$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d23ac7c9-dd70-35fe-ad65-74eaca6d1e38.roa File: d23ac7c9-dd70-35fe-ad65-74eaca6d1e38.roa (raw, json) Hash identifier: lDplOTLIcFoWVZ9Tsyts0e5gIiNKUaGNRrysCQZ+pjM= Subject key identifier: A2:AB:60:4D:3B:5B:A0:3C:48:43:B3:C3:1D:51:25:87:7A:8C:C4:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A4FD0BD31D93D5FFC1B0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d23ac7c9-dd70-35fe-ad65-74eaca6d1e38.roa Signing time: Tue 01 Jul 2025 14:11:18 +0000 ROA not before: Tue 01 Jul 2025 14:11:18 +0000 ROA not after: Mon 29 Sep 2025 14:11:18 +0000 asID: 396564 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a4:fd:0b:d3:1d:93:d5:ff:c1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:18 2025 GMT Not After : Sep 29 14:11:18 2025 GMT Subject: CN=63cc3be8-aa16-487d-9b6d-d7b10dcbc7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:14:1f:2e:e0:77:37:0e:e1:01:a4:af:cb: d7:c2:f4:02:a3:e7:c4:1f:28:e0:56:7d:90:66:77: 7b:66:6c:ec:62:5f:b2:67:8d:9f:58:27:3a:2b:f1: 85:bc:6a:77:4f:f6:c3:41:e6:65:df:89:62:16:73: e7:76:8d:11:20:c2:db:ff:e4:86:87:f8:03:b1:62: f0:58:13:3d:b9:ca:d4:c9:e2:20:ec:32:90:22:da: c0:cf:15:da:e9:d6:60:0d:55:90:1b:25:4c:64:d6: 7e:7f:26:3c:d4:7a:60:46:74:03:04:02:b3:db:64: 70:bf:d5:20:8d:42:dc:b5:a1:ee:c2:c4:05:7f:ab: 07:73:97:0f:2e:23:25:8f:7e:60:98:a6:23:73:77: f8:0c:20:91:e7:20:7b:da:6e:ff:f4:cf:ed:46:0f: 05:30:9d:41:69:09:16:f3:ae:25:34:46:bd:eb:18: ac:48:4e:c9:ca:da:f2:ff:28:09:52:01:25:14:87: 25:2b:8d:f2:8b:c5:9b:0e:83:39:78:80:1b:cb:c5: 1f:a9:2f:d5:7e:7f:cc:33:9a:6e:9b:38:34:96:f5: 7e:fd:a2:c3:34:e3:09:90:95:31:25:e9:4f:0a:3b: d9:53:7b:1e:5e:3c:9c:c5:42:3a:35:e0:ba:d8:4b: 82:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AB:60:4D:3B:5B:A0:3C:48:43:B3:C3:1D:51:25:87:7A:8C:C4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d23ac7c9-dd70-35fe-ad65-74eaca6d1e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c4:e0:fc:9e:e6:31:d4:f3:f9:32:4e:d1:66:db:19:ab:15: 6f:76:67:94:82:76:dd:29:5f:c2:1f:3b:89:d3:8b:d1:ef:a2: f6:4a:d2:a2:ac:db:eb:33:cd:b5:b7:0b:a2:56:e4:61:16:79: f8:6c:6c:94:50:f1:61:ab:77:35:da:16:32:e2:9e:69:44:03: da:16:df:6a:bb:db:25:24:e6:e9:d6:7b:7a:b0:2e:90:1f:fd: 84:ac:0b:cc:25:2e:10:61:0d:0a:28:57:45:77:62:13:66:2f: 82:bc:64:03:63:86:c0:5c:3a:11:15:61:32:35:43:3c:c4:c8: f2:01:14:d3:b6:10:b9:05:f7:db:43:3c:46:04:a2:df:31:e4: a9:57:80:74:39:79:e9:2b:b0:fc:b3:15:d7:1d:02:e9:84:59: f9:59:6d:42:12:0d:77:c1:f7:01:03:74:e2:fc:1b:6e:b3:8d: 06:23:c5:7e:19:b0:6f:ab:ee:cb:96:91:d2:ef:ea:3a:80:1a: 21:ab:39:53:69:fc:c1:f2:fc:c3:96:2e:fe:c5:95:69:2e:05: f3:da:91:89:12:32:e3:23:80:6e:1f:ab:c9:63:0a:58:2b:d2: c2:c4:5d:3b:f8:9a:63:db:e3:5d:22:15:0b:29:69:b2:0a:4b: 38:54:2e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KT9C9Mdk9X/wbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTExOFoXDTI1MDkyOTE0MTExOFowLzEtMCsGA1UEAxMk NjNjYzNiZTgtYWExNi00ODdkLTliNmQtZDdiMTBkY2JjN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq0UHy7gdzcO4QGkr8vXwvQCo+fEHyjgVn2Q Znd7ZmzsYl+yZ42fWCc6K/GFvGp3T/bDQeZl34liFnPndo0RIMLb/+SGh/gDsWLw WBM9ucrUyeIg7DKQItrAzxXa6dZgDVWQGyVMZNZ+fyY81HpgRnQDBAKz22Rwv9Ug jULctaHuwsQFf6sHc5cPLiMlj35gmKYjc3f4DCCR5yB72m7/9M/tRg8FMJ1BaQkW 864lNEa96xisSE7Jytry/ygJUgElFIclK43yi8WbDoM5eIAby8UfqS/Vfn/MM5pu mzg0lvV+/aLDNOMJkJUxJelPCjvZU3seXjycxUI6NeC62EuCNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKrYE07W6A8SEOzwx1RJYd6jMQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDIzYWM3YzktZGQ3MC0z NWZlLWFkNjUtNzRlYWNhNmQxZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7E4Pye5jHU8/kyTtFm2xmrFW92Z5SCdt0pX8IfO4nTi9HvovZK0qKs 2+szzbW3C6JW5GEWefhsbJRQ8WGrdzXaFjLinmlEA9oW32q72yUk5unWe3qwLpAf /YSsC8wlLhBhDQooV0V3YhNmL4K8ZANjhsBcOhEVYTI1QzzEyPIBFNO2ELkF99tD PEYEot8x5KlXgHQ5eekrsPyzFdcdAumEWflZbUISDXfB9wEDdOL8G26zjQYjxX4Z sG+r7suWkdLv6jqAGiGrOVNp/MHy/MOWLv7FlWkuBfPakYkSMuMjgG4fq8ljClgr 0sLEXTv4mmPb410iFQspabIKSzhULk0= -----END CERTIFICATE-----Generated at Thu Jul 10 11:41:50 2025 by rpki-client