$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c0c31a6-465c-3a07-a07e-b3c75af5a994.roa File: 2c0c31a6-465c-3a07-a07e-b3c75af5a994.roa (raw, json) Hash identifier: FHk9ODl0iSnCPXC49YqXDY8EKYKZJ935R1TzWW3lgqg= Subject key identifier: E7:3E:A7:97:08:C0:F9:91:AB:A2:20:40:7E:D0:FA:5F:37:CB:37:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AC9DBBA76C18D7427243836C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c0c31a6-465c-3a07-a07e-b3c75af5a994.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 396606 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:ba:76:c1:8d:74:27:24:38:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=a0c98f30-9812-4fe2-99d0-484cedfe7eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3e:98:cd:f4:36:13:1d:ae:5b:03:f2:45:2b: da:6f:f1:c2:93:16:0a:01:1b:46:22:53:56:e5:d0: ea:b4:6d:9a:47:04:96:e2:da:5f:a2:6c:20:c5:8a: ed:c9:84:13:2d:fa:83:09:e5:02:80:2f:f7:22:ef: 29:41:5a:f7:4d:e8:2f:b4:f6:6d:bb:7e:9d:0a:b8: eb:58:f7:1b:e7:24:89:c4:82:fd:cd:2c:15:1a:31: d1:82:2b:b9:f1:ed:6f:b5:51:2d:4d:65:e0:22:29: 76:93:39:ae:66:70:25:3d:51:02:ad:3b:53:1d:ee: b9:a0:d7:2b:67:1d:99:89:f5:c6:34:15:50:98:d8: 89:05:cc:40:5e:8e:82:cc:35:41:94:67:ce:bf:33: 30:4f:78:ed:f8:b3:5b:88:64:0d:e0:7d:ab:8e:cb: df:68:76:51:b7:53:b9:49:8f:19:4d:10:a6:3c:74: 31:35:8e:c4:c0:b9:de:a9:52:14:86:41:02:33:0b: 07:08:33:04:27:3b:69:f4:22:7a:89:8b:d4:e4:de: 39:19:57:79:3d:50:16:4b:97:88:1b:c2:d1:b7:40: 0c:59:1a:da:0c:60:1e:76:01:51:96:b8:3a:ce:84: 45:00:a9:25:69:af:04:5f:c2:15:c7:1e:d1:d9:44: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3E:A7:97:08:C0:F9:91:AB:A2:20:40:7E:D0:FA:5F:37:CB:37:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c0c31a6-465c-3a07-a07e-b3c75af5a994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:92:b0:d0:5d:c5:ed:fb:39:38:3b:60:5e:07:96:18:39:32: 4c:35:72:f6:c4:2f:65:42:36:cb:0c:fd:13:74:ca:9f:95:95: 56:81:27:5c:4b:1f:f3:da:87:fc:8c:a3:49:3d:6f:5e:47:bf: cb:de:d9:dd:c8:49:74:e4:0a:af:d8:cb:18:d9:56:89:7c:4e: a2:a7:6f:f6:2b:aa:68:b0:27:bc:92:80:6c:d5:ca:81:99:f0: 85:0d:ac:8e:08:11:49:fe:15:19:45:9c:91:bf:22:35:28:5f: c7:31:ec:2a:53:fb:88:b7:ea:db:9a:22:b2:19:6f:f8:7f:35: fb:96:b5:13:64:a8:1c:86:40:a0:ee:05:4d:46:3c:58:ac:25: ef:d7:71:a2:1f:ca:96:c1:c0:65:46:f1:0f:dd:ed:eb:1f:b0: ff:c9:60:34:ac:c9:66:2c:f5:a1:d6:e1:c0:cd:59:6f:a1:bd: b3:2b:0b:39:8e:2a:b5:cc:f7:63:75:a6:2a:a1:a7:f3:a6:10: f5:4a:93:9c:d9:7b:2f:55:98:44:25:59:e5:46:0c:52:b5:b6: 6c:35:5d:02:8f:d8:e8:8b:9f:23:8f:7a:79:cc:c3:6b:9f:d7: 2c:5c:d7:5b:cd:2c:51:03:74:79:ad:bc:c9:a8:47:f8:d9:e3: cd:d3:2f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27p2wY10JyQ4NsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YTBjOThmMzAtOTgxMi00ZmUyLTk5ZDAtNDg0Y2VkZmU3ZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z6YzfQ2Ex2uWwPyRSvab/HCkxYKARtGIlNW 5dDqtG2aRwSW4tpfomwgxYrtyYQTLfqDCeUCgC/3Iu8pQVr3TegvtPZtu36dCrjr WPcb5ySJxIL9zSwVGjHRgiu58e1vtVEtTWXgIil2kzmuZnAlPVECrTtTHe65oNcr Zx2ZifXGNBVQmNiJBcxAXo6CzDVBlGfOvzMwT3jt+LNbiGQN4H2rjsvfaHZRt1O5 SY8ZTRCmPHQxNY7EwLneqVIUhkECMwsHCDMEJztp9CJ6iYvU5N45GVd5PVAWS5eI G8LRt0AMWRraDGAedgFRlrg6zoRFAKklaa8EX8IVxx7R2UQdfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc+p5cIwPmRq6IgQH7Q+l83yzdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmMwYzMxYTYtNDY1Yy0z YTA3LWEwN2UtYjNjNzVhZjVhOTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGSsNBdxe37OTg7YF4Hlhg5Mkw1cvbEL2VCNssM/RN0yp+VlVaBJ1xL H/Pah/yMo0k9b15Hv8ve2d3ISXTkCq/YyxjZVol8TqKnb/YrqmiwJ7ySgGzVyoGZ 8IUNrI4IEUn+FRlFnJG/IjUoX8cx7CpT+4i36tuaIrIZb/h/NfuWtRNkqByGQKDu BU1GPFisJe/XcaIfypbBwGVG8Q/d7esfsP/JYDSsyWYs9aHW4cDNWW+hvbMrCzmO KrXM92N1piqhp/OmEPVKk5zZey9VmEQlWeVGDFK1tmw1XQKP2OiLnyOPennMw2uf 1yxc11vNLFEDdHmtvMmoR/jZ483TL1A= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:15 2025 by rpki-client