$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e28dbe2-7ac6-3644-a035-b802813e694f.roa File: 8e28dbe2-7ac6-3644-a035-b802813e694f.roa (raw, json) Hash identifier: L3lw8h4sfPj5uIs1NNyQGmd3BiVU5JlzSHi11GZtIhs= Subject key identifier: 96:C4:D2:97:A5:AD:64:D5:4A:D0:DE:71:C3:AF:88:8E:5F:60:C9:93 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5335B2FBCAEF8B6D6E52B5C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e28dbe2-7ac6-3644-a035-b802813e694f.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 396541 IP address blocks: 192.42.174.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:b2:fb:ca:ef:8b:6d:6e:52:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=e184e047-a17a-4d0d-8de0-d7f5170effe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:ce:40:ab:2a:c7:b3:0e:45:81:b4:49:dc: 1d:67:b2:3c:5f:26:f4:b0:ea:c9:1b:66:0e:65:f5: 6e:d9:4f:d2:1e:36:33:51:2c:75:50:8a:ff:a5:46: d7:6d:62:ce:54:86:05:66:6d:df:00:ed:01:a0:a3: 9a:1d:18:d6:95:be:5c:51:a5:ea:a3:8d:23:bc:b0: 62:a3:b0:a0:e3:a3:0c:e6:89:af:b8:61:e4:2d:1a: ee:bf:5d:c5:d3:0a:a9:02:bf:e3:9b:b6:15:e9:19: ec:fe:ac:eb:c2:eb:9a:9b:bd:fd:ad:98:38:01:ae: 8f:1c:28:f3:0f:ec:47:16:46:92:99:91:97:6f:96: 62:06:68:9e:c7:cf:90:60:cf:3a:e0:8a:77:a0:1c: 03:8e:01:bb:9c:09:f9:a2:76:fd:0e:68:c1:47:32: cd:78:05:9d:16:e9:ee:6e:be:cb:ba:13:06:a9:4a: 46:27:4e:99:d9:a6:05:c0:02:d5:29:70:16:d0:cd: 06:7d:a5:64:a9:b1:27:10:1b:1e:39:8d:ed:9d:17: 3e:ca:12:24:13:be:54:e9:da:47:6f:ba:47:ca:bd: f5:8a:f7:0a:4c:ca:01:a1:90:86:95:be:b8:0d:b9: 35:2a:d3:d2:d6:ea:21:73:a0:14:23:63:88:f7:88: 74:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C4:D2:97:A5:AD:64:D5:4A:D0:DE:71:C3:AF:88:8E:5F:60:C9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e28dbe2-7ac6-3644-a035-b802813e694f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e9:a8:3c:e8:9e:7a:74:a6:ac:43:48:fb:c1:54:a4:21:6b: d1:72:4c:76:4f:44:7b:07:89:58:41:c7:2d:f9:4a:db:48:5f: 73:3d:2e:79:8c:f0:c3:58:9f:63:40:cf:88:4e:a3:cf:78:1e: ec:1d:4b:48:92:66:e4:7e:7d:88:1d:c4:b9:fa:da:d4:89:ad: ef:cf:84:2f:f2:da:ab:01:94:7e:de:5d:dc:06:62:6b:61:4c: e6:be:91:09:33:7b:b4:6e:de:96:40:75:20:8a:e6:dd:a9:e8: eb:bb:be:2a:2c:f9:6b:03:b1:3d:50:c9:a3:9d:93:93:56:f6: c7:47:41:46:e5:8f:87:e1:ec:58:11:f3:9a:62:47:98:6f:6b: 1b:69:0f:cb:8a:c5:07:c9:a6:b2:b0:00:a8:a4:a9:44:4a:c9: 47:bb:03:b7:7c:7c:f3:19:10:a8:1f:e4:e6:02:98:d1:26:8d: c5:45:05:9f:3b:b3:8d:44:74:78:df:5f:fd:d1:ae:ef:b6:21: 20:0d:02:5a:02:7c:18:88:b3:03:3f:3a:07:1e:f3:da:64:49: f3:44:d5:52:b2:61:aa:b2:75:15:49:07:1b:ca:9f:4d:9e:bb: 00:89:1f:5e:f6:8a:41:0c:0c:36:02:e8:52:20:aa:48:cc:30: 35:18:87:98 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpTNbL7yu+LbW5StcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZTE4NGUwNDctYTE3YS00ZDBkLThkZTAtZDdmNTE3MGVmZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+nOQKsqx7MORYG0SdwdZ7I8Xyb0sOrJG2YO ZfVu2U/SHjYzUSx1UIr/pUbXbWLOVIYFZm3fAO0BoKOaHRjWlb5cUaXqo40jvLBi o7Cg46MM5omvuGHkLRruv13F0wqpAr/jm7YV6Rns/qzrwuuam739rZg4Aa6PHCjz D+xHFkaSmZGXb5ZiBmiex8+QYM864Ip3oBwDjgG7nAn5onb9DmjBRzLNeAWdFunu br7LuhMGqUpGJ06Z2aYFwALVKXAW0M0GfaVkqbEnEBseOY3tnRc+yhIkE75U6dpH b7pHyr31ivcKTMoBoZCGlb64Dbk1KtPS1uohc6AUI2OI94h0NQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJbE0pelrWTVStDeccOviI5fYMmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGUyOGRiZTItN2FjNi0z NjQ0LWEwMzUtYjgwMjgxM2U2OTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQ6ag86J56dKasQ0j7wVSkIWvRckx2T0R7B4lYQcct+UrbSF9zPS55 jPDDWJ9jQM+ITqPPeB7sHUtIkmbkfn2IHcS5+trUia3vz4Qv8tqrAZR+3l3cBmJr YUzmvpEJM3u0bt6WQHUgiubdqejru74qLPlrA7E9UMmjnZOTVvbHR0FG5Y+H4exY EfOaYkeYb2sbaQ/LisUHyaaysACopKlESslHuwO3fHzzGRCoH+TmApjRJo3FRQWf O7ONRHR431/90a7vtiEgDQJaAnwYiLMDPzoHHvPaZEnzRNVSsmGqsnUVSQcbyp9N nrsAiR9e9opBDAw2AuhSIKpIzDA1GIeY -----END CERTIFICATE-----Generated at Mon Jun 30 12:40:06 2025 by rpki-client