$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6635ca0a-c92a-3e70-aeca-457a07a54544.roa File: 6635ca0a-c92a-3e70-aeca-457a07a54544.roa (raw, json) Hash identifier: Qc55+BpvkImNQwsvnrjmkSfb7qQqC5WXXQPZAaW/gJE= Subject key identifier: CF:8E:BF:C4:36:F1:1E:A7:DC:74:E0:25:50:0F:5F:4B:A9:1C:DB:59 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C2D5489D1FCFC8AC3601C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6635ca0a-c92a-3e70-aeca-457a07a54544.roa Signing time: Tue 24 Jun 2025 12:33:32 +0000 ROA not before: Tue 24 Jun 2025 12:33:32 +0000 ROA not after: Mon 22 Sep 2025 12:33:32 +0000 asID: 396543 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:2d:54:89:d1:fc:fc:8a:c3:60:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 12:33:32 2025 GMT Not After : Sep 22 12:33:32 2025 GMT Subject: CN=8037a60e-e00f-4dd3-b486-f0e0d48c5b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:c7:08:42:66:8a:72:13:e2:a8:83:78:70: 70:3d:0d:1f:8f:07:15:f8:e9:26:5b:36:f6:36:63: 47:58:13:0f:21:4c:b7:c6:b6:d5:6e:d1:b1:4f:3c: 90:9a:c3:80:61:ad:4c:ca:0e:3a:ce:5e:e1:bf:47: 17:0e:03:81:f0:fc:67:cd:ad:eb:3c:ed:53:1c:96: e6:32:fd:ce:91:bd:26:87:76:ec:a1:03:c0:b7:eb: cc:20:0a:82:d7:2f:de:e9:53:bf:47:0c:ad:09:1c: ea:9c:34:0e:33:f6:42:38:56:a5:98:ac:d6:9b:3b: 4f:fa:70:c7:4b:ac:64:4c:44:62:ca:bf:82:fa:d9: 6a:4e:07:d0:e2:3b:fd:9e:a2:6a:3e:24:6b:f6:e3: 50:a3:98:0f:72:70:79:b7:35:11:86:63:10:a7:27: 8b:af:d2:40:24:d7:40:2c:bb:74:36:7d:32:ed:d9: f8:3d:ee:fa:61:41:b2:a8:23:ca:7f:9a:43:e6:63: cc:2b:aa:99:de:5a:f5:9e:0e:bc:b6:63:f0:3f:5a: 93:31:2a:e1:ff:a4:cc:ac:ae:78:d6:fa:fa:1e:6f: 5b:02:9c:d1:92:df:c5:aa:ff:a0:3e:85:3f:f1:a1: 52:97:14:ba:8d:e1:da:85:02:99:86:51:c9:69:a0: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8E:BF:C4:36:F1:1E:A7:DC:74:E0:25:50:0F:5F:4B:A9:1C:DB:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6635ca0a-c92a-3e70-aeca-457a07a54544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:61:82:be:b8:50:2d:22:2c:eb:4e:4e:c9:f6:61:a0:e1:a9: fa:ee:32:28:59:20:40:78:27:fd:ce:4e:bd:16:a1:77:0a:53: c0:17:41:0b:4a:d9:ee:07:29:00:02:d6:01:20:0f:fb:77:c1: ac:5c:3b:24:5e:43:05:0b:86:db:9f:34:a6:8f:74:27:29:d4: bd:ee:47:70:23:b9:02:2b:6c:06:f8:99:df:cc:c7:1a:13:2a: fd:b9:fb:89:11:34:93:83:19:55:3d:1e:5f:14:2e:60:83:68: 64:9b:24:e9:3b:34:19:02:ed:5f:fe:2e:65:30:4c:9f:ad:54: 7c:b6:ec:a6:98:01:f3:d2:f5:b5:ed:0c:66:17:9c:75:f6:8f: 8d:61:e5:be:77:c5:e7:8e:9f:82:26:b0:c4:29:36:a1:e5:28: 32:ef:60:8e:6f:6c:c9:89:ce:1b:f3:a6:e8:0b:7e:60:ae:fa: 41:47:f1:b9:7c:4b:ef:65:78:43:c3:ba:69:60:5f:c2:6b:01: 9b:fe:9d:ef:7c:b8:43:e7:94:d6:b8:69:16:df:37:ea:b0:39: c7:a8:f5:7c:e6:64:49:3a:17:51:d8:a7:9c:f2:0b:28:af:46: ae:39:17:e8:c5:59:27:20:fa:7d:f2:ce:06:33:c9:37:a6:55: 2f:11:cf:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMLVSJ0fz8isNgHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEyMzMzMloXDTI1MDkyMjEyMzMzMlowLzEtMCsGA1UEAxMk ODAzN2E2MGUtZTAwZi00ZGQzLWI0ODYtZjBlMGQ0OGM1YjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo93HCEJminIT4qiDeHBwPQ0fjwcV+OkmWzb2 NmNHWBMPIUy3xrbVbtGxTzyQmsOAYa1Myg46zl7hv0cXDgOB8Pxnza3rPO1THJbm Mv3Okb0mh3bsoQPAt+vMIAqC1y/e6VO/RwytCRzqnDQOM/ZCOFalmKzWmztP+nDH S6xkTERiyr+C+tlqTgfQ4jv9nqJqPiRr9uNQo5gPcnB5tzURhmMQpyeLr9JAJNdA LLt0Nn0y7dn4Pe76YUGyqCPKf5pD5mPMK6qZ3lr1ng68tmPwP1qTMSrh/6TMrK54 1vr6Hm9bApzRkt/Fqv+gPoU/8aFSlxS6jeHahQKZhlHJaaAOuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+Ov8Q28R6n3HTgJVAPX0upHNtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjYzNWNhMGEtYzkyYS0z ZTcwLWFlY2EtNDU3YTA3YTU0NTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlhgr64UC0iLOtOTsn2YaDhqfruMihZIEB4J/3OTr0WoXcKU8AXQQtK 2e4HKQAC1gEgD/t3waxcOyReQwULhtufNKaPdCcp1L3uR3AjuQIrbAb4md/MxxoT Kv25+4kRNJODGVU9Hl8ULmCDaGSbJOk7NBkC7V/+LmUwTJ+tVHy27KaYAfPS9bXt DGYXnHX2j41h5b53xeeOn4ImsMQpNqHlKDLvYI5vbMmJzhvzpugLfmCu+kFH8bl8 S+9leEPDumlgX8JrAZv+ne98uEPnlNa4aRbfN+qwOceo9XzmZEk6F1HYp5zyCyiv Rq45F+jFWScg+n3yzgYzyTemVS8Rz0M= -----END CERTIFICATE-----Generated at Mon Jun 30 11:56:30 2025 by rpki-client