$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad69dae7-fde2-32f2-9910-e121a2ce2b2e.roa File: ad69dae7-fde2-32f2-9910-e121a2ce2b2e.roa (raw, json) Hash identifier: CVa3EAudFTd6J8308y5DAlVhVJwElioWoO7YHlnP8O4= Subject key identifier: BB:A7:D9:D6:25:52:13:1C:89:7C:DF:5A:B5:D7:65:FB:84:49:14:56 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A58CB0DAF48868AE7E4A79F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad69dae7-fde2-32f2-9910-e121a2ce2b2e.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 396588 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:0d:af:48:86:8a:e7:e4:a7:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=e241cf09-8fd2-4a5e-9c34-ba96e3ff56e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:93:bc:33:13:4c:a2:a6:06:a6:04:24:c9: 35:b7:d2:8a:69:44:a8:d6:78:b1:bb:d9:81:c9:c3: d4:54:3f:57:ad:24:53:28:19:44:f3:78:c9:76:9d: 28:57:af:10:63:6f:84:d0:3f:68:62:be:21:36:44: 63:20:7c:be:96:d4:b1:2a:05:b0:a1:c8:5e:9b:b6: 89:54:c2:5e:db:e5:06:e7:f6:d2:2c:77:e0:44:0a: de:17:0c:23:1f:4b:95:c8:13:97:aa:99:d5:f1:90: 40:3b:92:c3:39:06:97:b4:1f:60:a7:06:60:ca:29: 50:2a:34:2d:bb:51:af:f3:03:02:4c:e0:40:6b:67: 00:db:1c:17:65:3e:a9:40:26:ef:a5:3d:73:72:39: a8:47:ea:b7:85:17:bc:75:03:45:fa:30:7e:c1:7e: 31:f5:9e:61:00:fb:a4:a0:e4:5d:06:7b:e3:26:3f: 6a:b3:ff:fc:b3:a6:0a:fc:8d:5c:7e:d9:d2:9f:6e: e0:ad:01:04:2c:f5:cd:86:39:47:1b:f4:69:5d:35: cb:a4:1f:09:8c:5d:cb:05:d1:83:b4:61:10:f6:c1: 98:b3:bc:8c:6b:f7:b5:4b:f9:a5:ec:6d:40:5b:b7: c5:8d:1c:41:28:9f:39:e0:b5:1a:57:e9:bf:06:4c: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A7:D9:D6:25:52:13:1C:89:7C:DF:5A:B5:D7:65:FB:84:49:14:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad69dae7-fde2-32f2-9910-e121a2ce2b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:ef:f2:94:3c:6e:b0:4f:7b:9f:aa:45:bc:9c:43:1d:40:4b: 3e:21:f9:cd:1f:bd:dd:3b:d7:8f:9e:4c:a3:53:3a:4a:8e:e5: f3:bd:92:c2:83:60:50:f2:59:07:2b:75:0b:aa:bc:b1:7d:3e: df:9d:8a:bc:4c:f5:79:10:a0:ac:cc:33:c0:4d:5a:00:c0:c9: 1d:05:d0:64:3e:8e:1d:e2:9b:18:f9:92:4b:62:5c:6c:2b:da: 63:c4:76:7b:b9:de:50:30:c0:c5:3d:34:53:58:5a:ec:2d:81: 22:71:f0:68:84:41:b9:10:2e:3e:ce:80:6b:20:01:ed:59:f2: cd:79:44:8f:5c:fd:99:f6:cc:90:87:86:fa:aa:30:fe:92:65: f0:b6:af:4b:9f:f4:01:f7:f6:be:af:03:ff:b1:10:79:b9:f7: 39:ac:86:40:c5:df:fd:67:5a:aa:c4:8a:da:27:f2:8d:ba:ec: e7:80:9f:5c:c5:1b:12:e0:41:82:be:d3:48:eb:71:f1:c5:37: f4:81:8d:fb:c7:fa:3a:a1:46:79:b1:19:21:aa:b7:59:52:ea: 34:fb:94:e7:58:0b:51:aa:72:33:ad:32:50:ef:23:64:0a:a7: 9a:d8:d6:d2:8e:4a:59:25:ba:71:d3:2f:8c:39:a6:88:b6:21: 3c:73:62:5c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpYyw2vSIaK5+Snn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk ZTI0MWNmMDktOGZkMi00YTVlLTljMzQtYmE5NmUzZmY1NmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+qTvDMTTKKmBqYEJMk1t9KKaUSo1nixu9mB ycPUVD9XrSRTKBlE83jJdp0oV68QY2+E0D9oYr4hNkRjIHy+ltSxKgWwochem7aJ VMJe2+UG5/bSLHfgRAreFwwjH0uVyBOXqpnV8ZBAO5LDOQaXtB9gpwZgyilQKjQt u1Gv8wMCTOBAa2cA2xwXZT6pQCbvpT1zcjmoR+q3hRe8dQNF+jB+wX4x9Z5hAPuk oORdBnvjJj9qs//8s6YK/I1cftnSn27grQEELPXNhjlHG/RpXTXLpB8JjF3LBdGD tGEQ9sGYs7yMa/e1S/ml7G1AW7fFjRxBKJ854LUaV+m/BkxRZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLun2dYlUhMciXzfWrXXZfuESRRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWQ2OWRhZTctZmRlMi0z MmYyLTk5MTAtZTEyMWEyY2UyYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCk7/KUPG6wT3ufqkW8nEMdQEs+IfnNH73dO9ePnkyjUzpKjuXzvZLC g2BQ8lkHK3ULqryxfT7fnYq8TPV5EKCszDPATVoAwMkdBdBkPo4d4psY+ZJLYlxs K9pjxHZ7ud5QMMDFPTRTWFrsLYEicfBohEG5EC4+zoBrIAHtWfLNeUSPXP2Z9syQ h4b6qjD+kmXwtq9Ln/QB9/a+rwP/sRB5ufc5rIZAxd/9Z1qqxIraJ/KNuuzngJ9c xRsS4EGCvtNI63HxxTf0gY37x/o6oUZ5sRkhqrdZUuo0+5TnWAtRqnIzrTJQ7yNk Cqea2NbSjkpZJbpx0y+MOaaItiE8c2Jc -----END CERTIFICATE-----Generated at Mon Jun 30 11:24:40 2025 by rpki-client