$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ceb699d-d322-3e72-a540-57c1c6072da7.roa File: 4ceb699d-d322-3e72-a540-57c1c6072da7.roa (raw, json) Hash identifier: zGjNzpqU/8ebVcjZQqk2cvRdrk+y7r8wRo1A+MJvPlA= Subject key identifier: 2E:9E:95:E4:98:80:C3:1A:EE:B7:50:27:16:DF:AA:15:29:B1:E1:1E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C2D54B41D0989D3417FFB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ceb699d-d322-3e72-a540-57c1c6072da7.roa Signing time: Tue 24 Jun 2025 12:33:32 +0000 ROA not before: Tue 24 Jun 2025 12:33:32 +0000 ROA not after: Mon 22 Sep 2025 12:33:32 +0000 asID: 396613 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:2d:54:b4:1d:09:89:d3:41:7f:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 12:33:32 2025 GMT Not After : Sep 22 12:33:32 2025 GMT Subject: CN=3fa18d3d-d7e0-4233-acc3-94615da73161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:07:3d:e6:56:be:88:79:2a:0a:82:eb:fb: 07:dd:a3:a4:e1:de:cb:fa:d6:64:63:5f:08:49:9d: 65:d1:dd:d1:8a:27:06:4d:9d:0c:cd:9f:48:de:43: a3:b5:a8:b2:08:3e:92:29:48:f4:1e:83:7d:a8:b6: 2a:75:48:84:60:4b:eb:7c:7b:09:cb:54:74:5f:5f: 71:9d:e8:e8:38:52:f8:9d:0c:35:f8:92:a7:4c:c1: f3:34:a1:96:9c:a0:13:d7:a7:08:9e:88:3f:c9:47: d1:b1:64:d9:77:24:42:ea:fc:8b:4f:67:75:0c:c0: fc:6e:48:be:ca:f6:2c:28:3a:07:0c:4a:18:d3:44: be:70:3c:bc:5e:4b:08:43:9c:72:6b:b1:7d:9a:f0: 1e:75:ab:19:15:0b:76:2c:12:ce:c3:a0:d2:5f:68: 63:2f:71:f1:e8:e8:ec:0d:e2:4b:aa:38:03:3e:d1: aa:e7:9d:47:fb:57:24:4c:4e:a3:6e:e5:53:29:a2: c2:51:25:51:e2:9c:0a:0e:67:a3:59:e5:54:e7:43: ef:95:5b:72:54:50:5a:b5:a7:b0:63:da:f3:e7:14: 1d:71:be:d8:41:06:81:52:d7:d4:4b:33:79:55:39: 2b:e4:8c:e7:0b:d4:a0:91:ec:4c:e7:47:64:02:aa: 4e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9E:95:E4:98:80:C3:1A:EE:B7:50:27:16:DF:AA:15:29:B1:E1:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ceb699d-d322-3e72-a540-57c1c6072da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:0f:c6:15:5a:9d:72:b8:ff:fd:c4:ea:85:7e:84:2e:23:06: f7:b0:fb:ed:93:e0:9c:a9:1c:56:30:c9:44:4d:38:68:e5:26: 6d:c9:12:3e:eb:c6:13:b1:15:f1:cd:da:a9:74:73:c8:31:cf: 90:09:e7:e0:09:a3:e9:57:41:4c:01:18:b3:c3:2b:31:5b:b9: 74:d8:fb:c8:c8:8e:6a:3e:c9:6b:58:5a:09:72:be:fc:a6:27: 5a:70:e9:a1:65:19:3f:aa:58:2c:d0:e8:c2:cc:8b:a6:99:6d: 7c:20:60:9f:7e:e7:26:f4:b7:1d:2e:dd:d4:84:b9:a0:de:ab: 2f:a9:60:70:b4:08:c3:9b:64:5f:dc:5c:2f:96:44:78:58:e5: 0c:74:4b:5c:60:3f:31:63:78:a7:df:9f:04:e8:0d:b5:56:a9: cd:0a:a7:74:ee:1d:e4:18:f4:11:9f:d9:68:37:0b:c5:7d:21: d6:a3:cc:8b:f5:75:79:d6:c7:b3:91:98:f3:ef:4e:f5:b3:7c: b3:42:f2:bf:ee:ff:13:9e:2c:7b:94:16:a8:e3:b2:15:8e:62: 6c:a1:eb:fa:35:25:29:0b:99:8e:34:0c:f3:93:18:d5:b3:8b: a8:61:38:5a:8c:1c:4e:0a:fe:62:a6:b4:b9:92:92:e2:14:7f: b3:c0:a1:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMLVS0HQmJ00F/+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEyMzMzMloXDTI1MDkyMjEyMzMzMlowLzEtMCsGA1UEAxMk M2ZhMThkM2QtZDdlMC00MjMzLWFjYzMtOTQ2MTVkYTczMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXgHPeZWvoh5KgqC6/sH3aOk4d7L+tZkY18I SZ1l0d3RiicGTZ0MzZ9I3kOjtaiyCD6SKUj0HoN9qLYqdUiEYEvrfHsJy1R0X19x nejoOFL4nQw1+JKnTMHzNKGWnKAT16cInog/yUfRsWTZdyRC6vyLT2d1DMD8bki+ yvYsKDoHDEoY00S+cDy8XksIQ5xya7F9mvAedasZFQt2LBLOw6DSX2hjL3Hx6Ojs DeJLqjgDPtGq551H+1ckTE6jbuVTKaLCUSVR4pwKDmejWeVU50PvlVtyVFBataew Y9rz5xQdcb7YQQaBUtfUSzN5VTkr5IznC9SgkexM50dkAqpONwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6eleSYgMMa7rdQJxbfqhUpseEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGNlYjY5OWQtZDMyMi0z ZTcyLWE1NDAtNTdjMWM2MDcyZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYPxhVanXK4//3E6oV+hC4jBvew++2T4JypHFYwyURNOGjlJm3JEj7r xhOxFfHN2ql0c8gxz5AJ5+AJo+lXQUwBGLPDKzFbuXTY+8jIjmo+yWtYWglyvvym J1pw6aFlGT+qWCzQ6MLMi6aZbXwgYJ9+5yb0tx0u3dSEuaDeqy+pYHC0CMObZF/c XC+WRHhY5Qx0S1xgPzFjeKffnwToDbVWqc0Kp3TuHeQY9BGf2Wg3C8V9IdajzIv1 dXnWx7ORmPPvTvWzfLNC8r/u/xOeLHuUFqjjshWOYmyh6/o1JSkLmY40DPOTGNWz i6hhOFqMHE4K/mKmtLmSkuIUf7PAoXQ= -----END CERTIFICATE-----Generated at Tue Jul 1 16:02:42 2025 by rpki-client