$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64996e53-c089-3c8a-a533-e7b6d2f7061a.roa File: 64996e53-c089-3c8a-a533-e7b6d2f7061a.roa (raw, json) Hash identifier: cQ19f+EY50OGMxeAVSpM9HlhfKF1nY2pw650WSPeWZ8= Subject key identifier: 71:BE:55:B7:66:5D:6E:35:AB:2A:99:BF:D0:CB:2B:CB:1F:F8:65:B9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A58CB128C77DCB1A4F25B4380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64996e53-c089-3c8a-a533-e7b6d2f7061a.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 396540 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:12:8c:77:dc:b1:a4:f2:5b:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=7a1db6c9-ec97-40cb-954d-5ff61cd274d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:71:5d:91:62:47:c1:0b:96:d7:eb:44:12: 07:63:60:e2:61:17:da:21:82:2b:ca:3a:10:0d:eb: d5:9a:5f:86:f5:6b:84:3d:ef:9d:ad:94:22:f5:a1: 43:31:e2:f2:ab:c0:ac:93:0e:a2:c7:17:b8:90:41: 33:47:e5:07:79:1e:f7:3e:e2:11:89:ee:46:e1:d7: 17:a0:59:87:e5:36:63:0d:13:98:4b:08:02:65:a4: 3a:3e:b9:d5:ea:12:20:d6:a5:94:a3:6a:58:9f:aa: e5:23:a1:51:27:e3:71:d7:eb:1e:8a:db:48:06:38: ee:55:b4:35:ad:9a:cd:f2:9d:3a:c7:b6:cd:84:29: 83:7f:27:4f:52:df:d3:b0:74:b0:33:18:57:b3:69: 1e:76:9b:92:8c:28:2d:31:77:47:4d:6b:0a:b6:bf: b6:84:89:3c:76:26:61:4a:f7:52:5d:50:2d:7b:7a: d6:ba:f5:bb:db:91:e8:de:0c:00:9b:df:95:ec:3e: 02:31:ca:2e:93:6f:e9:6a:fd:f7:f2:41:5f:55:6e: 34:34:65:2b:cf:0b:48:d9:48:02:bf:c3:ef:88:a5: f6:c9:ee:dd:5c:48:0e:ef:2c:2e:c2:2c:54:11:f5: 81:0d:5f:f5:74:6e:45:42:42:a2:e6:ab:27:2d:7c: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BE:55:B7:66:5D:6E:35:AB:2A:99:BF:D0:CB:2B:CB:1F:F8:65:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64996e53-c089-3c8a-a533-e7b6d2f7061a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:5d:d0:ff:60:ee:c2:3e:be:5f:96:d8:88:78:f6:6e:1a:9d: 57:c1:08:d0:2e:e1:de:65:34:83:a4:bd:f1:82:05:79:8a:60: 2e:4d:f1:06:5c:1f:1a:86:28:66:ec:0a:a1:73:e0:e3:27:24: e0:56:88:96:49:21:f0:a8:25:4b:9f:29:c0:85:a5:0b:45:f7: a3:ec:da:92:02:33:51:7a:d3:5e:b0:a5:f9:73:10:f4:5a:e5: e3:69:ef:96:f1:23:45:ca:c1:fd:c2:b4:fd:61:d4:be:3f:d3: 70:84:38:fe:12:70:fd:3f:c5:26:04:fd:34:ed:ae:45:bf:ff: 97:af:3c:77:b2:f6:2a:a7:57:bc:94:55:03:27:8d:b4:34:67: 4d:9b:a5:af:18:9c:7f:4a:dd:e1:8b:30:2b:e8:a9:46:45:25: fc:44:d6:5f:55:14:a7:3a:b9:de:dd:9c:3e:72:21:98:68:80: a5:cb:46:a5:b4:07:1d:0c:94:79:d7:6d:ed:2e:30:de:b8:f6: db:93:bf:0f:4f:23:c2:c8:b7:60:19:49:ad:88:cd:f4:43:43: 8d:27:50:e3:7d:52:1c:3c:e6:21:a4:7b:bc:e8:65:a5:a2:47: 17:21:43:e4:a9:7e:a5:8c:d7:1c:1e:27:4e:2f:e3:31:07:3f: 34:0e:16:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpYyxKMd9yxpPJbQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk N2ExZGI2YzktZWM5Ny00MGNiLTk1NGQtNWZmNjFjZDI3NGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdpxXZFiR8ELltfrRBIHY2DiYRfaIYIryjoQ DevVml+G9WuEPe+drZQi9aFDMeLyq8Cskw6ixxe4kEEzR+UHeR73PuIRie5G4dcX oFmH5TZjDROYSwgCZaQ6PrnV6hIg1qWUo2pYn6rlI6FRJ+Nx1+seittIBjjuVbQ1 rZrN8p06x7bNhCmDfydPUt/TsHSwMxhXs2kedpuSjCgtMXdHTWsKtr+2hIk8diZh SvdSXVAte3rWuvW725Ho3gwAm9+V7D4CMcouk2/pav338kFfVW40NGUrzwtI2UgC v8PviKX2ye7dXEgO7ywuwixUEfWBDV/1dG5FQkKi5qsnLXyQtQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHG+VbdmXW41qyqZv9DLK8sf+GW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQ5OTZlNTMtYzA4OS0z YzhhLWE1MzMtZTdiNmQyZjcwNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCeXdD/YO7CPr5fltiIePZuGp1XwQjQLuHeZTSDpL3xggV5imAuTfEG XB8ahihm7Aqhc+DjJyTgVoiWSSHwqCVLnynAhaULRfej7NqSAjNRetNesKX5cxD0 WuXjae+W8SNFysH9wrT9YdS+P9NwhDj+EnD9P8UmBP007a5Fv/+Xrzx3svYqp1e8 lFUDJ420NGdNm6WvGJx/St3hizAr6KlGRSX8RNZfVRSnOrne3Zw+ciGYaICly0al tAcdDJR5123tLjDeuPbbk78PTyPCyLdgGUmtiM30Q0ONJ1DjfVIcPOYhpHu86GWl okcXIUPkqX6ljNccHidOL+MxBz80Dhan -----END CERTIFICATE-----Generated at Mon Jun 30 11:56:17 2025 by rpki-client