$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f22830ce-27a4-3f8e-90ff-3f4e061b23a3.roa File: f22830ce-27a4-3f8e-90ff-3f4e061b23a3.roa (raw, json) Hash identifier: pnUJoNm0JEjvSIgRKDxMLV/mQDZB4KHKNlb3vQ7Y0to= Subject key identifier: E5:B5:78:E8:96:62:D0:83:CC:1B:93:E0:96:D9:93:C6:6E:D7:68:45 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FE8A78FBEABFE5B34425880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f22830ce-27a4-3f8e-90ff-3f4e061b23a3.roa Signing time: Tue 01 Jul 2025 14:11:20 +0000 ROA not before: Tue 01 Jul 2025 14:11:20 +0000 ROA not after: Mon 29 Sep 2025 14:11:20 +0000 asID: 396550 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e8:a7:8f:be:ab:fe:5b:34:42:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 14:11:20 2025 GMT Not After : Sep 29 14:11:20 2025 GMT Subject: CN=ea7b901e-fd52-425b-bc6e-4b39543ee057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d4:00:07:18:d4:d5:be:c0:de:9f:be:9b:c0: 45:84:a9:fc:a8:c3:03:32:f9:07:89:fd:fc:fd:ff: 01:f2:3d:04:f0:52:8a:5f:9e:13:6a:b0:c7:d0:c2: 4c:5b:59:7e:5f:19:6c:a9:48:b1:c5:24:55:53:5f: b9:ea:c1:c2:ca:54:43:43:28:fb:49:10:d6:36:7d: 2b:88:33:04:37:d4:4a:cc:4b:19:d2:7f:ce:88:ac: dc:47:d8:11:83:d5:1d:c3:32:af:3c:09:ae:5c:7c: a9:62:bf:c6:cc:02:4e:1f:97:8a:90:16:c9:e7:2a: 43:75:23:f4:dd:a6:2e:03:15:fc:8f:e4:fd:0a:a8: ca:bd:27:15:65:9a:17:03:6f:11:26:bf:a3:51:d7: 0d:39:68:b1:89:20:4e:dd:b9:85:0a:89:74:ea:d8: 32:4b:30:89:44:a6:7b:da:c8:7e:d6:5d:1c:46:89: a0:6d:e9:fd:a0:ee:93:23:bb:1a:60:10:c8:de:0a: 2d:30:51:38:e0:fc:3c:22:5b:c3:c0:2c:75:f0:37: 58:4d:8e:27:97:0d:f4:29:13:6c:0c:34:d7:83:26: 0e:2f:d1:69:97:e9:ba:fb:bd:08:31:ee:3b:68:df: 86:bd:24:b5:56:20:cf:d4:65:55:e6:b8:19:76:06: 9a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B5:78:E8:96:62:D0:83:CC:1B:93:E0:96:D9:93:C6:6E:D7:68:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f22830ce-27a4-3f8e-90ff-3f4e061b23a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b0:5f:2b:03:6c:b8:b9:5e:fb:90:ae:8d:63:50:4d:5a:f1: d0:b8:a0:7a:55:fc:73:5e:20:9d:5c:60:ba:70:29:d0:b1:05: 32:16:9c:77:14:5c:29:01:ae:05:23:18:81:ba:dc:1d:50:ba: 23:e5:62:d0:1d:95:55:3d:32:40:ff:36:97:95:a4:fd:89:b7: 7c:d4:38:86:dc:db:c1:8b:bd:a3:3c:24:b2:dd:cf:20:2f:7c: b3:cf:74:c1:66:65:93:17:70:81:d7:d8:7e:99:eb:5e:15:10: 53:65:0b:52:6b:28:7e:5d:e1:2c:25:e7:61:5e:ae:e1:bb:a5: b3:ba:32:d8:19:82:06:25:92:e5:35:41:f8:73:49:71:b0:86: da:91:57:97:20:5b:c9:01:90:73:34:06:aa:05:d5:7f:07:9a: c9:3b:f1:a4:73:84:d4:1f:67:d4:d8:98:41:55:c2:d4:ca:a1: ea:ae:99:22:e6:d0:bc:1e:32:63:be:31:9d:56:0a:b3:b6:2e: 12:49:cd:8e:49:52:b6:73:bb:63:40:ca:ee:36:1a:81:0f:6d: 44:62:99:d3:c1:88:ec:49:02:15:f3:93:f7:f5:49:48:93:8f: 86:89:44:cd:eb:95:33:9c:75:30:a3:64:a1:63:bf:d8:7e:96: 2b:eb:fe:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KePvqv+WzRCWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTE0MTEyMFoXDTI1MDkyOTE0MTEyMFowLzEtMCsGA1UEAxMk ZWE3YjkwMWUtZmQ1Mi00MjViLWJjNmUtNGIzOTU0M2VlMDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dQABxjU1b7A3p++m8BFhKn8qMMDMvkHif38 /f8B8j0E8FKKX54TarDH0MJMW1l+XxlsqUixxSRVU1+56sHCylRDQyj7SRDWNn0r iDMEN9RKzEsZ0n/OiKzcR9gRg9UdwzKvPAmuXHypYr/GzAJOH5eKkBbJ5ypDdSP0 3aYuAxX8j+T9CqjKvScVZZoXA28RJr+jUdcNOWixiSBO3bmFCol06tgySzCJRKZ7 2sh+1l0cRomgben9oO6TI7saYBDI3gotMFE44Pw8IlvDwCx18DdYTY4nlw30KRNs DDTXgyYOL9Fpl+m6+70IMe47aN+GvSS1ViDP1GVV5rgZdgaaJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW1eOiWYtCDzBuT4JbZk8Zu12hFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjIyODMwY2UtMjdhNC0z ZjhlLTkwZmYtM2Y0ZTA2MWIyM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2wXysDbLi5XvuQro1jUE1a8dC4oHpV/HNeIJ1cYLpwKdCxBTIWnHcU XCkBrgUjGIG63B1QuiPlYtAdlVU9MkD/NpeVpP2Jt3zUOIbc28GLvaM8JLLdzyAv fLPPdMFmZZMXcIHX2H6Z614VEFNlC1JrKH5d4Swl52FeruG7pbO6MtgZggYlkuU1 QfhzSXGwhtqRV5cgW8kBkHM0BqoF1X8Hmsk78aRzhNQfZ9TYmEFVwtTKoequmSLm 0LweMmO+MZ1WCrO2LhJJzY5JUrZzu2NAyu42GoEPbURimdPBiOxJAhXzk/f1SUiT j4aJRM3rlTOcdTCjZKFjv9h+livr/nM= -----END CERTIFICATE-----Generated at Thu Jul 10 12:25:21 2025 by rpki-client