$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/401489b8-0745-3b48-a01a-922c4d810f2e.roa File: 401489b8-0745-3b48-a01a-922c4d810f2e.roa (raw, json) Hash identifier: yaR1ZD7aMa4Vo7XwZ7QwkV7dDjlTRBcCSN5qQPTrz8Y= Subject key identifier: 93:68:18:BD:D3:28:12:8F:7E:16:EB:7E:29:26:37:9A:A5:BB:A0:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5335AFB26C663C542FB50AF4 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/401489b8-0745-3b48-a01a-922c4d810f2e.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 36624 IP address blocks: 192.42.174.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:af:b2:6c:66:3c:54:2f:b5:0a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=33da970c-015f-4628-be3e-a321d4bb3590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2b:27:b0:29:ae:3c:6e:e7:8a:77:b6:6a:cc: bb:9e:2c:31:86:b0:1f:12:95:fe:cf:05:01:24:0d: 22:9c:00:8a:c4:1a:5e:79:86:6b:44:89:57:6a:f4: b1:c3:5c:39:b8:03:d6:da:7b:47:2b:0d:00:62:56: a8:8d:0a:af:a5:a3:f2:8b:a2:5a:b6:df:61:02:16: 19:e8:2b:1b:00:de:40:5c:bc:30:c9:65:98:8a:09: 56:9d:37:5b:f4:0e:57:28:ee:7e:d8:a2:e1:f8:46: 54:77:e8:4f:d9:32:64:fe:98:59:54:14:59:d5:e4: 8c:a7:e1:75:67:7f:99:50:bc:f1:4e:e1:68:38:2e: 4f:d7:1d:4d:65:37:76:e0:26:58:5b:19:19:14:2f: 75:07:1c:f3:95:91:b6:dc:a5:2a:a7:c3:a7:a1:7d: 0e:3c:b8:2c:37:6c:46:0a:73:62:ad:e2:1b:51:cc: ad:ba:0c:9c:a0:6a:31:9f:29:38:ad:21:b7:51:ba: dc:bb:ee:60:3a:a3:2a:59:c5:53:02:73:58:b6:b4: b0:0c:17:db:81:e3:fc:2f:f6:31:c2:8f:8d:b7:c2: 1c:98:1e:e1:48:ab:2c:9c:05:e1:be:7c:4c:01:7b: 9e:67:d9:a2:38:27:0c:be:27:d9:f6:7c:13:17:e0: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:68:18:BD:D3:28:12:8F:7E:16:EB:7E:29:26:37:9A:A5:BB:A0:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/401489b8-0745-3b48-a01a-922c4d810f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:99:d0:09:7f:df:0c:5f:20:e4:f5:17:58:50:40:be:25:48: 96:ce:0c:bd:2b:e3:17:b9:58:a5:28:44:89:f6:74:a3:42:c9: 7a:9f:23:80:b5:37:75:82:61:9e:fc:ee:0f:62:55:ba:b2:f9: 64:24:60:90:4d:d2:c1:2c:48:af:e2:ff:54:af:8a:43:f8:c0: 2a:e3:f2:fe:58:f3:2a:5c:ef:b2:5c:7e:e5:23:5f:ba:1d:fd: 88:0f:83:c5:a8:7c:fa:90:8a:8a:e7:5f:a7:05:16:ba:28:66: 69:9b:16:ce:39:9e:9c:d0:bb:96:fb:01:fb:6b:1b:c4:2b:9b: cd:ea:a9:2d:83:48:b9:ee:a5:3b:7e:d8:bd:5f:d3:cb:f3:d2: 6a:76:30:a3:bd:c5:9c:ba:34:e4:f0:fa:2f:a2:be:db:13:5f: 4e:e3:cc:bf:6e:15:88:bf:36:9b:30:7d:2b:89:91:82:89:ba: e9:a7:87:07:3f:6c:e6:44:d2:7c:6b:b4:1f:47:66:47:bb:6b: 3d:e9:95:25:e0:bc:1c:1f:cb:26:a1:7a:4d:12:a2:8f:52:33: ec:d0:e8:9c:e4:33:63:44:90:2f:47:b6:13:71:53:79:a0:d7: 26:dd:bb:68:13:ed:c0:67:91:de:4f:64:a4:d9:90:df:c2:f4: d6:2e:0f:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpTNa+ybGY8VC+1CvQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk MzNkYTk3MGMtMDE1Zi00NjI4LWJlM2UtYTMyMWQ0YmIzNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCsnsCmuPG7nine2asy7niwxhrAfEpX+zwUB JA0inACKxBpeeYZrRIlXavSxw1w5uAPW2ntHKw0AYlaojQqvpaPyi6Jatt9hAhYZ 6CsbAN5AXLwwyWWYiglWnTdb9A5XKO5+2KLh+EZUd+hP2TJk/phZVBRZ1eSMp+F1 Z3+ZULzxTuFoOC5P1x1NZTd24CZYWxkZFC91BxzzlZG23KUqp8OnoX0OPLgsN2xG CnNireIbUcytugycoGoxnyk4rSG3Ubrcu+5gOqMqWcVTAnNYtrSwDBfbgeP8L/Yx wo+Nt8IcmB7hSKssnAXhvnxMAXueZ9miOCcMvifZ9nwTF+Ay5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJNoGL3TKBKPfhbrfikmN5qlu6BlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDAxNDg5YjgtMDc0NS0z YjQ4LWEwMWEtOTIyYzRkODEwZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCxmdAJf98MXyDk9RdYUEC+JUiWzgy9K+MXuVilKESJ9nSjQsl6nyOA tTd1gmGe/O4PYlW6svlkJGCQTdLBLEiv4v9Ur4pD+MAq4/L+WPMqXO+yXH7lI1+6 Hf2ID4PFqHz6kIqK51+nBRa6KGZpmxbOOZ6c0LuW+wH7axvEK5vN6qktg0i57qU7 fti9X9PL89JqdjCjvcWcujTk8Povor7bE19O48y/bhWIvzabMH0riZGCibrpp4cH P2zmRNJ8a7QfR2ZHu2s96ZUl4LwcH8smoXpNEqKPUjPs0Oic5DNjRJAvR7YTcVN5 oNcm3btoE+3AZ5HeT2Sk2ZDfwvTWLg8T -----END CERTIFICATE-----Generated at Mon Jun 30 11:27:44 2025 by rpki-client