$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bc11056-57b0-362a-be8b-de35ecb2efc7.roa File: 1bc11056-57b0-362a-be8b-de35ecb2efc7.roa (raw, json) Hash identifier: OK2fHqvchJEIwvyQIZkFA3MwfSdZ028AbSeTZc6y+T4= Subject key identifier: E3:80:EE:1F:52:7B:93:7A:68:8F:67:6C:5B:76:BC:8B:4C:B1:92:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C2D557407BF0C6D8EAD3400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bc11056-57b0-362a-be8b-de35ecb2efc7.roa Signing time: Tue 24 Jun 2025 12:33:32 +0000 ROA not before: Tue 24 Jun 2025 12:33:32 +0000 ROA not after: Mon 22 Sep 2025 12:33:32 +0000 asID: 397197 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:2d:55:74:07:bf:0c:6d:8e:ad:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 12:33:32 2025 GMT Not After : Sep 22 12:33:32 2025 GMT Subject: CN=f3cdd172-3332-4922-9c8a-d51fa1908f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e5:39:d2:3a:20:ce:37:dd:0a:77:0b:d5:e4: 6d:1d:b6:0e:ee:b2:fa:00:3e:37:3d:7e:9a:68:17: 12:f0:e8:05:88:32:2a:d1:3a:1a:09:83:f9:44:ee: eb:91:72:8c:a7:69:03:f4:a2:d2:13:93:b5:ec:6f: dc:d3:e1:27:01:f3:de:af:ae:79:bd:61:aa:cd:4d: 12:f9:bd:5b:c9:64:f7:a5:9d:02:68:75:43:75:ee: 66:07:90:12:1b:2a:e1:1d:ed:66:11:83:b9:16:a3: 57:14:98:13:45:69:9a:ff:c5:f1:f7:f3:34:1a:e3: 92:17:d1:ba:ac:91:63:15:9a:c8:d1:b0:06:9a:30: d3:63:8d:92:07:c3:52:14:16:af:7b:a6:4e:17:9c: 49:40:ea:ea:4e:0e:9b:fb:8e:14:29:4d:b2:2b:15: 7a:6f:cf:1d:9a:49:46:23:22:a7:58:65:be:40:bf: 4d:12:28:c8:1e:cc:42:87:e3:36:38:34:da:ba:11: 76:32:c6:e7:b2:94:44:07:d3:18:6c:05:f6:86:9f: f4:b2:90:9c:29:ad:7b:bc:ee:ed:62:cb:35:a2:c3: 2d:6b:9a:a2:ec:c8:2d:5a:75:c8:57:0d:67:6f:ec: c2:40:4b:da:68:3e:b3:25:b5:fe:40:eb:38:0a:b2: 2b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:80:EE:1F:52:7B:93:7A:68:8F:67:6C:5B:76:BC:8B:4C:B1:92:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bc11056-57b0-362a-be8b-de35ecb2efc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:aa:aa:f5:21:6a:48:64:67:21:40:e1:e6:cf:9b:5b:28:65: 4d:55:9a:d3:6c:d4:6e:a8:10:54:7d:76:38:cd:dd:0d:d8:b0: 05:5c:a1:4e:a7:4b:44:87:79:87:1a:57:59:93:7b:83:a1:0c: ad:e0:5c:86:6c:a4:cc:81:4f:72:88:5d:d2:6d:2f:52:5f:42: 59:4f:80:ad:41:ae:d1:b1:a5:a2:2e:54:c1:30:4d:ab:15:4e: 19:56:e2:35:1c:16:5e:ef:4f:c0:82:98:fe:98:82:5f:b3:b8: df:14:bf:2d:da:d5:3c:44:2d:23:36:95:22:60:1f:c4:b0:c7: 10:cb:65:83:9a:24:e0:3d:da:80:54:3d:97:b0:2b:46:79:a5: 7d:76:ce:09:64:ef:f8:43:19:aa:b4:2e:7b:90:fc:d6:88:02: 25:d1:1e:11:23:ac:f0:82:3c:a7:13:35:cf:54:f9:54:fb:4e: de:3c:f1:e7:96:89:49:96:21:33:e2:e1:68:f4:18:7e:ca:d7: 93:e3:e1:ac:a3:f7:2e:78:22:3f:3e:31:ca:60:a1:6f:35:51: 33:ae:82:86:75:a0:58:08:7c:8a:12:a7:07:cb:3c:b6:2c:01: 2f:56:8f:69:8a:99:e1:48:73:86:9f:8b:91:93:8e:91:1a:aa: 49:31:c7:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMLVV0B78MbY6tNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEyMzMzMloXDTI1MDkyMjEyMzMzMlowLzEtMCsGA1UEAxMk ZjNjZGQxNzItMzMzMi00OTIyLTljOGEtZDUxZmExOTA4ZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleU50jogzjfdCncL1eRtHbYO7rL6AD43PX6a aBcS8OgFiDIq0ToaCYP5RO7rkXKMp2kD9KLSE5O17G/c0+EnAfPer655vWGqzU0S +b1byWT3pZ0CaHVDde5mB5ASGyrhHe1mEYO5FqNXFJgTRWma/8Xx9/M0GuOSF9G6 rJFjFZrI0bAGmjDTY42SB8NSFBave6ZOF5xJQOrqTg6b+44UKU2yKxV6b88dmklG IyKnWGW+QL9NEijIHsxCh+M2ODTauhF2MsbnspREB9MYbAX2hp/0spCcKa17vO7t Yss1osMta5qi7MgtWnXIVw1nb+zCQEvaaD6zJbX+QOs4CrIryQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOA7h9Se5N6aI9nbFt2vItMsZL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWJjMTEwNTYtNTdiMC0z NjJhLWJlOGItZGUzNWVjYjJlZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6qqvUhakhkZyFA4ebPm1soZU1VmtNs1G6oEFR9djjN3Q3YsAVcoU6n S0SHeYcaV1mTe4OhDK3gXIZspMyBT3KIXdJtL1JfQllPgK1BrtGxpaIuVMEwTasV ThlW4jUcFl7vT8CCmP6Ygl+zuN8Uvy3a1TxELSM2lSJgH8SwxxDLZYOaJOA92oBU PZewK0Z5pX12zglk7/hDGaq0LnuQ/NaIAiXRHhEjrPCCPKcTNc9U+VT7Tt488eeW iUmWITPi4Wj0GH7K15Pj4ayj9y54Ij8+McpgoW81UTOugoZ1oFgIfIoSpwfLPLYs AS9Wj2mKmeFIc4afi5GTjpEaqkkxx+U= -----END CERTIFICATE-----Generated at Tue Jul 1 07:12:19 2025 by rpki-client