$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa File: bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa (raw, json) Hash identifier: hJWzFuLQBunpGTmK40mX6sCjxgVEXknoVJlIjmGxQ90= Subject key identifier: 59:64:DA:B9:35:1E:62:D6:26:43:3A:D5:A0:A3:0B:AC:3E:4B:92:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2496EFC57A020F97AB8BC4C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 396579 IP address blocks: 192.42.175.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:ef:c5:7a:02:0f:97:ab:8b:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=eef1e75d-85d9-42b8-befb-e0c59452b997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:a4:52:52:eb:09:88:48:50:56:fe:6c:6c: 66:c3:ff:a1:6f:b3:b0:fc:6b:c4:cc:03:9d:e1:a1: db:ab:d0:aa:ce:a6:9d:f2:79:9b:d9:34:e4:26:1b: a5:46:b9:38:5c:40:8c:c6:92:a5:c5:1f:cb:35:ec: 1e:9c:1e:e8:69:64:55:b7:22:83:bc:bc:30:f3:80: ca:f6:cf:3e:52:40:37:00:d8:9d:25:97:a2:7b:41: 9d:27:e8:2b:59:e6:ca:e1:a5:7c:31:45:8e:82:be: c9:79:07:80:db:6c:31:7e:50:b0:6a:39:c7:30:6b: 8a:da:b3:84:b6:67:8a:3d:47:ac:55:5f:bd:01:b8: cd:27:a8:84:a5:4a:1f:fd:f2:40:ff:48:4d:2d:80: 68:be:2e:71:b5:96:4f:a1:52:d0:87:a4:fd:ed:12: 37:0f:c0:16:0f:00:87:91:07:eb:dc:de:0b:48:9c: a2:60:2e:84:e8:67:3a:e3:3a:50:2d:88:04:e4:3a: 5a:b3:0e:ad:13:11:45:e9:50:d4:f6:8c:b0:8e:e5: a5:00:7d:be:c8:a7:80:0d:ad:64:ae:19:47:20:77: 8e:79:1f:82:05:9b:0d:16:d8:51:93:29:40:89:fe: 65:9d:9b:65:85:d7:f0:6e:ae:13:df:08:eb:62:d1: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:64:DA:B9:35:1E:62:D6:26:43:3A:D5:A0:A3:0B:AC:3E:4B:92:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:0b:0c:82:15:e3:72:68:f9:10:18:d6:dc:c5:df:8c:ea:84: 69:3a:81:f9:73:be:4a:fe:39:13:69:31:b8:0d:4e:c6:e6:5d: 31:48:39:de:14:83:d3:2d:41:4c:0b:11:08:99:95:49:7e:1e: b5:26:30:01:2f:f4:af:d6:f0:f3:39:91:c4:7d:e0:f6:95:5a: f4:51:0c:87:c8:03:00:94:df:b7:0b:60:ce:0b:09:c7:b3:c6: bb:d8:7b:f8:30:12:98:89:3a:d0:9c:cc:bb:50:5c:eb:55:08: 90:c9:84:6a:a9:fd:d0:c9:d3:98:98:45:dc:85:b3:54:37:cf: 02:8b:25:8a:fc:63:b4:dc:d5:f2:83:ee:85:af:19:4f:09:08: 4c:91:4a:63:18:28:8c:3c:f9:bd:6b:b7:86:db:9c:40:9e:ff: ad:1f:25:23:19:99:b5:09:03:4d:33:47:90:0b:07:bd:e9:c2: f1:c0:7c:81:a4:b6:38:02:de:e2:14:aa:dc:40:a0:7e:d6:17: c3:48:16:3f:a8:77:30:4d:cc:b5:2b:6b:52:0f:a3:b8:c1:54: 6c:4b:da:8c:e2:2c:cd:e6:9e:5d:69:9a:86:04:1c:14:ad:a5: b7:90:b9:b6:b5:f7:30:42:21:10:1d:ec:7d:16:6a:20:ae:69: 61:69:23:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsklu/FegIPl6uLxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZWVmMWU3NWQtODVkOS00MmI4LWJlZmItZTBjNTk0NTJiOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZykUlLrCYhIUFb+bGxmw/+hb7Ow/GvEzAOd 4aHbq9Cqzqad8nmb2TTkJhulRrk4XECMxpKlxR/LNewenB7oaWRVtyKDvLww84DK 9s8+UkA3ANidJZeie0GdJ+grWebK4aV8MUWOgr7JeQeA22wxflCwajnHMGuK2rOE tmeKPUesVV+9AbjNJ6iEpUof/fJA/0hNLYBovi5xtZZPoVLQh6T97RI3D8AWDwCH kQfr3N4LSJyiYC6E6Gc64zpQLYgE5Dpasw6tExFF6VDU9oywjuWlAH2+yKeADa1k rhlHIHeOeR+CBZsNFthRkylAif5lnZtlhdfwbq4T3wjrYtFJ6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFlk2rk1HmLWJkM61aCjC6w+S5KFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmFmZDRlMDktMGUzMC0z YjJiLTlhM2ItZjgxNDkzMDEyNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3CwyCFeNyaPkQGNbcxd+M6oRpOoH5c75K/jkTaTG4DU7G5l0xSDne FIPTLUFMCxEImZVJfh61JjABL/Sv1vDzOZHEfeD2lVr0UQyHyAMAlN+3C2DOCwnH s8a72Hv4MBKYiTrQnMy7UFzrVQiQyYRqqf3QydOYmEXchbNUN88CiyWK/GO03NXy g+6FrxlPCQhMkUpjGCiMPPm9a7eG25xAnv+tHyUjGZm1CQNNM0eQCwe96cLxwHyB pLY4At7iFKrcQKB+1hfDSBY/qHcwTcy1K2tSD6O4wVRsS9qM4izN5p5daZqGBBwU raW3kLm2tfcwQiEQHex9FmogrmlhaSOm -----END CERTIFICATE-----Generated at Wed Sep 10 20:41:32 2025 by rpki-client