$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38899f2d-2e9f-375f-9629-b927334f4e9a.roa File: 38899f2d-2e9f-375f-9629-b927334f4e9a.roa (raw, json) Hash identifier: PK9J/hDE92+H9+ygr6nen3ac6FKyR8a/bTVm2pjwiwU= Subject key identifier: 8F:DD:F6:47:26:9E:B8:95:61:9F:FA:BA:2F:14:4F:3E:66:D5:01:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EA798FDDE48419E4A78D4B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38899f2d-2e9f-375f-9629-b927334f4e9a.roa Signing time: Tue 20 May 2025 12:37:55 +0000 ROA not before: Tue 20 May 2025 12:37:55 +0000 ROA not after: Mon 18 Aug 2025 12:37:55 +0000 asID: 36624 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:79:8f:dd:e4:84:19:e4:a7:8d:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 20 12:37:55 2025 GMT Not After : Aug 18 12:37:55 2025 GMT Subject: CN=6bf8c563-3900-47e5-be63-070cf51ef68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ae:24:ff:63:2b:9e:cc:26:78:0e:32:15:1a: 69:df:a8:89:d9:da:e4:6b:27:5f:ec:2e:75:d1:b8: ba:1e:18:78:a1:3f:7c:3b:48:68:f3:03:43:66:73: 50:d9:28:02:8a:98:a4:62:64:e6:4c:f5:e3:35:54: 91:41:5f:8b:df:32:eb:58:6b:22:a0:de:73:13:92: b9:09:5f:54:0a:85:af:f7:e5:3c:5f:bb:67:44:61: 86:7c:69:a1:ed:45:14:d5:57:9b:d7:77:35:ab:a9: e3:3c:72:12:6a:d8:6e:37:65:1b:9f:2f:93:28:92: 06:f5:5d:e0:c0:26:1f:3b:94:d4:30:18:cc:36:94: 16:a9:68:97:cd:df:9b:aa:12:7f:bb:1d:81:7e:19: 38:74:b0:ff:e2:6a:2e:91:a1:b6:bc:aa:00:07:37: 2a:5b:c3:fc:33:bf:e7:73:23:be:46:d9:08:bc:5b: c2:f6:e6:a6:2e:df:2e:51:72:52:f1:05:42:05:84: d4:61:15:c5:35:c6:61:84:8f:73:47:09:15:82:e2: 53:30:77:6a:fa:6f:29:26:05:14:55:f6:89:fa:aa: a5:91:f8:6f:de:48:e2:a1:0b:26:ac:d7:ea:db:cc: 72:07:46:3c:0f:3c:f8:da:81:59:4f:b6:65:05:23: 2e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DD:F6:47:26:9E:B8:95:61:9F:FA:BA:2F:14:4F:3E:66:D5:01:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38899f2d-2e9f-375f-9629-b927334f4e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:1b:96:56:10:d5:2b:da:fd:b4:78:bf:61:72:1b:13:52:f7: df:a7:06:bc:cc:71:64:9a:98:63:dc:8d:e8:79:60:df:a1:c3: ba:1a:65:c0:cf:5c:2d:87:aa:1f:c4:6b:6d:b5:06:fe:6a:6b: 04:cd:bd:18:3f:58:16:98:7f:92:ac:bd:65:20:6f:73:8b:a9: c8:42:37:d5:44:9b:85:52:63:0e:f2:34:17:33:91:98:a8:e5: d1:43:9e:21:33:88:52:fa:17:9b:18:58:8e:5d:42:f6:ed:70: dd:3f:7b:0f:94:df:75:5e:58:9c:c9:ae:ae:6d:bc:4e:e2:a4: 9b:05:3b:2d:21:ba:f7:58:3c:c6:6a:10:6a:45:9b:2b:1b:0a: e3:a8:af:68:56:f5:64:f4:e1:b8:67:f6:63:45:79:2f:61:b9: c1:3d:27:fb:2a:23:1f:d2:65:0d:15:11:b3:1f:54:a0:55:65: d4:cf:53:c1:43:34:26:87:23:48:97:05:fa:67:da:21:29:16: 6c:0c:20:ed:33:32:2e:79:9e:ec:0a:c4:88:c5:02:be:99:0b: e8:10:78:24:08:6c:fa:57:a5:fc:e5:9a:07:89:19:16:53:df: 32:40:fa:c7:6d:13:74:08:89:cc:a4:4f:94:f5:57:06:8b:fd: 88:4f:46:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqeY/d5IQZ5KeNS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMDEyMzc1NVoXDTI1MDgxODEyMzc1NVowLzEtMCsGA1UEAxMk NmJmOGM1NjMtMzkwMC00N2U1LWJlNjMtMDcwY2Y1MWVmNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq4k/2MrnswmeA4yFRpp36iJ2drkaydf7C51 0bi6Hhh4oT98O0ho8wNDZnNQ2SgCipikYmTmTPXjNVSRQV+L3zLrWGsioN5zE5K5 CV9UCoWv9+U8X7tnRGGGfGmh7UUU1Veb13c1q6njPHISathuN2Ubny+TKJIG9V3g wCYfO5TUMBjMNpQWqWiXzd+bqhJ/ux2Bfhk4dLD/4moukaG2vKoABzcqW8P8M7/n cyO+RtkIvFvC9uamLt8uUXJS8QVCBYTUYRXFNcZhhI9zRwkVguJTMHdq+m8pJgUU VfaJ+qqlkfhv3kjioQsmrNfq28xyB0Y8Dzz42oFZT7ZlBSMuQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/d9kcmnriVYZ/6ui8UTz5m1QFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzg4OTlmMmQtMmU5Zi0z NzVmLTk2MjktYjkyNzMzNGY0ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkbllYQ1Sva/bR4v2FyGxNS99+nBrzMcWSamGPcjeh5YN+hw7oaZcDP XC2Hqh/Ea221Bv5qawTNvRg/WBaYf5KsvWUgb3OLqchCN9VEm4VSYw7yNBczkZio 5dFDniEziFL6F5sYWI5dQvbtcN0/ew+U33VeWJzJrq5tvE7ipJsFOy0huvdYPMZq EGpFmysbCuOor2hW9WT04bhn9mNFeS9hucE9J/sqIx/SZQ0VEbMfVKBVZdTPU8FD NCaHI0iXBfpn2iEpFmwMIO0zMi55nuwKxIjFAr6ZC+gQeCQIbPpXpfzlmgeJGRZT 3zJA+sdtE3QIicykT5T1VwaL/YhPRhY= -----END CERTIFICATE-----Generated at Tue Jul 1 13:09:08 2025 by rpki-client