$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf4ea181-5d26-3c82-a564-c8b559cfa180.roa File: bf4ea181-5d26-3c82-a564-c8b559cfa180.roa (raw, json) Hash identifier: qV0RfjEBejo1YPsM8d48IQDt+yFfmHQHBqU4JBTx2so= Subject key identifier: 86:97:3D:C0:46:70:BB:E1:9C:0A:F3:2B:79:4B:CE:40:D0:64:25:E0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE031A2F0C226999F245B5900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf4ea181-5d26-3c82-a564-c8b559cfa180.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 36624 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:a2:f0:c2:26:99:9f:24:5b:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=6b7b5cd6-a99e-40f2-a19b-95516a221289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:be:60:34:15:4c:71:40:a7:8a:18:77:0a: d1:d7:a3:d5:9c:7e:56:8c:f0:8f:58:88:76:ef:fe: c5:14:f6:9d:cc:99:28:52:a6:4f:63:6c:77:04:ea: eb:c8:df:61:03:01:0a:b6:e2:78:9e:0a:5a:6b:35: 91:2d:6a:86:2e:1c:4a:5a:e8:20:42:9a:9c:fd:b9: ca:14:e4:95:f4:85:76:23:e6:01:53:0d:50:9d:19: ac:9c:f9:39:05:e4:1c:72:d2:0f:47:4f:b6:9d:af: 92:b9:1a:79:18:fe:b9:84:0a:1a:a3:e4:5e:50:5d: cb:39:e0:eb:e8:ba:24:60:98:9b:4c:77:c9:18:ac: 3a:08:79:8f:09:bf:7f:bd:93:a9:28:a4:8f:c1:86: c4:7c:c5:88:b8:5b:5e:6f:20:54:8b:f0:8d:f3:77: c3:9c:74:50:42:05:b2:e7:ff:6e:86:c0:60:06:74: 55:a6:8c:d7:85:48:ac:6c:5b:5a:35:90:be:1f:80: 24:6b:20:bd:b9:cc:f2:8f:87:f6:72:70:3a:93:dd: ac:4c:57:7c:27:b6:83:4b:89:af:57:95:a8:db:95: c6:31:26:c4:8a:8e:e0:b1:47:59:fc:c7:ed:b2:a0: 7c:72:85:e9:83:33:1d:96:4e:ff:60:67:a1:d0:b6: f8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:97:3D:C0:46:70:BB:E1:9C:0A:F3:2B:79:4B:CE:40:D0:64:25:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf4ea181-5d26-3c82-a564-c8b559cfa180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c1:95:be:a8:ad:f5:4d:c8:d3:e9:a3:f0:81:4c:8a:2b:25: d9:5f:ef:a3:57:e6:ae:32:69:0a:bf:cb:7c:33:e3:fe:4a:11: 25:c6:8b:65:18:ed:df:0d:e8:3d:f3:17:2b:65:e5:88:8d:21: 2d:fc:28:78:ea:42:39:97:82:66:83:55:99:c9:de:7f:52:f9: a2:72:44:78:ec:4f:85:a3:fc:fb:f6:29:f3:d3:07:21:dc:5d: ca:b5:af:56:86:2a:ce:c9:01:11:16:55:62:97:b8:b7:a2:d3: b6:ea:6b:a0:9f:22:31:a0:11:38:67:2a:d9:d2:45:a9:7d:b2: 50:e1:97:13:bc:ec:ce:9f:74:db:c6:2d:64:ea:d3:e3:7e:d0: 1c:f9:52:7b:18:f6:43:db:5f:b2:da:ac:b4:23:8c:1f:ea:72: 8a:fb:32:30:7f:a8:90:1b:db:9a:e3:e3:69:b4:44:76:d2:1c: 6b:60:77:6a:4a:b3:e0:be:10:e3:fc:55:77:a0:1a:05:0a:5f: d1:97:a1:ef:27:44:80:d5:e5:dd:a4:f3:fa:13:1b:f5:c4:59: ac:7d:e0:f9:b8:b1:98:e9:72:fa:c6:7c:96:47:f8:e2:07:13: 60:29:e2:3e:0b:3d:f9:cf:88:5e:61:80:b2:89:e4:7f:13:ca: 2f:7e:81:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErgMaLwwiaZnyRbWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk NmI3YjVjZDYtYTk5ZS00MGYyLWExOWItOTU1MTZhMjIxMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgO+YDQVTHFAp4oYdwrR16PVnH5WjPCPWIh2 7/7FFPadzJkoUqZPY2x3BOrryN9hAwEKtuJ4ngpaazWRLWqGLhxKWuggQpqc/bnK FOSV9IV2I+YBUw1QnRmsnPk5BeQcctIPR0+2na+SuRp5GP65hAoao+ReUF3LOeDr 6LokYJibTHfJGKw6CHmPCb9/vZOpKKSPwYbEfMWIuFtebyBUi/CN83fDnHRQQgWy 5/9uhsBgBnRVpozXhUisbFtaNZC+H4AkayC9uczyj4f2cnA6k92sTFd8J7aDS4mv V5Wo25XGMSbEio7gsUdZ/MftsqB8coXpgzMdlk7/YGeh0Lb4mQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIaXPcBGcLvhnArzK3lLzkDQZCXgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY0ZWExODEtNWQyNi0z YzgyLWE1NjQtYzhiNTU5Y2ZhMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAswZW+qK31TcjT6aPwgUyKKyXZX++jV+auMmkKv8t8M+P+ShElxotl GO3fDeg98xcrZeWIjSEt/Ch46kI5l4Jmg1WZyd5/UvmickR47E+Fo/z79inz0wch 3F3Kta9WhirOyQERFlVil7i3otO26mugnyIxoBE4ZyrZ0kWpfbJQ4ZcTvOzOn3Tb xi1k6tPjftAc+VJ7GPZD21+y2qy0I4wf6nKK+zIwf6iQG9ua4+NptER20hxrYHdq SrPgvhDj/FV3oBoFCl/Rl6HvJ0SA1eXdpPP6Exv1xFmsfeD5uLGY6XL6xnyWR/ji BxNgKeI+Cz35z4heYYCyieR/E8ovfoEG -----END CERTIFICATE-----Generated at Sat Aug 23 15:07:25 2025 by rpki-client