$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0d969ab-49f8-3a08-a0b7-c815c959d32e.roa File: d0d969ab-49f8-3a08-a0b7-c815c959d32e.roa (raw, json) Hash identifier: vYPMC/EvHgPAz4d9Mysqd2H9XDB7ZB38oS3bPgjeYxE= Subject key identifier: 41:DB:DD:45:9E:68:EB:06:36:21:F4:70:B5:12:D4:54:65:9D:58:6E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A7611475FD4FECBDE210 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0d969ab-49f8-3a08-a0b7-c815c959d32e.roa Signing time: Tue 01 Jul 2025 14:11:19 +0000 ROA not before: Tue 01 Jul 2025 14:11:19 +0000 ROA not after: Mon 29 Sep 2025 14:11:19 +0000 asID: 396568 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a7:61:14:75:fd:4f:ec:bd:e2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:19 2025 GMT Not After : Sep 29 14:11:19 2025 GMT Subject: CN=24ba137e-069a-4a91-974a-38150de6a051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:f2:5f:57:df:6b:ae:3b:00:0b:0b:b9:a1: 3c:20:89:3c:d2:3e:3c:9f:93:a3:40:03:52:8f:74: 87:81:f9:e5:77:41:44:ad:ce:3c:ea:45:01:ee:18: 90:85:95:24:e4:37:78:0d:32:ef:d3:85:71:ba:e6: c2:79:c5:87:de:83:30:ad:45:4a:cf:ac:8a:7a:db: d1:70:71:52:03:0f:2c:d7:2b:50:d8:ae:74:8e:d9: e5:c5:27:a5:56:d8:cc:64:33:2e:3d:bc:5a:c9:f8: f2:b0:08:82:8c:43:80:94:bc:88:78:23:69:1e:30: 8f:81:1b:cd:b0:16:f6:3d:96:78:1b:a8:f5:bd:7e: 4a:7f:89:42:61:f6:40:61:a5:f3:23:e7:6b:66:74: c0:3c:d3:ad:ed:55:23:f9:81:7b:6e:44:d6:f7:1b: 5d:5b:f9:f7:ce:38:ed:be:58:d8:a8:d1:e0:e3:63: 7a:6c:a1:52:99:69:9c:b9:a5:cd:87:59:8e:38:e7: 87:90:39:f6:eb:f3:6a:48:ab:f1:50:a9:a5:92:be: 4c:fb:41:8e:ba:c0:5c:92:0c:d2:77:0f:4e:71:07: 9f:94:a3:07:97:95:ac:34:59:a1:0b:65:cc:c7:0f: ab:41:90:ad:97:61:2c:07:14:55:56:04:5e:a5:7a: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DB:DD:45:9E:68:EB:06:36:21:F4:70:B5:12:D4:54:65:9D:58:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0d969ab-49f8-3a08-a0b7-c815c959d32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:06:3a:51:ca:35:f7:f3:b2:65:21:f8:5e:69:cc:57:eb:22: f2:c8:c3:ad:5e:eb:b3:72:05:52:90:79:11:82:78:72:7f:ee: fe:a5:2b:77:20:0f:b0:50:5d:63:1b:50:db:0f:13:e7:ff:cf: dd:c2:13:a4:ba:8e:61:7f:28:d8:34:ef:00:a6:06:76:42:90: 60:9f:fa:e5:3c:50:51:14:7d:2d:8e:f9:a4:7c:67:9f:52:43: e8:03:26:f0:90:72:10:e6:b5:42:5f:6e:21:b7:7d:2f:86:6c: 65:17:b1:ac:6d:ba:4d:b9:01:37:7e:10:9c:61:ce:ef:68:e1: 0f:09:6d:7a:d3:29:69:29:f8:14:ce:ca:d0:90:d4:89:0f:05: b6:43:ca:df:2e:d8:6d:37:03:ac:2a:ca:cd:d4:e6:67:d5:07: cb:31:be:86:ee:24:a8:59:b8:5b:9a:5c:ac:ad:2a:7b:14:c6: fd:cf:9d:17:50:5b:3d:de:d5:b0:8e:f5:00:a3:7a:e2:45:e7: a8:0e:71:80:66:c4:17:d6:f1:84:f2:0f:15:a7:9f:41:65:4e: 38:e6:02:40:8f:2b:17:19:ad:c4:80:ca:a5:5d:ed:19:9d:1d: 77:93:18:ae:95:be:80:9b:8d:38:ce:89:9e:5e:8a:8f:b6:b8: 0a:f2:fc:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KdhFHX9T+y94hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTExOVoXDTI1MDkyOTE0MTExOVowLzEtMCsGA1UEAxMk MjRiYTEzN2UtMDY5YS00YTkxLTk3NGEtMzgxNTBkZTZhMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqfyX1ffa647AAsLuaE8IIk80j48n5OjQANS j3SHgfnld0FErc486kUB7hiQhZUk5Dd4DTLv04VxuubCecWH3oMwrUVKz6yKetvR cHFSAw8s1ytQ2K50jtnlxSelVtjMZDMuPbxayfjysAiCjEOAlLyIeCNpHjCPgRvN sBb2PZZ4G6j1vX5Kf4lCYfZAYaXzI+drZnTAPNOt7VUj+YF7bkTW9xtdW/n3zjjt vljYqNHg42N6bKFSmWmcuaXNh1mOOOeHkDn26/NqSKvxUKmlkr5M+0GOusBckgzS dw9OcQeflKMHl5WsNFmhC2XMxw+rQZCtl2EsBxRVVgRepXo7VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHb3UWeaOsGNiH0cLUS1FRlnVhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBkOTY5YWItNDlmOC0z YTA4LWEwYjctYzgxNWM5NTlkMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4GOlHKNffzsmUh+F5pzFfrIvLIw61e67NyBVKQeRGCeHJ/7v6lK3cg D7BQXWMbUNsPE+f/z93CE6S6jmF/KNg07wCmBnZCkGCf+uU8UFEUfS2O+aR8Z59S Q+gDJvCQchDmtUJfbiG3fS+GbGUXsaxtuk25ATd+EJxhzu9o4Q8JbXrTKWkp+BTO ytCQ1IkPBbZDyt8u2G03A6wqys3U5mfVB8sxvobuJKhZuFuaXKytKnsUxv3PnRdQ Wz3e1bCO9QCjeuJF56gOcYBmxBfW8YTyDxWnn0FlTjjmAkCPKxcZrcSAyqVd7Rmd HXeTGK6VvoCbjTjOiZ5eio+2uAry/Iw= -----END CERTIFICATE-----Generated at Thu Jul 10 04:02:36 2025 by rpki-client