$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a530fa7c-a3d2-325d-859c-a7211535ee30.roa File: a530fa7c-a3d2-325d-859c-a7211535ee30.roa (raw, json) Hash identifier: KDA6x8Jpj+K+s3ckIp62+SpN5fBTZ1gwAtbB3YCjuGo= Subject key identifier: F2:25:D4:CE:9F:A7:AB:0B:1B:E1:E1:60:7A:B9:40:AF:FE:AA:27:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AC9DBB8B9B8E267787EE45B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a530fa7c-a3d2-325d-859c-a7211535ee30.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 396566 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:b8:b9:b8:e2:67:78:7e:e4:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=604a9bf7-7b97-4734-8325-49b2ad3d046b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:85:ea:39:18:c1:6e:04:e8:a5:4f:5b:c2:44: 55:5b:0f:96:e4:d3:15:47:7e:d4:32:41:97:3d:86: 18:81:e0:fe:38:6d:a3:52:56:68:e8:67:93:62:7f: f6:13:dc:0a:7f:e3:e7:1e:49:3b:b6:a0:24:49:56: 05:75:dc:81:6b:13:5c:c1:71:4b:5d:f8:3e:ed:cc: 1a:c8:0a:fb:33:90:90:c1:39:53:44:71:dc:7f:ba: 8c:5c:f9:6e:f3:9c:e2:69:06:20:c2:60:38:c1:01: 91:35:30:bd:0e:00:57:f3:3b:5b:53:5f:e4:1a:3e: ec:24:62:05:0d:fd:3e:6a:95:bf:3c:79:1a:ab:a2: 9d:d8:fd:e2:26:94:57:5d:ce:62:f8:5b:8b:37:01: 77:7c:86:c8:3f:c7:72:a3:3d:e5:6d:3a:93:64:e3: 6c:c4:0b:a0:ae:4f:39:b8:1f:ce:7a:63:e4:07:d3: e6:ae:59:6c:aa:d8:4e:5d:d6:cb:64:6a:49:ec:ea: 7d:bb:e3:de:4e:2a:55:28:2c:00:42:09:56:b7:e6: c7:ef:1f:ec:57:8a:54:2e:35:8f:df:22:87:a4:22: cd:bf:74:26:b2:33:a5:d9:13:1c:5f:d9:04:16:8e: 36:59:7d:a6:ae:93:66:f1:bd:c6:78:0d:aa:98:f7: ec:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:25:D4:CE:9F:A7:AB:0B:1B:E1:E1:60:7A:B9:40:AF:FE:AA:27:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a530fa7c-a3d2-325d-859c-a7211535ee30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f9:44:c6:5c:18:90:4e:8b:05:77:4e:08:8e:46:8c:73:b1: f5:94:e5:5c:20:cd:5b:1d:29:41:d6:31:1c:56:d1:1f:8e:48: 30:fe:bd:3e:bb:a1:bf:93:be:8e:80:08:a8:15:95:73:e9:c3: 03:e2:0e:6b:7f:72:1e:52:bd:7d:cb:35:1a:6c:40:77:87:0f: 8e:f7:b2:f1:fe:e9:21:9c:d6:46:58:a6:bd:87:d4:76:85:52: 28:73:7a:72:4e:ef:74:60:2f:c8:d9:64:80:17:0e:ce:b5:cd: c0:93:b1:53:42:67:f5:4c:28:07:04:ae:16:d1:dd:4c:c7:0b: db:c8:d0:9b:c0:59:19:92:d4:c0:ab:36:ea:a9:66:d9:e9:d0: 64:7e:a5:35:5f:0c:4c:90:f9:9c:ea:8d:5c:06:ab:36:a9:2a: 2c:fd:62:47:db:58:49:35:3b:23:fe:3e:e7:b5:0c:66:a7:03: e5:08:2c:5a:13:23:4a:e2:53:8d:e8:15:b8:4e:d1:7b:ba:d6: f8:2c:25:1a:81:0f:0d:78:bc:e7:78:99:01:30:e4:db:0d:c8: 5a:34:7a:25:6b:57:b3:cd:06:79:97:71:c2:03:3b:10:04:d2: a1:e7:4e:af:30:74:3f:d4:21:97:18:31:20:09:83:20:dc:c8: 20:89:86:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27i5uOJneH7kW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk NjA0YTliZjctN2I5Ny00NzM0LTgzMjUtNDliMmFkM2QwNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYXqORjBbgTopU9bwkRVWw+W5NMVR37UMkGX PYYYgeD+OG2jUlZo6GeTYn/2E9wKf+PnHkk7tqAkSVYFddyBaxNcwXFLXfg+7cwa yAr7M5CQwTlTRHHcf7qMXPlu85ziaQYgwmA4wQGRNTC9DgBX8ztbU1/kGj7sJGIF Df0+apW/PHkaq6Kd2P3iJpRXXc5i+FuLNwF3fIbIP8dyoz3lbTqTZONsxAugrk85 uB/OemPkB9PmrllsqthOXdbLZGpJ7Op9u+PeTipVKCwAQglWt+bH7x/sV4pULjWP 3yKHpCLNv3QmsjOl2RMcX9kEFo42WX2mrpNm8b3GeA2qmPfs5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIl1M6fp6sLG+HhYHq5QK/+qieRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTUzMGZhN2MtYTNkMi0z MjVkLTg1OWMtYTcyMTE1MzVlZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb5RMZcGJBOiwV3TgiORoxzsfWU5VwgzVsdKUHWMRxW0R+OSDD+vT67 ob+Tvo6ACKgVlXPpwwPiDmt/ch5SvX3LNRpsQHeHD473svH+6SGc1kZYpr2H1HaF UihzenJO73RgL8jZZIAXDs61zcCTsVNCZ/VMKAcErhbR3UzHC9vI0JvAWRmS1MCr NuqpZtnp0GR+pTVfDEyQ+ZzqjVwGqzapKiz9YkfbWEk1OyP+Pue1DGanA+UILFoT I0riU43oFbhO0Xu61vgsJRqBDw14vOd4mQEw5NsNyFo0eiVrV7PNBnmXccIDOxAE 0qHnTq8wdD/UIZcYMSAJgyDcyCCJhlY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:51 2025 by rpki-client