$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41991d5a-ca7f-3760-b7ed-c191f8e389a5.roa File: 41991d5a-ca7f-3760-b7ed-c191f8e389a5.roa (raw, json) Hash identifier: gKjnZf/dZp0KmTw6RGPvK/y/7deRFhHKg7Up++gWwy0= Subject key identifier: 9C:C0:FD:FF:3D:23:DA:30:17:83:D5:DE:B3:6B:CB:B4:0B:9E:9D:AA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C2D54C603A77A3C87045800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41991d5a-ca7f-3760-b7ed-c191f8e389a5.roa Signing time: Tue 24 Jun 2025 12:33:32 +0000 ROA not before: Tue 24 Jun 2025 12:33:32 +0000 ROA not after: Mon 22 Sep 2025 12:33:32 +0000 asID: 397198 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:2d:54:c6:03:a7:7a:3c:87:04:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 12:33:32 2025 GMT Not After : Sep 22 12:33:32 2025 GMT Subject: CN=076c1bb4-d5a2-48df-be44-07d6e9d6c397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6a:25:c9:8c:bc:46:5d:c1:87:8b:e9:a5:2e: 12:ef:05:b3:cc:e1:7b:5a:96:ec:b5:a7:d0:23:12: 45:9c:d9:d4:81:5a:39:2d:19:94:a4:bd:40:7f:1b: ea:a4:c8:99:c7:9c:b8:b8:96:b7:de:43:56:49:1e: 19:63:11:fc:9d:40:7a:6a:87:21:7c:63:be:45:b8: 86:7e:7d:d2:91:0f:a3:7a:d8:58:80:69:b0:c1:8c: e9:eb:3c:b0:63:19:3e:ae:62:3b:fd:26:8e:ee:77: 8b:6c:50:70:ce:36:47:75:4e:25:e0:04:21:5c:de: e6:4b:d7:84:bf:c7:8f:49:31:20:e2:45:2d:e3:78: 22:e3:89:e8:a5:e2:fc:19:9d:e6:12:9b:af:f8:83: 67:9b:eb:f2:72:ad:f1:36:cb:2b:39:b6:64:19:a7: d9:8a:f8:06:50:17:56:14:62:81:33:1f:d9:55:20: c2:70:7d:36:af:49:8b:34:83:e6:18:8e:39:8d:b0: 8c:76:63:8a:6c:df:90:b4:a4:e2:3b:bd:da:1f:4b: db:e8:c7:0a:8e:77:29:a6:52:bc:13:9b:0a:36:1f: e4:35:ec:c6:3c:26:b3:6e:ec:df:73:dc:03:ca:37: 4f:97:2e:3f:5b:fb:2b:d2:de:2a:b7:e9:8a:af:83: 94:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C0:FD:FF:3D:23:DA:30:17:83:D5:DE:B3:6B:CB:B4:0B:9E:9D:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41991d5a-ca7f-3760-b7ed-c191f8e389a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fa:8f:ca:39:96:03:99:b9:8d:b0:30:d6:de:94:05:82:25: 32:b9:16:12:3c:14:19:3a:39:1d:f5:67:47:bc:0e:23:b7:28: 6e:08:9a:2b:97:65:19:b2:f7:59:05:1f:4c:13:53:f3:62:d9: 9c:02:99:11:a2:44:f8:c9:1f:59:76:07:d3:ee:fe:60:38:03: 9b:e7:d7:cf:21:d4:27:fc:06:83:bc:68:a2:1a:b0:72:38:14: 79:ac:78:4b:22:52:e1:58:c1:de:b4:22:d3:c3:44:17:2c:e8: b5:29:27:d8:4c:85:8a:81:fd:17:a4:cc:66:23:bb:01:96:95: 5d:3f:76:33:d9:b9:ff:6e:6d:49:70:32:da:30:e2:cf:f5:81: 6a:b6:6c:f9:f2:84:fe:04:61:ff:69:f2:e5:c2:91:7d:6a:66: aa:a2:9c:81:d4:98:d6:af:76:ce:fb:34:5c:05:23:44:b3:c3: 64:50:55:77:8c:6c:66:67:99:59:75:bf:e0:0c:d4:8f:5d:b9: 6d:d1:8e:bf:c1:c3:91:36:94:01:07:e2:df:eb:ea:39:dd:5c: ee:c3:1d:5a:f1:0b:67:70:6a:55:34:23:20:1a:ce:6b:05:dd: 52:db:65:40:1d:68:fd:f4:45:c1:42:7c:fb:d5:fd:4f:33:f5: e2:20:fa:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMLVTGA6d6PIcEWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEyMzMzMloXDTI1MDkyMjEyMzMzMlowLzEtMCsGA1UEAxMk MDc2YzFiYjQtZDVhMi00OGRmLWJlNDQtMDdkNmU5ZDZjMzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2olyYy8Rl3Bh4vppS4S7wWzzOF7WpbstafQ IxJFnNnUgVo5LRmUpL1AfxvqpMiZx5y4uJa33kNWSR4ZYxH8nUB6aochfGO+RbiG fn3SkQ+jethYgGmwwYzp6zywYxk+rmI7/SaO7neLbFBwzjZHdU4l4AQhXN7mS9eE v8ePSTEg4kUt43gi44nopeL8GZ3mEpuv+INnm+vycq3xNssrObZkGafZivgGUBdW FGKBMx/ZVSDCcH02r0mLNIPmGI45jbCMdmOKbN+QtKTiO73aH0vb6McKjncpplK8 E5sKNh/kNezGPCazbuzfc9wDyjdPly4/W/sr0t4qt+mKr4OU5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzA/f89I9owF4PV3rNry7QLnp2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDE5OTFkNWEtY2E3Zi0z NzYwLWI3ZWQtYzE5MWY4ZTM4OWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI76j8o5lgOZuY2wMNbelAWCJTK5FhI8FBk6OR31Z0e8DiO3KG4ImiuX ZRmy91kFH0wTU/Ni2ZwCmRGiRPjJH1l2B9Pu/mA4A5vn188h1Cf8BoO8aKIasHI4 FHmseEsiUuFYwd60ItPDRBcs6LUpJ9hMhYqB/RekzGYjuwGWlV0/djPZuf9ubUlw Mtow4s/1gWq2bPnyhP4EYf9p8uXCkX1qZqqinIHUmNavds77NFwFI0Szw2RQVXeM bGZnmVl1v+AM1I9duW3Rjr/Bw5E2lAEH4t/r6jndXO7DHVrxC2dwalU0IyAazmsF 3VLbZUAdaP30RcFCfPvV/U8z9eIg+jw= -----END CERTIFICATE-----Generated at Tue Jul 1 11:06:03 2025 by rpki-client