$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bab1a8bb-3dac-3898-af07-be229f8d9066.roa File: bab1a8bb-3dac-3898-af07-be229f8d9066.roa (raw, json) Hash identifier: 8R8j8CkLkYAIGolDShx6hYNxNglor8NrMnZjFkRQz/k= Subject key identifier: 87:D3:47:64:D6:3A:1B:D6:F6:0F:51:D9:3D:79:CC:37:18:36:CD:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EA799002C5D0D3BAFB87CB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bab1a8bb-3dac-3898-af07-be229f8d9066.roa Signing time: Tue 20 May 2025 12:37:55 +0000 ROA not before: Tue 20 May 2025 12:37:55 +0000 ROA not after: Mon 18 Aug 2025 12:37:55 +0000 asID: 36621 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:79:90:02:c5:d0:d3:ba:fb:87:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 20 12:37:55 2025 GMT Not After : Aug 18 12:37:55 2025 GMT Subject: CN=1d527806-e88d-4f8e-ae75-ecef94a39330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:f0:59:83:bd:b3:d6:1e:ed:03:0b:fc:e7: 1d:c1:29:af:10:02:9b:39:38:62:d4:6b:a1:27:32: b8:04:91:68:43:51:65:de:a1:9b:aa:70:79:49:47: 51:8d:57:6c:b3:f1:6c:f5:99:01:ae:a7:2b:7f:f8: 02:f9:7a:8b:52:4b:9e:f0:3c:7d:0a:b2:73:c6:cd: ff:65:0e:20:7e:bc:f6:78:5d:71:b2:d1:14:fd:f6: 06:f1:45:61:43:bc:f2:e4:ff:df:12:a6:40:b5:6c: 3a:ce:de:ca:1b:e6:9e:2c:3e:a8:6c:d7:e0:01:d8: 1e:82:46:fc:a7:de:f7:d9:40:61:3e:40:38:0f:4b: e0:f0:c7:77:88:ae:6f:6a:de:73:25:8f:86:ef:84: 0a:67:35:5d:ed:34:98:0d:13:5e:98:ec:31:cd:c2: f1:30:09:55:8d:1e:1f:0d:cb:27:0d:f8:e6:b5:58: 15:e2:cc:c3:e7:ec:a8:c0:77:1e:b3:41:3c:37:cc: 2d:e7:a5:69:ce:51:ee:d0:ca:86:81:f3:3f:16:b6: c5:5d:1f:5c:f6:96:15:c7:f0:cf:30:81:1f:18:99: a6:af:f4:87:62:dc:13:61:a9:cc:ba:32:1a:31:dc: e6:44:77:e0:dc:a6:61:95:17:8a:5a:d6:38:13:28: 14:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D3:47:64:D6:3A:1B:D6:F6:0F:51:D9:3D:79:CC:37:18:36:CD:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bab1a8bb-3dac-3898-af07-be229f8d9066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:22:a3:1f:6f:83:17:fe:06:d5:9f:21:91:11:e1:88:48:a9: 3b:a4:25:c7:e7:ef:89:02:cd:02:7a:f2:16:69:40:76:7e:b0: 6e:5a:43:ff:a4:76:68:17:c2:55:f1:9d:b8:14:04:9d:58:72: dd:31:35:7d:6a:c2:9a:c4:b2:d4:38:0b:bb:5f:b4:d9:56:ed: d6:6f:6b:84:fe:9b:c7:14:b1:4e:1e:69:ce:0f:a1:0c:7c:01: 1b:57:5f:15:b6:ae:71:f3:94:a0:43:3a:e9:de:4a:c7:c6:ba: c0:0f:a3:90:7b:e2:49:d5:ad:6f:37:92:c5:e9:c6:2e:fe:d2: a0:6a:67:3a:af:93:04:ba:56:32:7b:42:18:27:83:a8:9a:0d: 02:08:6b:e6:19:b2:a5:a2:88:15:56:10:03:c5:c4:b9:a2:8a: 9c:62:1d:06:0a:b7:17:22:b5:6a:cb:f6:ea:3b:b0:7d:8e:2d: 99:ab:18:a4:89:72:32:27:13:59:05:66:79:20:20:ed:e9:8f: 1c:78:56:38:43:99:a3:70:96:06:5f:9d:a0:a3:ff:61:08:e5: 01:eb:51:d1:27:7d:6e:18:45:69:a4:c7:4a:96:61:35:e2:90: 85:5a:62:29:0d:14:05:85:48:33:bb:2f:28:de:65:58:ac:e5: 4b:8f:74:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqeZACxdDTuvuHy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMDEyMzc1NVoXDTI1MDgxODEyMzc1NVowLzEtMCsGA1UEAxMk MWQ1Mjc4MDYtZTg4ZC00ZjhlLWFlNzUtZWNlZjk0YTM5MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfHwWYO9s9Ye7QML/OcdwSmvEAKbOThi1Guh JzK4BJFoQ1Fl3qGbqnB5SUdRjVdss/Fs9ZkBrqcrf/gC+XqLUkue8Dx9CrJzxs3/ ZQ4gfrz2eF1xstEU/fYG8UVhQ7zy5P/fEqZAtWw6zt7KG+aeLD6obNfgAdgegkb8 p9732UBhPkA4D0vg8Md3iK5vat5zJY+G74QKZzVd7TSYDRNemOwxzcLxMAlVjR4f DcsnDfjmtVgV4szD5+yowHces0E8N8wt56VpzlHu0MqGgfM/FrbFXR9c9pYVx/DP MIEfGJmmr/SHYtwTYanMujIaMdzmRHfg3KZhlReKWtY4EygUdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfTR2TWOhvW9g9R2T15zDcYNs1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmFiMWE4YmItM2RhYy0z ODk4LWFmMDctYmUyMjlmOGQ5MDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8iox9vgxf+BtWfIZER4YhIqTukJcfn74kCzQJ68hZpQHZ+sG5aQ/+k dmgXwlXxnbgUBJ1Yct0xNX1qwprEstQ4C7tftNlW7dZva4T+m8cUsU4eac4PoQx8 ARtXXxW2rnHzlKBDOuneSsfGusAPo5B74knVrW83ksXpxi7+0qBqZzqvkwS6VjJ7 Qhgng6iaDQIIa+YZsqWiiBVWEAPFxLmiipxiHQYKtxcitWrL9uo7sH2OLZmrGKSJ cjInE1kFZnkgIO3pjxx4VjhDmaNwlgZfnaCj/2EI5QHrUdEnfW4YRWmkx0qWYTXi kIVaYikNFAWFSDO7LyjeZVis5UuPdO4= -----END CERTIFICATE-----Generated at Tue Jul 1 20:54:15 2025 by rpki-client