$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a2a261c-aedd-3a91-9da3-3a2452d7193a.roa File: 9a2a261c-aedd-3a91-9da3-3a2452d7193a.roa (raw, json) Hash identifier: B7T/ixrH+7Fx545k25pFBnwQsyDZ3ISPrVNpTSH2w+c= Subject key identifier: BD:8A:75:0A:FA:26:E6:FD:68:4F:35:C7:83:0C:89:93:B4:46:C1:DF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A3D62FDDE408D28B7600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a2a261c-aedd-3a91-9da3-3a2452d7193a.roa Signing time: Tue 01 Jul 2025 14:11:18 +0000 ROA not before: Tue 01 Jul 2025 14:11:18 +0000 ROA not after: Mon 29 Sep 2025 14:11:18 +0000 asID: 396602 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a3:d6:2f:dd:e4:08:d2:8b:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:18 2025 GMT Not After : Sep 29 14:11:18 2025 GMT Subject: CN=bf9e947e-569b-484d-ab2c-39494bfba6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:66:0f:03:49:66:f5:7b:1e:2a:fb:f1:7e:54: b7:b7:c8:84:a5:e9:d2:68:c4:d4:1d:ca:65:db:70: 74:ba:51:ec:33:95:c1:ce:48:d5:21:0c:90:b9:6f: d8:89:4c:f4:08:7e:90:64:96:15:d8:b8:d3:e5:0c: e1:6d:f4:64:62:e8:58:ef:65:22:9d:9c:01:b7:2e: 76:65:e6:cd:d1:1f:ba:40:e2:14:18:41:36:a9:24: 33:01:1f:e6:41:a4:f9:e3:0f:ba:97:1a:0a:cc:20: f8:ce:8c:92:8b:a0:89:8f:3f:69:a6:3e:1c:0e:4a: 91:6b:d5:5e:7f:d1:7d:28:e1:c2:30:d7:1d:0a:4b: b3:4b:68:3d:74:79:95:89:04:9b:19:73:86:8d:d6: 46:a1:42:67:ff:8d:63:f1:33:e1:89:a5:6b:ef:90: b8:86:16:fa:37:f5:e1:94:b7:37:5f:3e:d1:6a:ea: 9d:5f:cb:a1:ef:52:ef:da:83:6c:50:ba:08:41:db: f9:ab:83:1b:a9:cd:51:94:ce:06:25:3d:13:af:a4: 60:85:11:5c:ae:43:df:e6:0e:f9:5c:60:4f:76:b6: b0:09:f2:a9:6e:77:5b:c3:8d:07:47:70:93:59:76: 62:8d:60:11:57:41:7c:6c:10:69:a6:4f:ad:1b:52: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8A:75:0A:FA:26:E6:FD:68:4F:35:C7:83:0C:89:93:B4:46:C1:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a2a261c-aedd-3a91-9da3-3a2452d7193a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:17:d5:18:71:6e:2e:1a:16:fd:76:07:db:c3:cc:71:5d:7f: f8:26:0e:97:c9:21:71:58:b0:0f:4f:ed:78:25:5d:6a:6b:07: be:0f:a8:9d:60:ce:af:83:c1:60:b4:6f:e8:3a:d3:7f:f7:f6: c2:56:5c:b5:98:b5:5f:36:21:31:02:83:cf:82:34:e7:b3:44: f1:ef:05:e1:fd:de:f6:af:c9:f2:89:4a:d9:9b:2f:17:b7:e0: 81:02:aa:1a:df:e7:af:f7:01:2c:50:aa:22:dd:d2:8e:43:be: e4:de:8a:85:ea:5d:ef:67:4c:6a:69:b3:22:4b:fa:98:11:96: a3:e0:2f:0e:91:04:1e:44:e4:05:df:98:32:18:ad:14:e3:f6: 0c:72:9f:98:3a:03:b3:b2:d7:a1:46:45:c6:76:2d:42:3b:9e: a7:40:50:80:f3:23:4d:46:a6:6c:ed:0f:a5:d1:5d:99:b8:4f: 93:77:9b:c6:4c:aa:b3:2b:04:07:78:a9:b4:ee:28:5d:24:76: 03:f3:0b:c4:65:32:1e:30:34:bf:c8:b4:b9:d4:b5:00:b5:0b: d8:97:77:1c:54:28:07:fa:ef:98:94:cb:67:eb:f0:9f:56:ed: 5c:3d:5b:e4:71:7f:44:9c:e5:31:1d:fd:09:57:ea:41:7c:9b: 4e:48:56:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KPWL93kCNKLdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTExOFoXDTI1MDkyOTE0MTExOFowLzEtMCsGA1UEAxMk YmY5ZTk0N2UtNTY5Yi00ODRkLWFiMmMtMzk0OTRiZmJhNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGYPA0lm9XseKvvxflS3t8iEpenSaMTUHcpl 23B0ulHsM5XBzkjVIQyQuW/YiUz0CH6QZJYV2LjT5QzhbfRkYuhY72UinZwBty52 ZebN0R+6QOIUGEE2qSQzAR/mQaT54w+6lxoKzCD4zoySi6CJjz9ppj4cDkqRa9Ve f9F9KOHCMNcdCkuzS2g9dHmViQSbGXOGjdZGoUJn/41j8TPhiaVr75C4hhb6N/Xh lLc3Xz7RauqdX8uh71Lv2oNsULoIQdv5q4Mbqc1RlM4GJT0Tr6RghRFcrkPf5g75 XGBPdrawCfKpbndbw40HR3CTWXZijWARV0F8bBBppk+tG1KnxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2KdQr6Jub9aE81x4MMiZO0RsHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWEyYTI2MWMtYWVkZC0z YTkxLTlkYTMtM2EyNDUyZDcxOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4X1Rhxbi4aFv12B9vDzHFdf/gmDpfJIXFYsA9P7XglXWprB74PqJ1g zq+DwWC0b+g603/39sJWXLWYtV82ITECg8+CNOezRPHvBeH93vavyfKJStmbLxe3 4IECqhrf56/3ASxQqiLd0o5DvuTeioXqXe9nTGppsyJL+pgRlqPgLw6RBB5E5AXf mDIYrRTj9gxyn5g6A7Oy16FGRcZ2LUI7nqdAUIDzI01GpmztD6XRXZm4T5N3m8ZM qrMrBAd4qbTuKF0kdgPzC8RlMh4wNL/ItLnUtQC1C9iXdxxUKAf675iUy2fr8J9W 7Vw9W+Rxf0Sc5TEd/QlX6kF8m05IVrE= -----END CERTIFICATE-----Generated at Thu Jul 10 04:31:04 2025 by rpki-client