$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa File: bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa (raw, json) Hash identifier: aE/P0OpWw4hJ1Uwb1pFtaLqY8dGEmgV7suNcyjgScag= Subject key identifier: 31:74:BB:54:36:31:C6:F5:C2:FE:4A:AB:56:C7:71:3C:FD:94:C9:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A43DB1CCFA796898E1D6A3980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 396579 IP address blocks: 192.42.175.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:1c:cf:a7:96:89:8e:1d:6a:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=000098b1-35a8-4d63-b90b-318ad1d581fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:eb:a7:26:6e:f9:d5:73:c1:c1:19:c1:a7: a0:ae:98:91:f1:c4:a7:9b:20:db:f3:ac:95:c2:9a: 9c:e9:ff:5a:7d:c0:0b:07:35:3c:b5:19:ac:33:db: 68:cf:e9:04:aa:e1:c2:b2:39:1d:3e:1c:28:cd:77: 23:f5:1d:c4:ae:87:a2:c5:45:57:5e:43:b0:2d:05: 9d:f3:82:92:d7:92:11:63:9a:a5:20:35:ec:66:75: aa:48:94:5d:a6:6d:3b:ec:23:a6:80:5d:ca:e6:98: 26:7b:1c:c0:67:4c:4a:a0:81:14:f0:17:06:e0:71: ad:d6:61:ee:44:55:37:87:47:03:7b:0d:04:4a:17: 0d:8c:55:f0:4f:35:47:1e:77:25:66:8b:ab:1e:70: e4:85:81:72:9c:55:25:a2:07:6b:79:64:66:3a:db: b1:f5:cb:b3:05:c1:da:4b:43:82:11:2a:2d:be:02: 99:d5:ce:3f:aa:5f:3f:1b:3e:9b:3d:ab:fe:00:31: 3d:5a:5e:bf:ee:c1:d6:f1:2b:20:95:af:8d:8d:f0: 44:7e:aa:5f:c7:f5:aa:90:38:e8:e8:fe:d6:97:e5: 64:5a:7b:00:00:01:b9:70:69:94:65:75:6f:69:d1: 0c:f3:1d:64:8d:c0:2d:de:e4:d9:9d:f7:88:fb:2a: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:74:BB:54:36:31:C6:F5:C2:FE:4A:AB:56:C7:71:3C:FD:94:C9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bafd4e09-0e30-3b2b-9a3b-f814930125a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:0c:19:58:48:80:13:36:38:46:e1:59:b2:ac:af:ee:64:76: a5:87:96:22:7f:10:7d:dc:58:8e:ca:68:65:81:be:61:64:db: 3f:ab:13:86:b8:80:9e:f9:f0:42:eb:05:66:e9:34:3b:e7:ff: 76:1a:74:50:9d:94:e5:27:f5:66:e9:2f:8d:c6:08:56:e5:a5: 94:48:b8:52:aa:21:9a:13:5e:6d:61:a1:c6:93:db:29:43:4e: 2c:3c:05:1a:46:6e:19:16:3d:5f:2d:72:9d:d0:e8:9d:2c:27: 6a:ab:03:44:8d:d6:7c:ac:f6:e2:cb:09:be:00:a5:24:ba:63: 10:c9:19:ec:5f:d9:5a:7d:77:cf:e3:2d:a6:10:c1:bf:6f:e3: c4:93:ad:e8:34:95:da:7e:48:fd:52:f7:d3:8f:ca:95:36:7b: e6:84:8c:57:dd:02:04:51:d7:21:cb:54:e4:30:a8:23:e9:f1: f2:fb:af:71:f0:c5:bb:6d:4e:d0:0e:21:8b:15:2d:f3:61:51: 3d:5c:c4:ab:d8:06:87:01:ef:07:cb:1f:4a:9a:e6:bb:e4:0a: de:72:f4:11:a2:38:c1:1a:3c:ce:bf:48:32:e3:aa:01:de:79: da:d0:50:da:95:6e:6b:ba:66:0a:9a:5d:65:1e:80:c3:1a:ce: d0:88:de:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpD2xzPp5aJjh1qOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk MDAwMDk4YjEtMzVhOC00ZDYzLWI5MGItMzE4YWQxZDU4MWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPfrpyZu+dVzwcEZwaegrpiR8cSnmyDb86yV wpqc6f9afcALBzU8tRmsM9toz+kEquHCsjkdPhwozXcj9R3EroeixUVXXkOwLQWd 84KS15IRY5qlIDXsZnWqSJRdpm077COmgF3K5pgmexzAZ0xKoIEU8BcG4HGt1mHu RFU3h0cDew0EShcNjFXwTzVHHnclZourHnDkhYFynFUlogdreWRmOtux9cuzBcHa S0OCESotvgKZ1c4/ql8/Gz6bPav+ADE9Wl6/7sHW8Ssgla+NjfBEfqpfx/WqkDjo 6P7Wl+VkWnsAAAG5cGmUZXVvadEM8x1kjcAt3uTZnfeI+yqxrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDF0u1Q2Mcb1wv5Kq1bHcTz9lMmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmFmZDRlMDktMGUzMC0z YjJiLTlhM2ItZjgxNDkzMDEyNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCSDBlYSIATNjhG4VmyrK/uZHalh5YifxB93FiOymhlgb5hZNs/qxOG uICe+fBC6wVm6TQ75/92GnRQnZTlJ/Vm6S+NxghW5aWUSLhSqiGaE15tYaHGk9sp Q04sPAUaRm4ZFj1fLXKd0OidLCdqqwNEjdZ8rPbiywm+AKUkumMQyRnsX9lafXfP 4y2mEMG/b+PEk63oNJXafkj9UvfTj8qVNnvmhIxX3QIEUdchy1TkMKgj6fHy+69x 8MW7bU7QDiGLFS3zYVE9XMSr2AaHAe8Hyx9Kmua75ArecvQRojjBGjzOv0gy46oB 3nna0FDalW5rumYKml1lHoDDGs7QiN6c -----END CERTIFICATE-----Generated at Mon Jun 30 05:35:05 2025 by rpki-client