$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cf76361-c717-3f95-b750-b7105243ef82.roa File: 3cf76361-c717-3f95-b750-b7105243ef82.roa (raw, json) Hash identifier: 0vTUAyLx9jeb4QZY0lOMIb8+qvifS/0EpRMCYecwnOg= Subject key identifier: 8D:3A:9B:AC:66:98:25:27:1C:49:E6:3B:34:DB:B6:BD:25:72:65:0B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AC9DBB4C6295B80F73FDA0500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cf76361-c717-3f95-b750-b7105243ef82.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 396582 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:b4:c6:29:5b:80:f7:3f:da:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=3e1ebfcd-e09d-4db7-9a2e-b3bb2cd3627f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:33:cb:c8:41:82:6b:7a:6c:8e:e0:b7:04:c5: 2b:f4:9c:66:4c:1a:cc:ba:2b:bb:d8:26:15:40:bb: 19:98:5c:88:d7:1c:a8:63:7b:be:39:57:07:81:a6: 69:e5:6c:9b:07:c9:ea:32:d7:50:5a:b6:83:78:c5: 62:91:63:ad:0e:e6:85:d8:5d:05:57:ed:1c:d2:98: 8e:90:d3:98:e8:ad:7b:d9:b5:bd:87:45:9f:e9:54: 80:f1:34:15:4e:92:24:9a:46:1a:f3:95:10:69:be: 8e:73:7b:c1:e7:31:0a:55:03:8f:62:30:d1:78:59: a7:ec:a6:1d:c2:0e:2c:65:58:b4:90:94:1b:0e:20: ab:92:6a:1b:a1:37:29:a5:64:b3:07:9c:ed:c1:aa: 08:75:23:9c:2d:dc:eb:34:4e:28:4b:72:4a:ce:c3: 6b:6c:1f:82:e5:87:1e:51:20:b0:f6:ef:5b:6f:de: c1:ef:21:99:21:88:be:3e:e7:12:1e:e8:a7:a8:76: 70:d3:96:7d:4c:e6:24:f9:4c:8e:c8:61:97:39:a7: 6a:df:20:bb:5d:4c:2b:ec:79:c0:f7:04:27:9e:da: f5:75:25:65:d5:d3:f0:42:eb:1f:d4:40:a7:8b:12: 39:db:8f:e5:57:ea:b1:3c:2f:88:ac:85:c4:aa:33: 7d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3A:9B:AC:66:98:25:27:1C:49:E6:3B:34:DB:B6:BD:25:72:65:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cf76361-c717-3f95-b750-b7105243ef82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:81:4b:21:d3:8d:54:05:91:cc:7e:43:e5:32:4c:3e:de:ff: b4:1a:0a:86:98:17:45:a6:5f:1c:3f:3e:da:f8:08:03:09:83: e9:08:8c:32:ce:f0:f2:a3:b3:81:0f:ac:0b:05:43:ee:2f:99: bd:ca:6c:0a:09:0e:e2:45:dd:48:47:94:95:38:bf:0a:af:e0: 2b:b0:58:ac:8f:c7:28:53:eb:40:69:65:cc:94:a2:05:78:90: f0:4e:8c:1d:81:24:b6:e4:7a:9d:e9:59:4d:59:2f:d2:2a:a6: 69:82:96:c1:28:0f:7f:13:0b:c9:cd:5e:dd:39:ed:57:c1:10: 84:c2:dc:f2:8d:18:df:0e:cf:b0:bf:01:80:03:dc:f4:8a:84: db:2d:f1:09:bb:85:04:0b:37:3c:b6:17:23:e8:00:36:66:94: 12:9e:4b:0a:ea:00:8c:1f:f2:25:10:89:20:1a:4c:f9:1a:ae: e8:d8:2a:57:63:a6:a4:e5:c7:47:58:db:a4:a6:80:98:13:9f: c7:e0:f9:3d:f4:9c:f2:2c:1d:37:5e:90:ab:cd:84:71:ed:87: 57:3c:ff:4d:f7:84:04:aa:3d:7a:de:75:ed:e6:74:d5:6a:19: 38:c6:3b:9b:10:92:62:91:ec:97:4a:82:84:4f:56:43:00:07: da:5d:f5:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27TGKVuA9z/aBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk M2UxZWJmY2QtZTA5ZC00ZGI3LTlhMmUtYjNiYjJjZDM2MjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizPLyEGCa3psjuC3BMUr9JxmTBrMuiu72CYV QLsZmFyI1xyoY3u+OVcHgaZp5WybB8nqMtdQWraDeMVikWOtDuaF2F0FV+0c0piO kNOY6K172bW9h0Wf6VSA8TQVTpIkmkYa85UQab6Oc3vB5zEKVQOPYjDReFmn7KYd wg4sZVi0kJQbDiCrkmoboTcppWSzB5ztwaoIdSOcLdzrNE4oS3JKzsNrbB+C5Yce USCw9u9bb97B7yGZIYi+PucSHuinqHZw05Z9TOYk+UyOyGGXOadq3yC7XUwr7HnA 9wQnntr1dSVl1dPwQusf1ECnixI524/lV+qxPC+IrIXEqjN9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI06m6xmmCUnHEnmOzTbtr0lcmULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2NmNzYzNjEtYzcxNy0z Zjk1LWI3NTAtYjcxMDUyNDNlZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiBSyHTjVQFkcx+Q+UyTD7e/7QaCoaYF0WmXxw/Ptr4CAMJg+kIjDLO 8PKjs4EPrAsFQ+4vmb3KbAoJDuJF3UhHlJU4vwqv4CuwWKyPxyhT60BpZcyUogV4 kPBOjB2BJLbkep3pWU1ZL9IqpmmClsEoD38TC8nNXt057VfBEITC3PKNGN8Oz7C/ AYAD3PSKhNst8Qm7hQQLNzy2FyPoADZmlBKeSwrqAIwf8iUQiSAaTPkarujYKldj pqTlx0dY26SmgJgTn8fg+T30nPIsHTdekKvNhHHth1c8/033hASqPXrede3mdNVq GTjGO5sQkmKR7JdKgoRPVkMAB9pd9f0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:13:37 2025 by rpki-client