$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/589f3ee5-a917-3e01-9913-080244e2d95e.roa File: 589f3ee5-a917-3e01-9913-080244e2d95e.roa (raw, json) Hash identifier: PopdMzUF3aAdaignw4kpKJZJ9ENMdkBMbTT99mQNlvI= Subject key identifier: FD:CB:FB:DA:CF:16:E5:C3:BD:CD:A2:BC:5E:D4:09:B4:AD:B7:59:CB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C2D55E894104B4315F8AA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/589f3ee5-a917-3e01-9913-080244e2d95e.roa Signing time: Tue 24 Jun 2025 12:33:33 +0000 ROA not before: Tue 24 Jun 2025 12:33:33 +0000 ROA not after: Mon 22 Sep 2025 12:33:33 +0000 asID: 397200 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:2d:55:e8:94:10:4b:43:15:f8:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 12:33:33 2025 GMT Not After : Sep 22 12:33:33 2025 GMT Subject: CN=cae5ad1a-176a-46ad-bf44-8dccfe21d993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:59:07:91:36:bd:de:15:ae:18:d8:25:04: 81:c7:f0:a0:4d:2d:cd:39:5e:0a:9f:38:16:cb:37: 45:d7:dc:c2:0b:ad:3c:52:db:99:e9:61:b6:ea:0e: 21:32:d6:e5:50:50:5d:4d:1d:db:84:5a:cf:f9:c8: 9e:eb:c8:48:4a:f9:14:38:c4:b8:cd:fd:69:bb:34: a2:ef:a3:a7:c5:59:98:4d:b0:63:99:22:d1:83:10: d2:07:db:f7:b1:e7:9c:a4:44:b3:54:a7:04:71:06: e9:01:ac:4e:61:6b:48:ce:07:c6:80:0a:3a:ba:b6: 67:04:79:2b:ab:32:53:16:55:be:15:a3:5f:d8:19: bb:e2:58:6f:69:e1:f6:b5:22:33:3e:6f:e8:c6:a2: 71:24:15:ed:02:1b:61:49:12:e3:74:56:4f:1a:dc: 21:ee:f0:de:63:9e:bc:85:d9:2a:32:ed:19:d6:d5: 57:1e:38:ca:47:13:09:1f:4e:7a:75:61:9a:8e:00: 1d:22:96:bb:03:c3:91:5b:0f:ec:15:7e:86:51:ac: 73:2e:8d:38:1a:2b:8e:de:8a:ad:c4:05:62:40:43: 27:2f:5f:7f:65:67:0e:ab:2d:fc:22:93:37:cc:b4: b9:e4:db:20:ff:9b:4c:08:29:4d:a0:c4:40:ee:5b: a2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CB:FB:DA:CF:16:E5:C3:BD:CD:A2:BC:5E:D4:09:B4:AD:B7:59:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/589f3ee5-a917-3e01-9913-080244e2d95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:20:0f:73:16:83:ca:95:b5:a4:35:04:3d:65:f6:5f:43:00: 60:00:7b:6c:4e:37:2e:c9:de:65:68:8f:a8:c7:8c:da:b3:02: b3:a2:af:ba:1c:02:07:c3:fe:10:13:37:7c:f1:b7:93:35:42: a5:ba:05:cc:89:3f:48:ce:16:65:ad:5d:71:7f:96:38:19:66: 78:45:bd:44:e6:c1:2b:37:c4:73:8f:fa:d6:d1:d9:2b:3c:7b: be:c2:0c:7f:7a:d4:ad:45:19:6c:5e:9c:94:0f:54:94:ac:92: 72:d3:eb:b3:92:22:31:bf:6b:d5:59:e5:a3:c5:b0:93:39:5a: af:f2:9f:25:85:72:81:4d:2b:3d:24:41:2a:1f:43:85:02:42: bf:81:51:0c:86:57:17:88:85:f6:64:52:16:46:3f:7c:20:29: 8b:fc:1e:22:d7:8c:7b:c2:ef:02:ae:6b:5c:04:bb:8d:6c:23: e2:a5:3b:2d:55:3c:dc:53:5d:3a:b4:13:f5:d7:9c:27:d7:d5: f8:29:01:02:2b:79:59:d1:2a:00:91:a5:55:c1:65:f4:d8:6a: b2:31:8b:ff:4c:be:c3:16:a6:89:84:c0:7d:ec:55:e2:f5:9c: ac:fa:66:cd:1d:8f:1e:6f:97:7f:06:94:c8:ad:97:a0:43:62: de:0c:0f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMLVXolBBLQxX4qgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEyMzMzM1oXDTI1MDkyMjEyMzMzM1owLzEtMCsGA1UEAxMk Y2FlNWFkMWEtMTc2YS00NmFkLWJmNDQtOGRjY2ZlMjFkOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZlZB5E2vd4VrhjYJQSBx/CgTS3NOV4KnzgW yzdF19zCC608UtuZ6WG26g4hMtblUFBdTR3bhFrP+cie68hISvkUOMS4zf1puzSi 76OnxVmYTbBjmSLRgxDSB9v3seecpESzVKcEcQbpAaxOYWtIzgfGgAo6urZnBHkr qzJTFlW+FaNf2Bm74lhvaeH2tSIzPm/oxqJxJBXtAhthSRLjdFZPGtwh7vDeY568 hdkqMu0Z1tVXHjjKRxMJH056dWGajgAdIpa7A8ORWw/sFX6GUaxzLo04GiuO3oqt xAViQEMnL19/ZWcOqy38IpM3zLS55Nsg/5tMCClNoMRA7luiDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3L+9rPFuXDvc2ivF7UCbStt1nLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTg5ZjNlZTUtYTkxNy0z ZTAxLTk5MTMtMDgwMjQ0ZTJkOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwgD3MWg8qVtaQ1BD1l9l9DAGAAe2xONy7J3mVoj6jHjNqzArOir7oc AgfD/hATN3zxt5M1QqW6BcyJP0jOFmWtXXF/ljgZZnhFvUTmwSs3xHOP+tbR2Ss8 e77CDH961K1FGWxenJQPVJSsknLT67OSIjG/a9VZ5aPFsJM5Wq/ynyWFcoFNKz0k QSofQ4UCQr+BUQyGVxeIhfZkUhZGP3wgKYv8HiLXjHvC7wKua1wEu41sI+KlOy1V PNxTXTq0E/XXnCfX1fgpAQIreVnRKgCRpVXBZfTYarIxi/9MvsMWpomEwH3sVeL1 nKz6Zs0djx5vl38GlMitl6BDYt4MD6c= -----END CERTIFICATE-----Generated at Mon Jun 30 10:50:39 2025 by rpki-client