$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b59219d7-2168-3f18-8532-8e0d1d3b0176.roa File: b59219d7-2168-3f18-8532-8e0d1d3b0176.roa (raw, json) Hash identifier: PtLs8ckbj60r+N6835d7Nat4+pjHvrtvYoSSJonqwBo= Subject key identifier: 9B:4F:D4:1C:40:AE:60:7E:9A:C5:29:4C:0C:55:B8:1F:B3:78:98:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF6869B698B162F894C02FDC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b59219d7-2168-3f18-8532-8e0d1d3b0176.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 396587 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:9b:69:8b:16:2f:89:4c:02:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=0208f894-9d09-45d1-b866-0fd75d6c409f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:a6:9d:24:c8:a1:83:75:d2:8f:8c:84:b1: 2e:d9:d6:91:a8:f3:02:d5:31:8b:f4:9f:70:17:6d: 05:9a:da:6a:af:e3:49:51:3a:b4:d8:ee:15:14:1e: 7d:1b:57:26:c3:49:03:ea:88:84:86:53:be:33:db: d4:0e:c8:37:12:a8:f5:f1:7b:3f:52:a1:03:7c:27: df:de:40:e2:6d:ef:7b:4d:2e:24:09:a0:91:4d:ca: 70:4e:b8:59:8c:08:b5:02:83:21:d5:ef:82:d7:bf: 4b:da:a7:ef:37:31:15:3f:99:25:cc:a6:ee:a0:82: 01:89:ab:35:8c:9c:ef:a8:30:fb:83:b3:cf:db:33: 62:68:c4:1f:d4:69:75:f1:db:ea:b7:e8:6d:be:cd: 53:b4:85:13:c0:b1:23:ad:a5:57:7d:a7:3c:fa:93: 18:17:8d:ee:ed:9e:00:fa:d2:2d:c2:fd:d8:7b:13: 50:7b:47:c9:06:7e:83:63:35:38:72:30:63:d4:a7: 66:56:67:c6:04:b4:c9:38:8b:5b:2b:01:bc:46:24: b3:d0:28:23:e7:05:2f:a3:2f:e2:51:cd:71:09:86: 3c:1f:89:73:25:66:bf:94:6e:9f:18:22:90:21:da: 02:64:af:fb:41:49:4d:57:c6:83:86:65:c7:20:2e: 90:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4F:D4:1C:40:AE:60:7E:9A:C5:29:4C:0C:55:B8:1F:B3:78:98:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b59219d7-2168-3f18-8532-8e0d1d3b0176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:4e:c8:f9:08:f1:c5:d0:cc:07:5f:26:59:81:ca:86:c1:28: 3b:2e:77:74:94:a6:84:34:6a:61:aa:1a:68:76:d1:01:57:d1: 89:41:9a:27:f7:4f:38:99:25:f6:f2:6f:94:d6:ef:c4:e5:a3: 54:8e:62:5a:fe:55:35:6c:63:8f:2a:be:01:bc:b6:c1:31:29: 64:0f:e0:64:e7:da:12:36:3b:af:a3:60:a9:28:d3:a2:ea:f1: 8a:34:83:bc:15:56:55:b4:27:2d:15:a4:86:fb:27:ab:d9:31: 0e:93:d5:ad:b1:51:b4:15:12:06:b5:35:8c:69:4a:7a:65:1d: a8:c1:ae:f4:2d:54:3a:a1:1b:73:ff:39:0e:09:ec:98:91:d0: e3:c8:bb:6c:79:08:3a:d4:30:36:1a:24:d5:53:92:39:c1:10: 18:80:b7:db:82:f6:7c:c5:d2:22:c0:f4:f0:01:88:ca:42:6a: e3:9c:2d:47:fb:4e:43:d8:25:4e:e9:ee:35:25:f9:79:14:12: 6c:89:fa:ec:78:af:63:37:c8:56:35:84:34:a2:d7:32:97:a9: 34:cf:b8:24:57:b4:79:30:64:59:1c:69:cd:26:3d:f5:96:b0: 8e:1e:cb:27:34:f2:e1:9f:84:29:da:5c:30:38:22:e0:f3:15: a3:56:53:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hptpixYviUwC/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MDIwOGY4OTQtOWQwOS00NWQxLWI4NjYtMGZkNzVkNmM0MDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRumnSTIoYN10o+MhLEu2daRqPMC1TGL9J9w F20Fmtpqr+NJUTq02O4VFB59G1cmw0kD6oiEhlO+M9vUDsg3Eqj18Xs/UqEDfCff 3kDibe97TS4kCaCRTcpwTrhZjAi1AoMh1e+C179L2qfvNzEVP5klzKbuoIIBias1 jJzvqDD7g7PP2zNiaMQf1Gl18dvqt+htvs1TtIUTwLEjraVXfac8+pMYF43u7Z4A +tItwv3YexNQe0fJBn6DYzU4cjBj1KdmVmfGBLTJOItbKwG8RiSz0Cgj5wUvoy/i Uc1xCYY8H4lzJWa/lG6fGCKQIdoCZK/7QUlNV8aDhmXHIC6QawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtP1BxArmB+msUpTAxVuB+zeJhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjU5MjE5ZDctMjE2OC0z ZjE4LTg1MzItOGUwZDFkM2IwMTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpOyPkI8cXQzAdfJlmByobBKDsud3SUpoQ0amGqGmh20QFX0YlBmif3 TziZJfbyb5TW78Tlo1SOYlr+VTVsY48qvgG8tsExKWQP4GTn2hI2O6+jYKko06Lq 8Yo0g7wVVlW0Jy0VpIb7J6vZMQ6T1a2xUbQVEga1NYxpSnplHajBrvQtVDqhG3P/ OQ4J7JiR0OPIu2x5CDrUMDYaJNVTkjnBEBiAt9uC9nzF0iLA9PABiMpCauOcLUf7 TkPYJU7p7jUl+XkUEmyJ+ux4r2M3yFY1hDSi1zKXqTTPuCRXtHkwZFkcac0mPfWW sI4eyyc08uGfhCnaXDA4IuDzFaNWU7Q= -----END CERTIFICATE-----Generated at Wed Sep 10 17:57:00 2025 by rpki-client