$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71b4066d-88c9-3603-99ec-39c529468764.roa File: 71b4066d-88c9-3603-99ec-39c529468764.roa (raw, json) Hash identifier: TNe3W02IuIkz13eI4UTyvGyEv8v+UYkONTW3Ec4w6l4= Subject key identifier: C5:CA:08:3D:34:50:28:60:C7:03:B0:1F:3F:EA:0C:ED:9C:FE:B3:50 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB1684F319ACDBF14CF6880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71b4066d-88c9-3603-99ec-39c529468764.roa Signing time: Thu 12 Jun 2025 12:42:10 +0000 ROA not before: Thu 12 Jun 2025 12:42:10 +0000 ROA not after: Wed 10 Sep 2025 12:42:10 +0000 asID: 36618 IP address blocks: 192.81.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:68:4f:31:9a:cd:bf:14:cf:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:10 2025 GMT Not After : Sep 10 12:42:10 2025 GMT Subject: CN=42d23ec5-1830-4f7d-8416-76e7c6a3d8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:9a:8b:82:ff:35:3d:c2:20:63:4e:1e:a9: fa:12:a8:2c:4e:ba:39:8d:c0:92:f2:a9:63:40:b6: f3:a6:19:6b:43:96:50:80:a4:31:52:1b:e0:bd:c7: ef:ce:cf:13:6f:78:18:be:aa:36:66:3f:5e:ea:fd: fb:68:d9:19:e7:b5:7a:dc:c0:29:be:14:1a:45:26: c3:29:49:8c:8d:1c:0f:b5:c9:43:f2:9b:a2:83:61: 66:08:bc:ee:04:d3:3d:e6:1a:50:9f:b3:f2:09:01: 36:fc:f3:3b:48:9c:0c:1b:a9:ef:c8:e1:f1:25:19: ef:ba:cc:6c:fa:08:ca:66:24:e3:a6:89:cc:a6:b6: 39:1b:5f:28:06:73:06:de:5f:55:c6:4b:63:f9:18: 49:87:f4:71:8c:68:a6:67:f5:7f:aa:1e:da:2f:ee: db:77:d1:63:f6:52:6d:77:1a:83:ac:db:ec:b7:c1: 02:6d:26:02:87:5c:4b:61:96:9c:eb:34:ca:fa:12: ca:95:f6:a5:50:04:86:f7:fa:6f:5d:c6:1d:6b:43: 50:53:2c:44:b9:86:c9:67:c9:0b:86:0f:7e:8b:7b: 12:8d:d5:1a:1b:32:9f:9e:96:97:c4:87:c2:bb:96: ff:57:ca:a7:7f:cc:62:3c:7f:ba:a5:ca:4c:7e:33: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CA:08:3D:34:50:28:60:C7:03:B0:1F:3F:EA:0C:ED:9C:FE:B3:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71b4066d-88c9-3603-99ec-39c529468764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.81.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e9:58:3a:48:09:35:cc:40:c7:27:9f:e4:5e:72:77:a3:7d: f5:05:11:aa:1a:46:4e:51:1b:32:62:16:62:f0:3f:8e:f2:1f: f0:89:ed:b6:4a:e6:7d:9a:99:96:bb:ff:30:0b:ba:2c:57:80: ed:2d:f4:41:e6:f2:90:a0:9b:e4:f0:f0:67:01:e6:cb:20:9a: ce:ad:22:a7:59:1f:b6:33:d0:89:4a:5d:05:61:a1:d7:52:2d: e6:aa:58:15:f4:91:e1:34:fd:1f:b7:48:6a:e6:2c:c5:5d:a8: de:c1:33:2d:ed:3d:e1:6c:ad:7f:a0:ed:e6:e4:65:88:b2:87: 4b:8c:f5:77:f7:67:0c:94:14:c6:1e:f1:73:e1:89:f8:4d:f9: 7b:21:e2:41:c5:19:4f:4d:d4:2b:b7:7d:c9:ae:02:38:a9:3d: 76:ad:d3:be:e7:e5:b1:c2:06:69:ee:9b:f5:ff:c4:9e:d0:e1: 43:cc:17:9b:79:8f:e3:bc:9e:d6:33:be:bc:ff:1d:54:22:3c: 39:d5:ed:5f:2b:03:64:56:63:97:e9:66:e6:ab:62:fe:b8:58: db:27:96:e0:14:53:a6:3c:57:5f:3c:3a:16:8d:f5:ce:30:73: 38:1e:22:41:2f:f4:71:0a:91:ad:43:90:48:45:2f:57:ab:42: 73:a3:b0:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqsWhPMZrNvxTPaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIxMFoXDTI1MDkxMDEyNDIxMFowLzEtMCsGA1UEAxMk NDJkMjNlYzUtMTgzMC00ZjdkLTg0MTYtNzZlN2M2YTNkOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukSai4L/NT3CIGNOHqn6EqgsTro5jcCS8qlj QLbzphlrQ5ZQgKQxUhvgvcfvzs8Tb3gYvqo2Zj9e6v37aNkZ57V63MApvhQaRSbD KUmMjRwPtclD8puig2FmCLzuBNM95hpQn7PyCQE2/PM7SJwMG6nvyOHxJRnvusxs +gjKZiTjponMprY5G18oBnMG3l9Vxktj+RhJh/RxjGimZ/V/qh7aL+7bd9Fj9lJt dxqDrNvst8ECbSYCh1xLYZac6zTK+hLKlfalUASG9/pvXcYda0NQUyxEuYbJZ8kL hg9+i3sSjdUaGzKfnpaXxIfCu5b/V8qnf8xiPH+6pcpMfjMy0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXKCD00UChgxwOwHz/qDO2c/rNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzFiNDA2NmQtODhjOS0z NjAzLTk5ZWMtMzljNTI5NDY4NzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFG5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnpWDpICTXMQMcnn+RecnejffUFEaoaRk5RGzJiFmLwP47yH/CJ7bZK 5n2amZa7/zALuixXgO0t9EHm8pCgm+Tw8GcB5ssgms6tIqdZH7Yz0IlKXQVhoddS LeaqWBX0keE0/R+3SGrmLMVdqN7BMy3tPeFsrX+g7ebkZYiyh0uM9Xf3ZwyUFMYe 8XPhifhN+Xsh4kHFGU9N1Cu3fcmuAjipPXat077n5bHCBmnum/X/xJ7Q4UPMF5t5 j+O8ntYzvrz/HVQiPDnV7V8rA2RWY5fpZuarYv64WNsnluAUU6Y8V188OhaN9c4w czgeIkEv9HEKka1DkEhFL1erQnOjsF0= -----END CERTIFICATE-----Generated at Tue Jul 1 13:08:28 2025 by rpki-client