$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc951d5f-9ad2-36a2-9abe-efceb8af5211.roa File: cc951d5f-9ad2-36a2-9abe-efceb8af5211.roa (raw, json) Hash identifier: nkMBNagbFBYWm7PEy+smClfbdDwnnwDNZ4Nd99PsMz8= Subject key identifier: 9C:30:AC:56:6A:A4:39:C1:77:A3:F9:72:6B:2C:5D:E7:8F:93:96:40 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5335B07141EE77DFAF0AE080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc951d5f-9ad2-36a2-9abe-efceb8af5211.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 396560 IP address blocks: 192.42.174.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:b0:71:41:ee:77:df:af:0a:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=9cfe8459-0937-4edb-b458-be2957bf388c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:e6:8d:89:d3:8b:f5:1c:24:94:e4:46:1e: 76:b4:94:2a:9b:75:56:4d:10:e2:a3:f2:1e:a5:cb: 4e:c1:93:14:2a:dd:69:57:56:e3:7b:a0:a9:ee:5c: 6c:7d:00:e8:b5:9e:9f:58:ac:ac:a9:48:f6:f4:53: 54:a2:bd:43:81:af:bd:6a:8e:24:cf:58:a1:3f:f8: db:d8:1a:e1:52:73:50:0a:f3:e4:63:60:2b:cf:91: 1a:02:c7:d0:61:cb:a3:e6:01:5f:1e:37:2f:3a:39: ad:47:3d:d7:4f:b5:1b:16:bc:ec:40:bc:ff:9d:a3: 2e:c0:99:9e:50:22:25:b1:ba:f7:a8:4a:d4:13:ff: 77:7b:db:86:1c:8c:d5:35:88:10:f8:48:c1:58:cf: 68:15:b7:cf:00:a8:54:fe:15:43:52:40:48:74:9d: ed:13:59:0b:8e:1d:ef:da:24:40:9a:36:59:e5:8e: cb:80:32:29:26:63:5d:8e:31:c6:db:04:a9:8c:f7: 2f:43:b9:5d:3c:70:23:c1:41:26:14:8a:90:f4:88: eb:65:cf:d2:b8:f2:36:dd:b7:85:bc:e7:a3:b0:f3: 00:63:02:17:40:f1:2c:90:90:9a:4e:be:01:22:51: 2a:be:04:36:af:61:a9:ba:aa:a1:67:86:73:67:30: d7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:30:AC:56:6A:A4:39:C1:77:A3:F9:72:6B:2C:5D:E7:8F:93:96:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc951d5f-9ad2-36a2-9abe-efceb8af5211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:1e:9e:5b:f2:56:f6:92:21:68:f4:d9:43:58:a2:19:f9:6f: 09:54:c3:91:d7:08:82:f9:b1:97:91:de:ae:ff:f5:e3:b5:de: 1b:7b:cb:5e:f4:b5:6e:59:7b:24:7e:e8:c4:37:d5:60:1d:75: 53:43:f3:72:08:eb:13:bf:03:f6:3e:ca:2d:d9:33:0e:6c:ae: 0b:3e:01:5b:f9:cc:0e:39:b3:86:34:f4:9e:be:12:cb:b6:7d: c9:f9:06:ba:56:e9:c3:fa:25:ac:37:b3:1e:df:8e:44:3e:80: c9:01:f7:44:f2:91:9a:71:3d:38:70:77:19:a6:0c:27:22:f9: 32:f6:ff:d4:c0:af:cc:35:11:45:78:1e:d3:f3:b5:3f:72:2f: 1a:25:99:f2:62:5e:1a:94:3e:de:1d:25:06:f2:d8:18:da:32: de:e2:5b:61:cb:1b:9f:22:9a:05:d2:5e:65:b5:9d:4e:e9:5c: 1b:2e:cb:35:41:5d:be:ad:c8:0b:9b:4a:3b:c6:7c:a1:c2:6a: 78:bb:1b:e4:c6:f8:da:42:2e:14:be:7f:c7:32:82:4a:3a:c9: 19:47:e2:b7:bd:54:d4:96:ca:fa:1d:64:b8:91:13:82:08:8b: c5:1c:4c:2d:93:05:40:63:e7:f9:71:88:b4:67:5b:a7:13:b2: ca:98:b9:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpTNbBxQe53368K4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk OWNmZTg0NTktMDkzNy00ZWRiLWI0NTgtYmUyOTU3YmYzODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4LmjYnTi/UcJJTkRh52tJQqm3VWTRDio/Ie pctOwZMUKt1pV1bje6Cp7lxsfQDotZ6fWKysqUj29FNUor1Dga+9ao4kz1ihP/jb 2BrhUnNQCvPkY2Arz5EaAsfQYcuj5gFfHjcvOjmtRz3XT7UbFrzsQLz/naMuwJme UCIlsbr3qErUE/93e9uGHIzVNYgQ+EjBWM9oFbfPAKhU/hVDUkBIdJ3tE1kLjh3v 2iRAmjZZ5Y7LgDIpJmNdjjHG2wSpjPcvQ7ldPHAjwUEmFIqQ9IjrZc/SuPI23beF vOejsPMAYwIXQPEskJCaTr4BIlEqvgQ2r2GpuqqhZ4ZzZzDXlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJwwrFZqpDnBd6P5cmssXeePk5ZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2M5NTFkNWYtOWFkMi0z NmEyLTlhYmUtZWZjZWI4YWY1MjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCtHp5b8lb2kiFo9NlDWKIZ+W8JVMOR1wiC+bGXkd6u//Xjtd4be8te 9LVuWXskfujEN9VgHXVTQ/NyCOsTvwP2Psot2TMObK4LPgFb+cwOObOGNPSevhLL tn3J+Qa6VunD+iWsN7Me345EPoDJAfdE8pGacT04cHcZpgwnIvky9v/UwK/MNRFF eB7T87U/ci8aJZnyYl4alD7eHSUG8tgY2jLe4lthyxufIpoF0l5ltZ1O6VwbLss1 QV2+rcgLm0o7xnyhwmp4uxvkxvjaQi4Uvn/HMoJKOskZR+K3vVTUlsr6HWS4kROC CIvFHEwtkwVAY+f5cYi0Z1unE7LKmLnI -----END CERTIFICATE-----Generated at Tue Jul 1 20:38:43 2025 by rpki-client