$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/deee08f5-0286-3b56-9c50-ec358a38a0cf.roa File: deee08f5-0286-3b56-9c50-ec358a38a0cf.roa (raw, json) Hash identifier: /oJ+d/PZnnFYaZH8R9rxuL1tdcGFFSNi332+PL05KXI= Subject key identifier: FC:20:70:49:6E:ED:7F:16:DA:2E:FE:94:9A:B2:99:5D:FD:37:0E:C5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A3844B9B463A2A27C2A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/deee08f5-0286-3b56-9c50-ec358a38a0cf.roa Signing time: Tue 01 Jul 2025 14:11:18 +0000 ROA not before: Tue 01 Jul 2025 14:11:18 +0000 ROA not after: Mon 29 Sep 2025 14:11:18 +0000 asID: 397199 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a3:84:4b:9b:46:3a:2a:27:c2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:18 2025 GMT Not After : Sep 29 14:11:18 2025 GMT Subject: CN=e57ee4f0-9778-4110-8c49-508b9d325046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:41:16:cc:49:00:11:00:03:6c:88:f2:4a:a0: c2:b8:57:53:61:01:fe:79:55:61:23:05:43:db:07: 75:d9:36:61:e9:90:00:4b:63:d6:01:8f:3c:3e:be: f6:d8:4d:78:fe:ee:09:3e:5d:9b:3e:4f:db:2d:9f: da:63:f5:13:35:03:88:d8:dd:40:c9:37:c0:b8:46: bd:09:b9:73:3b:6f:09:2b:16:8c:b2:68:5e:9a:21: e4:d2:21:a7:7b:97:63:08:77:8c:29:52:22:b1:10: 83:86:34:fc:b5:af:76:c7:d6:f2:0b:45:f5:06:96: 0b:58:d5:dc:66:ad:c2:85:e1:a3:43:38:fe:50:da: 2b:16:df:26:94:2a:15:37:7a:11:11:26:48:34:82: 51:0f:6e:ac:55:ce:16:5c:28:f4:3f:7e:d3:7f:de: e6:30:1f:f3:91:72:23:a2:1d:8b:56:e6:a9:8d:c7: 01:b2:16:c0:62:a8:13:81:fe:79:86:5b:ae:74:2e: 9a:c8:3e:28:d9:c9:f6:a8:f8:c9:57:89:3f:96:47: fe:d9:d1:6e:b4:5d:fa:a5:f9:9b:4d:f1:c1:43:c4: c4:e5:ae:1a:d6:69:79:9f:b3:33:03:4b:d1:df:12: 80:5d:f3:5b:57:7a:bc:4c:0e:35:2c:9c:87:fb:11: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:20:70:49:6E:ED:7F:16:DA:2E:FE:94:9A:B2:99:5D:FD:37:0E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/deee08f5-0286-3b56-9c50-ec358a38a0cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:35:ce:18:0d:92:4c:6b:3e:d7:93:bf:8b:fa:f8:4e:73:23: 1e:59:cc:05:82:68:05:f7:0b:3d:92:8d:3d:27:8a:62:7d:f0: 56:01:f1:50:eb:a0:52:53:9a:73:91:30:60:1c:d8:e4:f4:e3: 1a:9f:41:33:4e:42:a0:1e:11:bf:e9:c2:6e:d5:ed:55:95:99: b1:74:ea:e4:94:d7:c4:95:8f:d5:2d:3d:13:39:e0:55:8e:cf: 96:31:1e:52:51:60:0c:54:d2:1b:ae:e7:75:15:32:c1:c2:13: 54:e7:c6:22:cf:83:45:61:87:ca:e0:10:d8:95:05:80:f2:7b: 57:d2:28:23:47:dd:f8:9d:80:27:14:45:eb:e6:e2:e9:26:94: 9d:26:fa:da:8d:cf:5a:8c:59:17:7a:33:3c:da:3d:f7:fd:6f: e6:3c:33:60:b3:b3:9f:77:22:56:b1:c7:43:95:84:57:41:43: 58:27:93:e3:5f:0b:d6:aa:8d:77:09:d5:9b:51:96:fd:27:30: 68:ea:b4:bb:5d:f3:9a:1c:b1:83:b8:a9:4f:78:c8:80:ff:f7: 11:23:e7:9b:66:8c:34:4e:ba:a5:68:24:2f:d5:22:d0:b5:44: e5:7f:4f:36:90:c4:44:86:d3:10:8d:3a:9c:89:0d:c7:40:e8: 97:a7:4a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KOES5tGOionwqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTExOFoXDTI1MDkyOTE0MTExOFowLzEtMCsGA1UEAxMk ZTU3ZWU0ZjAtOTc3OC00MTEwLThjNDktNTA4YjlkMzI1MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikEWzEkAEQADbIjySqDCuFdTYQH+eVVhIwVD 2wd12TZh6ZAAS2PWAY88Pr722E14/u4JPl2bPk/bLZ/aY/UTNQOI2N1AyTfAuEa9 CblzO28JKxaMsmhemiHk0iGne5djCHeMKVIisRCDhjT8ta92x9byC0X1BpYLWNXc Zq3CheGjQzj+UNorFt8mlCoVN3oRESZINIJRD26sVc4WXCj0P37Tf97mMB/zkXIj oh2LVuapjccBshbAYqgTgf55hluudC6ayD4o2cn2qPjJV4k/lkf+2dFutF36pfmb TfHBQ8TE5a4a1ml5n7MzA0vR3xKAXfNbV3q8TA41LJyH+xFqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwgcElu7X8W2i7+lJqymV39Nw7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGVlZTA4ZjUtMDI4Ni0z YjU2LTljNTAtZWMzNThhMzhhMGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU1zhgNkkxrPteTv4v6+E5zIx5ZzAWCaAX3Cz2SjT0nimJ98FYB8VDr oFJTmnORMGAc2OT04xqfQTNOQqAeEb/pwm7V7VWVmbF06uSU18SVj9UtPRM54FWO z5YxHlJRYAxU0huu53UVMsHCE1TnxiLPg0Vhh8rgENiVBYDye1fSKCNH3fidgCcU Revm4ukmlJ0m+tqNz1qMWRd6MzzaPff9b+Y8M2Czs593Ilaxx0OVhFdBQ1gnk+Nf C9aqjXcJ1ZtRlv0nMGjqtLtd85ocsYO4qU94yID/9xEj55tmjDROuqVoJC/VItC1 ROV/TzaQxESG0xCNOpyJDcdA6JenSoI= -----END CERTIFICATE-----Generated at Thu Jul 10 04:44:43 2025 by rpki-client