$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cafb308c-b1f2-37af-b765-52acccca9ac7.roa File: cafb308c-b1f2-37af-b765-52acccca9ac7.roa (raw, json) Hash identifier: Yp/5kGqITacHzZQ5SE2J4aqN4g0YtuWTMYjQZl2p2H8= Subject key identifier: 3D:AD:59:3D:52:8D:4A:07:2C:C5:C9:BD:30:EB:91:15:C3:B7:0A:B0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF6869E1BA7C1A2B645024D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cafb308c-b1f2-37af-b765-52acccca9ac7.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 396594 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:9e:1b:a7:c1:a2:b6:45:02:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=0f2d508a-ece6-4f1b-bf71-99b958f39104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:05:6e:0a:ad:48:2c:17:28:33:4d:0b:18:19: 0e:a0:f5:1c:d7:38:dc:ba:3c:56:7c:ef:5a:d6:70: 9d:a6:de:d1:02:a6:9d:92:56:5f:6d:ff:74:7a:5f: 92:4a:66:44:a6:fb:56:9d:ec:36:68:75:e9:c5:3e: 26:86:93:51:59:02:93:5c:cf:35:3f:98:33:08:69: 45:ef:5d:0b:9b:4c:27:23:b1:7d:17:68:93:ee:1b: 2b:0d:f7:8a:0e:71:92:4f:62:cc:e7:0a:ce:87:b7: 33:94:32:fd:6f:d4:83:51:df:1c:82:e6:7d:d6:75: f7:49:85:c5:d4:bc:ed:b6:cb:40:c4:ca:6a:64:79: 73:3d:43:3b:85:d7:8f:46:be:26:7c:19:64:b8:b7: e6:ea:8e:d3:64:61:f2:24:8d:60:04:9b:ae:97:71: 85:20:7d:1b:7d:27:8b:a2:50:9b:35:88:a0:3a:be: 36:79:55:6c:30:eb:e3:04:4b:24:fb:ee:47:c4:fd: 1f:d4:58:0e:8c:f9:36:fe:a4:0d:cd:c2:1e:49:0e: 10:2e:d5:11:5e:b3:38:6e:1e:8a:2c:27:d5:8b:d4: 10:d7:e7:20:e9:04:2a:c6:84:b2:1c:57:de:01:12: f6:38:f5:87:d9:7e:4b:cf:77:e2:07:96:d7:4e:8d: fc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AD:59:3D:52:8D:4A:07:2C:C5:C9:BD:30:EB:91:15:C3:B7:0A:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cafb308c-b1f2-37af-b765-52acccca9ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3f:ff:dd:46:76:a2:34:67:bd:ab:9c:c9:70:c8:37:f4:b6: 2c:47:83:de:6d:21:a2:31:05:95:c9:38:46:75:bf:39:27:2a: 38:ff:a3:e0:60:d4:57:34:e0:42:63:3e:4b:0f:fa:98:e1:49: 90:ff:0e:2e:8d:dc:8b:32:b9:87:56:8c:5f:ec:54:40:34:ea: 50:79:8d:75:e4:87:f1:1d:3d:4e:b5:8c:f2:b6:f7:fb:9a:7a: 43:33:28:00:29:c1:20:25:1b:8c:4e:a4:70:e5:6e:66:8d:95: b5:6d:35:1e:17:98:f0:70:66:06:1f:92:63:b7:b2:aa:1d:e7: 4f:bc:e4:2a:6d:fd:d5:41:ae:80:9b:f3:e7:d9:ee:c3:9b:b3: 75:7a:d7:9b:2b:79:95:ed:8d:85:a9:7a:78:37:de:27:9e:95: ee:c0:ec:6b:30:36:b1:3f:a4:f1:9d:f5:82:52:5a:52:db:5e: c3:2b:b1:0f:b5:26:3a:01:b5:0f:c3:dc:a6:58:6c:1f:b3:53: 65:6f:af:6f:58:f9:50:da:f1:b0:2f:99:20:f4:3a:5b:07:c1: fe:df:0b:66:67:80:8c:fa:71:9c:34:bf:09:0a:86:02:23:49: c9:8e:a2:0f:14:35:01:87:d1:e3:45:91:3d:91:b5:6e:0f:78: 20:6b:bc:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hp4bp8GitkUCTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MGYyZDUwOGEtZWNlNi00ZjFiLWJmNzEtOTliOTU4ZjM5MTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQVuCq1ILBcoM00LGBkOoPUc1zjcujxWfO9a 1nCdpt7RAqadklZfbf90el+SSmZEpvtWnew2aHXpxT4mhpNRWQKTXM81P5gzCGlF 710Lm0wnI7F9F2iT7hsrDfeKDnGST2LM5wrOh7czlDL9b9SDUd8cguZ91nX3SYXF 1LzttstAxMpqZHlzPUM7hdePRr4mfBlkuLfm6o7TZGHyJI1gBJuul3GFIH0bfSeL olCbNYigOr42eVVsMOvjBEsk++5HxP0f1FgOjPk2/qQNzcIeSQ4QLtURXrM4bh6K LCfVi9QQ1+cg6QQqxoSyHFfeARL2OPWH2X5Lz3fiB5bXTo38CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2tWT1SjUoHLMXJvTDrkRXDtwqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2FmYjMwOGMtYjFmMi0z N2FmLWI3NjUtNTJhY2NjY2E5YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU//91GdqI0Z72rnMlwyDf0tixHg95tIaIxBZXJOEZ1vzknKjj/o+Bg 1Fc04EJjPksP+pjhSZD/Di6N3IsyuYdWjF/sVEA06lB5jXXkh/EdPU61jPK29/ua ekMzKAApwSAlG4xOpHDlbmaNlbVtNR4XmPBwZgYfkmO3sqod50+85Cpt/dVBroCb 8+fZ7sObs3V615sreZXtjYWpeng33ieele7A7GswNrE/pPGd9YJSWlLbXsMrsQ+1 JjoBtQ/D3KZYbB+zU2Vvr29Y+VDa8bAvmSD0OlsHwf7fC2ZngIz6cZw0vwkKhgIj ScmOog8UNQGH0eNFkT2RtW4PeCBrvPw= -----END CERTIFICATE-----Generated at Wed Sep 10 18:02:04 2025 by rpki-client