$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a05170c-215a-3104-a10e-a538fa667cc5.roa File: 0a05170c-215a-3104-a10e-a538fa667cc5.roa (raw, json) Hash identifier: J20l8Uu+ORstro+pa/+/Jjag1WBy3NVABC+n0CfiE8w= Subject key identifier: 8E:AF:18:B7:ED:62:22:E3:53:71:97:07:0C:97:78:1B:B1:AA:32:4B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1E2AC8135A2375DE1AFE6640 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a05170c-215a-3104-a10e-a538fa667cc5.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 397209 IP address blocks: 192.42.176.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:c8:13:5a:23:75:de:1a:fe:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=a68914e6-69b9-42a1-af94-2fc85abd0390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cf:cf:97:c8:16:37:a5:5f:74:2b:bf:58:00: 10:1f:ff:63:83:e4:ce:f9:8b:6a:8f:a2:7c:3c:d8: 35:b5:16:56:03:36:38:ad:cd:d6:c7:08:c9:25:39: a3:c2:71:30:6a:1c:99:24:96:63:2d:4e:d5:c2:79: 22:9a:66:13:06:0d:2c:04:d0:c4:81:23:9c:81:e3: 6e:86:0b:76:8b:71:c2:31:3b:1b:b9:e3:7d:5a:aa: 15:c8:4a:2c:97:9a:3a:6d:39:09:57:cd:ac:6e:06: f5:1d:00:97:3b:ac:48:12:5e:06:67:03:23:4d:8c: aa:1e:8b:5f:bd:86:ad:00:b1:58:89:10:0f:dc:b2: 5f:75:56:9c:cc:6a:19:30:01:fe:7d:b9:6b:59:16: 2e:1a:35:8d:e6:69:3c:2c:8e:c6:f3:93:a6:cc:ae: b1:a2:c0:0a:13:69:f9:57:3d:82:2b:75:38:08:8a: 6f:11:a9:f7:14:a4:67:e7:3d:f0:6c:00:73:97:9a: ba:e6:e2:81:a7:35:2a:dd:53:bd:ef:40:9b:e6:2b: bd:8b:28:7e:d7:de:19:b1:c6:89:57:a6:23:0c:93: fa:a6:b9:e0:18:7f:bd:7d:72:4e:f8:9c:93:e3:af: a5:c0:1c:77:18:e0:6c:dc:8f:bd:1d:ab:35:44:09: 9c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AF:18:B7:ED:62:22:E3:53:71:97:07:0C:97:78:1B:B1:AA:32:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a05170c-215a-3104-a10e-a538fa667cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:95:c3:eb:83:45:79:c9:d8:b9:f6:b8:d2:24:27:84:5e:9e: 70:20:8c:a3:48:83:96:1b:28:62:a5:db:3d:59:8f:11:6e:72: 09:0d:5a:3f:a6:ef:44:3f:f4:b7:ad:f7:46:86:d6:10:76:fc: 91:d1:ea:ba:fa:a2:1b:48:99:d6:7e:1d:ab:02:d2:d0:b9:f4: bd:26:bd:ab:69:3d:32:b6:81:c9:9f:04:b6:58:84:d0:88:f4: 1a:00:5d:e0:42:45:13:97:05:9e:95:81:f0:73:78:e2:5b:1a: 4a:51:43:9e:20:78:ba:a8:39:55:e9:49:13:cd:d1:f0:0e:4d: 41:cb:30:b6:67:36:bb:65:bf:71:1a:d8:7b:dd:88:9b:97:87: d8:1d:af:32:86:76:4e:86:f0:88:0b:7f:86:b5:25:c8:d9:6b: bb:c5:cd:9c:63:21:0d:b3:de:f1:fc:36:09:93:5e:a1:2c:c2: e2:90:38:da:85:e3:83:0e:1a:24:40:4f:13:9a:31:e3:d6:dc: f1:f2:3c:d7:4e:08:29:90:1b:46:d6:f0:40:72:ea:52:da:15: 0b:5e:01:53:f2:99:0a:32:3f:d7:e2:61:be:a9:fc:7d:b1:19: 0c:07:b5:c2:86:47:c4:06:e9:7a:ab:0b:93:83:0f:48:e9:1c: 51:be:1d:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoeKsgTWiN13hr+ZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk YTY4OTE0ZTYtNjliOS00MmExLWFmOTQtMmZjODVhYmQwMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc/Pl8gWN6VfdCu/WAAQH/9jg+TO+Ytqj6J8 PNg1tRZWAzY4rc3WxwjJJTmjwnEwahyZJJZjLU7VwnkimmYTBg0sBNDEgSOcgeNu hgt2i3HCMTsbueN9WqoVyEosl5o6bTkJV82sbgb1HQCXO6xIEl4GZwMjTYyqHotf vYatALFYiRAP3LJfdVaczGoZMAH+fblrWRYuGjWN5mk8LI7G85OmzK6xosAKE2n5 Vz2CK3U4CIpvEan3FKRn5z3wbABzl5q65uKBpzUq3VO970Cb5iu9iyh+194ZscaJ V6YjDJP6prngGH+9fXJO+JyT46+lwBx3GOBs3I+9Has1RAmcMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI6vGLftYiLjU3GXBwyXeBuxqjJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGEwNTE3MGMtMjE1YS0z MTA0LWExMGUtYTUzOGZhNjY3Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFlcPrg0V5ydi59rjSJCeEXp5wIIyjSIOWGyhipds9WY8RbnIJDVo/ pu9EP/S3rfdGhtYQdvyR0eq6+qIbSJnWfh2rAtLQufS9Jr2raT0ytoHJnwS2WITQ iPQaAF3gQkUTlwWelYHwc3jiWxpKUUOeIHi6qDlV6UkTzdHwDk1ByzC2Zza7Zb9x Gth73Yibl4fYHa8yhnZOhvCIC3+GtSXI2Wu7xc2cYyENs97x/DYJk16hLMLikDja heODDhokQE8TmjHj1tzx8jzXTggpkBtG1vBAcupS2hULXgFT8pkKMj/X4mG+qfx9 sRkMB7XChkfEBul6qwuTgw9I6RxRvh3J -----END CERTIFICATE-----Generated at Mon Jun 30 11:32:17 2025 by rpki-client