$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec7d6870-030f-3c2e-8b7b-25d1b6646daa.roa File: ec7d6870-030f-3c2e-8b7b-25d1b6646daa.roa (raw, json) Hash identifier: 8Bfd1LfT4oTqrD4VeaTes/7h+w54irMa+veT/kbfcn4= Subject key identifier: 49:47:5D:A8:A9:F6:83:77:66:25:33:B6:92:5F:F1:1A:16:EC:40:C2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8AA20BDA7F1570B0B2D40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec7d6870-030f-3c2e-8b7b-25d1b6646daa.roa Signing time: Tue 01 Jul 2025 14:11:21 +0000 ROA not before: Tue 01 Jul 2025 14:11:21 +0000 ROA not after: Mon 29 Sep 2025 14:11:21 +0000 asID: 396578 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:aa:20:bd:a7:f1:57:0b:0b:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:21 2025 GMT Not After : Sep 29 14:11:21 2025 GMT Subject: CN=33cfb190-bd19-4a0d-87eb-ebca6373b89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a1:19:18:0b:58:6c:a7:16:5b:1c:af:99:50: 54:18:66:7f:c7:ab:98:b2:71:67:22:e1:56:a0:6a: c5:49:62:34:0d:e4:9b:fb:97:01:07:25:e3:0a:6f: 9a:4e:45:c8:1b:9f:f8:b7:37:b6:75:16:51:e4:03: 94:af:e3:b5:ea:5a:0c:fb:d6:53:03:97:9e:9d:0d: be:13:90:8f:95:cc:6d:dc:33:1e:df:ba:3f:10:16: 7b:1c:e3:34:b9:ba:51:86:97:3c:d3:94:ba:5e:7e: 99:e6:55:ec:b7:a3:7b:e4:47:b1:b4:b2:48:bf:e4: 84:9d:f2:32:4a:d6:f4:09:33:da:b1:c6:50:97:64: cb:84:38:c3:19:1f:ef:44:16:e1:a0:db:21:97:b6: d5:cf:bd:eb:4d:05:b7:60:c1:8d:35:d5:c9:1e:79: 1e:29:55:7f:c0:24:88:ed:2d:90:9b:de:d5:80:2f: c2:16:0d:b3:73:9b:83:de:02:8c:c8:7f:e8:db:18: ad:86:34:ab:e9:89:29:82:9f:80:45:d6:f4:c0:7a: b9:d7:8c:72:c7:30:7a:69:2b:bb:5d:ec:bd:5f:a3: d1:13:96:b1:46:d6:8d:50:69:1c:31:4e:be:4f:67: 0d:c3:e5:9e:d1:20:53:a4:4a:be:59:f5:b8:fc:db: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:47:5D:A8:A9:F6:83:77:66:25:33:B6:92:5F:F1:1A:16:EC:40:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec7d6870-030f-3c2e-8b7b-25d1b6646daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:2f:4b:72:a6:61:d4:bb:a2:20:db:c0:bb:50:08:e6:c5:18: 3e:4c:8d:f3:7d:1c:88:35:94:30:e8:bc:d8:f0:9d:91:0a:c0: 60:22:cc:4e:cc:41:99:29:5e:12:7b:6e:ff:c5:c6:26:cd:27: 83:64:53:07:b1:f4:20:4d:7d:96:0f:97:83:5e:33:59:7b:fa: 6a:10:dd:63:7a:13:b6:d9:48:40:dd:b2:69:a5:61:1e:a4:c5: 0b:da:2d:be:48:33:97:6d:74:2d:95:fa:8b:de:5e:69:e7:f2: 21:6f:04:7a:1b:0c:e8:b1:d6:c6:42:a5:a1:b0:e3:af:4f:98: 66:16:9e:b6:10:a6:7a:8b:14:5d:0c:91:bc:d1:b9:3e:d1:45: 8a:77:d3:77:89:a8:15:eb:2c:43:0f:d5:47:e5:5c:dc:e4:91: aa:8e:0d:73:00:46:c1:50:bb:31:18:b9:13:37:ad:f3:2e:21: 6d:21:e6:63:f0:ef:55:1d:b2:fc:cc:00:49:b0:cb:c6:66:61: 33:da:d5:d2:26:1d:fc:55:4c:4e:82:be:11:77:3d:25:dd:1e: 2a:d4:8c:12:2d:f6:e9:a8:27:f7:9a:3a:0b:d2:4b:b2:84:ba: 47:d0:bd:f7:78:ac:01:0b:15:1a:d6:2f:50:de:c6:7d:bd:05: 44:01:df:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KogvafxVwsLLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTEyMVoXDTI1MDkyOTE0MTEyMVowLzEtMCsGA1UEAxMk MzNjZmIxOTAtYmQxOS00YTBkLTg3ZWItZWJjYTYzNzNiODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+aEZGAtYbKcWWxyvmVBUGGZ/x6uYsnFnIuFW oGrFSWI0DeSb+5cBByXjCm+aTkXIG5/4tze2dRZR5AOUr+O16loM+9ZTA5eenQ2+ E5CPlcxt3DMe37o/EBZ7HOM0ubpRhpc805S6Xn6Z5lXst6N75EextLJIv+SEnfIy Stb0CTPascZQl2TLhDjDGR/vRBbhoNshl7bVz73rTQW3YMGNNdXJHnkeKVV/wCSI 7S2Qm97VgC/CFg2zc5uD3gKMyH/o2xithjSr6Ykpgp+ARdb0wHq514xyxzB6aSu7 Xey9X6PRE5axRtaNUGkcMU6+T2cNw+We0SBTpEq+WfW4/NuJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElHXaip9oN3ZiUztpJf8RoW7EDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWM3ZDY4NzAtMDMwZi0z YzJlLThiN2ItMjVkMWI2NjQ2ZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMvS3KmYdS7oiDbwLtQCObFGD5MjfN9HIg1lDDovNjwnZEKwGAizE7M QZkpXhJ7bv/FxibNJ4NkUwex9CBNfZYPl4NeM1l7+moQ3WN6E7bZSEDdsmmlYR6k xQvaLb5IM5dtdC2V+oveXmnn8iFvBHobDOix1sZCpaGw469PmGYWnrYQpnqLFF0M kbzRuT7RRYp303eJqBXrLEMP1UflXNzkkaqODXMARsFQuzEYuRM3rfMuIW0h5mPw 71UdsvzMAEmwy8ZmYTPa1dImHfxVTE6CvhF3PSXdHirUjBIt9umoJ/eaOgvSS7KE ukfQvfd4rAELFRrWL1Dexn29BUQB3/4= -----END CERTIFICATE-----Generated at Thu Jul 10 04:26:46 2025 by rpki-client