$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e562d95f-2b64-373d-a7b8-77dacdbea0da.roa File: e562d95f-2b64-373d-a7b8-77dacdbea0da.roa (raw, json) Hash identifier: t5Sdn9xDBtINuG6AtKXFWjRr6Lqa++GyPq1RS31lzLQ= Subject key identifier: A5:87:71:A6:7F:18:B0:9F:B5:3D:8C:68:1D:7B:C3:85:76:01:EB:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A58266730F6A1E4DA8E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e562d95f-2b64-373d-a7b8-77dacdbea0da.roa Signing time: Tue 01 Jul 2025 14:11:19 +0000 ROA not before: Tue 01 Jul 2025 14:11:19 +0000 ROA not after: Mon 29 Sep 2025 14:11:19 +0000 asID: 36624 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a5:82:66:73:0f:6a:1e:4d:a8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:19 2025 GMT Not After : Sep 29 14:11:19 2025 GMT Subject: CN=8cdcafc6-3c12-41f0-882c-af938dbb91c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:80:fb:3e:7c:e8:90:7d:22:d2:cd:ae:ca:cf: 4b:2b:0c:6d:18:22:61:c8:03:25:a8:b5:d4:ac:04: c9:2a:b5:e9:99:00:13:d7:79:c1:eb:ea:50:83:63: 15:14:dc:07:18:2c:9d:be:b6:e8:a7:8d:6b:70:55: 12:ea:58:7b:8a:af:df:aa:c3:30:0e:53:a2:10:db: 27:69:65:95:c5:76:12:77:54:78:69:5f:29:55:b7: 56:1b:46:37:b6:a6:2d:be:e8:8e:b7:5d:2e:e4:89: 67:99:a9:51:69:96:95:d7:f0:11:75:1d:3f:75:4b: 08:29:88:11:0f:64:aa:94:95:fc:b1:e5:14:b6:dd: 55:84:35:96:02:18:1b:e1:db:32:0c:23:e8:b5:70: ed:8a:0f:6d:28:01:be:96:43:15:2b:be:51:c7:c2: e1:19:b9:1f:a7:90:52:69:28:51:20:f9:73:30:54: 3d:b6:d0:c4:80:8b:b1:77:42:f2:3b:2f:e1:03:5f: 03:59:c8:11:66:82:b5:9c:21:84:78:34:3a:a7:1f: a2:35:48:e7:8a:23:95:7f:00:7f:93:d0:a1:ed:5e: 18:cc:12:c7:4d:23:80:c5:26:73:62:d9:d4:58:eb: 8f:17:d1:4a:2e:6b:b8:06:2d:94:41:5e:14:e2:38: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:87:71:A6:7F:18:B0:9F:B5:3D:8C:68:1D:7B:C3:85:76:01:EB:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e562d95f-2b64-373d-a7b8-77dacdbea0da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:05:66:c1:c3:0e:8b:32:39:ca:9c:bf:53:bd:36:d1:f3:b0: c1:2c:89:b1:09:11:a3:b0:01:1a:a1:82:9a:77:d4:6f:67:c4: 90:60:df:29:09:0c:eb:31:cd:fe:f5:63:61:d6:49:32:6a:30: 90:ee:ae:cc:be:79:37:67:5c:15:d2:1a:dd:09:9f:77:f6:3b: 21:71:d8:fe:04:22:a5:e4:2d:a0:0a:e0:57:35:fb:c5:ae:72: 5c:69:b7:ea:f1:99:31:e7:55:b6:ba:a9:b9:93:21:59:cf:29: ff:c2:90:e2:ef:21:bc:52:0f:0f:3e:4c:59:47:e8:0c:d3:3c: 07:ed:6d:c8:76:01:40:0e:48:b2:4c:2f:98:96:69:e6:bc:03: cc:4f:b4:e8:d0:c3:24:5c:7a:33:8d:82:a4:d0:33:17:e1:44: d4:46:fb:f1:f6:e8:51:ac:26:26:a2:59:ba:cf:29:a5:b4:b1: db:6e:ca:c6:65:ec:9b:f4:ef:ca:11:93:3e:fc:e3:b8:25:84: d4:7e:ee:8a:7d:b9:61:24:1b:3a:11:95:4c:f8:7d:9d:06:fe: 25:73:02:9d:21:a1:7a:03:8d:86:0a:a4:50:6a:db:21:05:86: cd:a9:38:b3:68:23:30:46:d9:a7:1c:ab:b0:d6:b6:b3:e2:a8: ab:fe:2a:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KWCZnMPah5NqOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTExOVoXDTI1MDkyOTE0MTExOVowLzEtMCsGA1UEAxMk OGNkY2FmYzYtM2MxMi00MWYwLTg4MmMtYWY5MzhkYmI5MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4D7PnzokH0i0s2uys9LKwxtGCJhyAMlqLXU rATJKrXpmQAT13nB6+pQg2MVFNwHGCydvrbop41rcFUS6lh7iq/fqsMwDlOiENsn aWWVxXYSd1R4aV8pVbdWG0Y3tqYtvuiOt10u5IlnmalRaZaV1/ARdR0/dUsIKYgR D2SqlJX8seUUtt1VhDWWAhgb4dsyDCPotXDtig9tKAG+lkMVK75Rx8LhGbkfp5BS aShRIPlzMFQ9ttDEgIuxd0LyOy/hA18DWcgRZoK1nCGEeDQ6px+iNUjniiOVfwB/ k9Ch7V4YzBLHTSOAxSZzYtnUWOuPF9FKLmu4Bi2UQV4U4jhx8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWHcaZ/GLCftT2MaB17w4V2AetlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTU2MmQ5NWYtMmI2NC0z NzNkLWE3YjgtNzdkYWNkYmVhMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0FZsHDDosyOcqcv1O9NtHzsMEsibEJEaOwARqhgpp31G9nxJBg3ykJ DOsxzf71Y2HWSTJqMJDursy+eTdnXBXSGt0Jn3f2OyFx2P4EIqXkLaAK4Fc1+8Wu clxpt+rxmTHnVba6qbmTIVnPKf/CkOLvIbxSDw8+TFlH6AzTPAftbch2AUAOSLJM L5iWaea8A8xPtOjQwyRcejONgqTQMxfhRNRG+/H26FGsJiaiWbrPKaW0sdtuysZl 7Jv078oRkz7847glhNR+7op9uWEkGzoRlUz4fZ0G/iVzAp0hoXoDjYYKpFBq2yEF hs2pOLNoIzBG2accq7DWtrPiqKv+KlE= -----END CERTIFICATE-----Generated at Thu Jul 10 04:00:39 2025 by rpki-client