:b6:dc:2c:d9:91:7e:83:8b:53:ed:3a:ef: cb:b9:a6:e7:f4:f6:d7:b2:cd:b2:3d:2c:4b:a8:c8: ea:e8:f0:4b:e4:d7:30:66:a7:7a:40:dd:ce:02:ff: 88:d3:48:d6:b9:5a:11:46:9c:2f:d8:c6:37:9d:0f: a1:1c:45:2a:83:88:5b:73:29:a8:ff:d7:ad:87:ef: 5c:5c:fa:b5:e5:6a:22:9b:b1:c9:a7:57:03:4e:27: 48:62:e9:01:dc:63:ce:60:5b:72:ad:dc:58:48:c1: eb:36:79:ea:2e:84:ca:ea:99:14:3c:d6:73:67:01: c9:87:89:c8:6c:0b:52:21:02:ca:7d:c9:2b:3d:ca: 0a:14:5d:88:c6:56:14:41:ba:dc:39:72:51:6e:9e: a1:72:42:fa:aa:4e:0e:79:1d:98:d9:18:62:37:cc: 04:4e:e0:6a:ad:d3:ab:a3:27:91:4f:42:ed:7a:09: 4f:63:54:ef:e6:a1:38:a6:ac:74:a2:da:7f:dd:00: 21:60:c5:0d:1e:5f:80:25:19:7b:8a:fd:81:2b:f5: e7:9d:89:10:a8:11:47:22:9d:8f:00:1b:af:57:bc: b7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7C:48:8C:9D:0A:5A:80:CE:A3:9F:35:28:F8:9C:B0:27:2D:2E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9172d664-7cb9-379a-a042-b824504b9e7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:99:a9:ef:18:2e:a5:cb:87:10:b1:e7:76:a0:8a:31:eb:d1: e4:07:2d:08:17:30:ee:04:c4:1e:1b:27:7c:d4:41:85:39:a0: bd:81:b2:1c:30:95:c9:2c:be:7c:0a:56:3c:b2:31:3b:c3:cb: a3:9a:c3:59:23:60:49:30:2d:80:29:c7:57:6a:4e:95:4f:bb: 29:cc:ec:e2:e0:1c:4d:66:d7:cf:85:b1:a5:6b:91:7a:7f:bb: 76:91:2e:e3:65:8b:60:3c:15:ca:25:ce:a5:57:e8:ab:c7:29: 46:31:d9:d9:19:35:cb:a3:a1:a6:fd:6d:c5:66:0c:f2:e1:48: eb:ff:53:9b:09:85:d8:c5:56:b3:fd:22:db:75:35:85:8d:c1: e4:50:92:80:e6:27:47:f7:d1:08:ae:e6:58:b6:1d:cd:52:3a: ce:e3:8e:c0:e8:39:b9:de:43:b4:2f:82:02:08:15:32:3b:91: 31:a4:bf:9d:d6:fd:4e:c2:f3:06:eb:cf:72:e2:0a:51:9e:bf: b4:66:e2:20:dc:83:a9:83:c8:85:a2:19:b0:61:b3:7e:b7:d9: 6f:09:c5:ab:36:10:bd:ec:41:14:9f:50:84:11:b1:81:8d:0b: 6a:8f:e6:7a:b8:0f:28:9c:a8:24:94:71:d6:fc:e4:10:f0:d3: 72:be:50:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KgYWCfslh/2kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTEyMFoXDTI1MDkyOTE0MTEyMFowLzEtMCsGA1UEAxMk MTUzOGYxNTUtMDExMi00MzRlLWJmMzItYjRmMDU1MzI1MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYdWJV42UQPIucP8rcrs1wZJ4KTJoayu59Ob JgCE6rK23CzZkX6Di1PtOu/Luabn9PbXss2yPSxLqMjq6PBL5NcwZqd6QN3OAv+I 00jWuVoRRpwv2MY3nQ+hHEUqg4hbcymo/9eth+9cXPq15Woim7HJp1cDTidIYukB 3GPOYFtyrdxYSMHrNnnqLoTK6pkUPNZzZwHJh4nIbAtSIQLKfckrPcoKFF2IxlYU QbrcOXJRbp6hckL6qk4OeR2Y2RhiN8wETuBqrdOroyeRT0LteglPY1Tv5qE4pqx0 otp/3QAhYMUNHl+AJRl7iv2BK/XnnYkQqBFHIp2PABuvV7y3FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZ8SIydClqAzqOfNSj4nLAnLS6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTE3MmQ2NjQtN2NiOS0z NzlhLWEwNDItYjgyNDUwNGI5ZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiZqe8YLqXLhxCx53agijHr0eQHLQgXMO4ExB4bJ3zUQYU5oL2Bshww lcksvnwKVjyyMTvDy6Oaw1kjYEkwLYApx1dqTpVPuynM7OLgHE1m18+FsaVrkXp/ u3aRLuNli2A8FcolzqVX6KvHKUYx2dkZNcujoab9bcVmDPLhSOv/U5sJhdjFVrP9 Itt1NYWNweRQkoDmJ0f30Qiu5li2Hc1SOs7jjsDoObneQ7QvggIIFTI7kTGkv53W /U7C8wbrz3LiClGev7Rm4iDcg6mDyIWiGbBhs3632W8Jxas2EL3sQRSfUIQRsYGN C2qP5nq4DyicqCSUcdb85BDw03K+UNs= -----END CERTIFICATE-----Generated at Thu Jul 10 12:36:49 2025 by rpki-client