$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae21bbe4-d821-3c40-a24c-f6965b077689.roa File: ae21bbe4-d821-3c40-a24c-f6965b077689.roa (raw, json) Hash identifier: 9fU8cifVnW7w/8ZoxbiqB4x45ndp11ySwgJ5VNLJG6U= Subject key identifier: 2C:31:8B:CE:5E:70:3F:73:B3:EF:28:0E:D6:11:73:F7:FD:E6:A6:92 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EA799131C8A2F9AF0C1C9200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae21bbe4-d821-3c40-a24c-f6965b077689.roa Signing time: Tue 20 May 2025 12:37:55 +0000 ROA not before: Tue 20 May 2025 12:37:55 +0000 ROA not after: Mon 18 Aug 2025 12:37:55 +0000 asID: 36616 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:79:91:31:c8:a2:f9:af:0c:1c:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 20 12:37:55 2025 GMT Not After : Aug 18 12:37:55 2025 GMT Subject: CN=90b44bf6-3d9e-43cc-9259-b371c2c9aef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:23:9a:a2:bd:18:db:82:a5:d8:01:4b:50: 25:5c:b5:65:ab:47:15:df:c5:8c:1e:a4:74:f8:5f: d7:0c:bd:fe:f5:40:7a:37:65:c2:d5:41:63:f8:ed: f7:ce:e5:b4:db:4d:b1:27:53:88:b1:89:18:29:9f: ae:14:ff:67:17:fa:02:bb:83:d2:50:44:de:80:f1: f3:d2:f6:ff:d2:af:7b:9b:66:d3:cc:02:61:77:4c: 4a:e3:26:fd:11:37:15:a3:46:79:02:d8:df:db:80: 9b:ff:18:a7:a9:4d:eb:23:16:a2:9e:7a:ed:08:52: 28:7c:cc:d1:87:09:7f:3f:56:aa:78:57:cc:b3:90: d6:c0:0e:ac:6c:70:b2:d6:4d:85:c5:4b:40:c4:1f: 8a:ac:4f:eb:94:47:6d:82:0c:d6:1d:f4:a9:49:cf: a5:b4:7d:07:09:cf:fd:b2:bd:96:10:70:d0:64:07: f5:57:c4:24:c7:e6:e7:18:e7:54:1a:1c:d6:a6:a1: 4c:56:5d:24:8b:90:32:86:91:5b:16:2d:6a:0d:7a: 87:e1:72:24:18:64:d2:73:ff:cb:34:a8:58:a2:39: d0:d9:11:ee:17:49:a6:7e:ed:6e:5f:e4:2f:2a:f1: 7d:92:3e:43:61:33:6f:24:b0:1d:9b:78:84:d0:21: c0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:31:8B:CE:5E:70:3F:73:B3:EF:28:0E:D6:11:73:F7:FD:E6:A6:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae21bbe4-d821-3c40-a24c-f6965b077689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3c:cc:e6:75:c9:43:6c:b2:91:d2:0e:1a:f5:51:ee:27:65: cd:cb:a5:91:d7:18:3d:49:50:2c:2f:21:27:b0:63:d2:15:95: 09:77:6b:a0:cd:ae:4f:b1:a1:a6:78:1b:4c:f7:62:6b:d7:a3: e3:4d:53:c9:57:40:21:3d:e6:b6:60:29:94:67:9b:5c:f4:dc: b1:6e:6f:d7:cc:6c:cc:76:bb:ef:39:22:33:89:37:97:0c:7d: 7c:03:96:ae:10:d6:1d:fd:b7:89:8f:1b:6a:c5:93:a1:a6:52: 6c:f2:9d:a7:e9:91:05:2b:80:6f:c1:81:c6:85:61:30:9d:58: 55:85:9c:bd:a0:a2:b5:c7:bd:de:5f:b5:51:53:7e:a3:5c:36: 06:f1:52:61:90:6a:55:6e:42:fd:3c:e7:97:72:22:09:9d:eb: 62:28:b6:b6:57:cf:78:0d:5d:df:f6:b1:2a:d5:b4:a0:43:ff: 6e:3a:a5:a9:1c:15:e6:14:b2:7f:d2:bc:3f:19:30:27:9c:64: a8:16:1c:05:12:42:f4:0d:f6:6a:13:2a:f5:7c:d1:19:b2:19: ab:56:66:7d:ad:a6:6c:46:06:16:bd:f8:3f:2a:3c:57:68:54: c6:5d:4e:b6:32:a4:80:c1:0a:bd:d1:82:67:9b:a4:81:b7:39: 7c:1c:3f:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqeZExyKL5rwwckgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMDEyMzc1NVoXDTI1MDgxODEyMzc1NVowLzEtMCsGA1UEAxMk OTBiNDRiZjYtM2Q5ZS00M2NjLTkyNTktYjM3MWMyYzlhZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkwjmqK9GNuCpdgBS1AlXLVlq0cV38WMHqR0 +F/XDL3+9UB6N2XC1UFj+O33zuW0202xJ1OIsYkYKZ+uFP9nF/oCu4PSUETegPHz 0vb/0q97m2bTzAJhd0xK4yb9ETcVo0Z5Atjf24Cb/xinqU3rIxainnrtCFIofMzR hwl/P1aqeFfMs5DWwA6sbHCy1k2FxUtAxB+KrE/rlEdtggzWHfSpSc+ltH0HCc/9 sr2WEHDQZAf1V8Qkx+bnGOdUGhzWpqFMVl0ki5AyhpFbFi1qDXqH4XIkGGTSc//L NKhYojnQ2RHuF0mmfu1uX+QvKvF9kj5DYTNvJLAdm3iE0CHAtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwxi85ecD9zs+8oDtYRc/f95qaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWUyMWJiZTQtZDgyMS0z YzQwLWEyNGMtZjY5NjViMDc3Njg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc8zOZ1yUNsspHSDhr1Ue4nZc3LpZHXGD1JUCwvISewY9IVlQl3a6DN rk+xoaZ4G0z3YmvXo+NNU8lXQCE95rZgKZRnm1z03LFub9fMbMx2u+85IjOJN5cM fXwDlq4Q1h39t4mPG2rFk6GmUmzynafpkQUrgG/BgcaFYTCdWFWFnL2gorXHvd5f tVFTfqNcNgbxUmGQalVuQv0855dyIgmd62IotrZXz3gNXd/2sSrVtKBD/246pakc FeYUsn/SvD8ZMCecZKgWHAUSQvQN9moTKvV80RmyGatWZn2tpmxGBha9+D8qPFdo VMZdTrYypIDBCr3RgmebpIG3OXwcPxU= -----END CERTIFICATE-----Generated at Mon Jun 30 10:39:00 2025 by rpki-client