$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db5ba651-9111-377b-87a8-5da87720f16e.roa File: db5ba651-9111-377b-87a8-5da87720f16e.roa (raw, json) Hash identifier: p0YUB+JiERqjAkv0WC/jQVZ3zgQwO5NdpzRqGCamF5o= Subject key identifier: C8:9E:C9:16:38:8A:62:1F:60:6B:1F:45:79:48:C0:F9:D4:28:47:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C2D53A593BCAF7189CBDE54 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db5ba651-9111-377b-87a8-5da87720f16e.roa Signing time: Tue 24 Jun 2025 12:33:31 +0000 ROA not before: Tue 24 Jun 2025 12:33:31 +0000 ROA not after: Mon 22 Sep 2025 12:33:31 +0000 asID: 396581 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:2d:53:a5:93:bc:af:71:89:cb:de:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 12:33:31 2025 GMT Not After : Sep 22 12:33:31 2025 GMT Subject: CN=776b8791-948c-476a-b1d8-41a2c0501a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:db:3b:9c:71:8f:c8:0c:69:bd:73:30:e1: b8:50:c6:6a:a3:1a:d5:02:57:86:7b:d5:3f:6f:54: c9:72:ae:fc:68:20:20:fe:6e:53:75:70:e1:a0:e2: 84:76:98:17:49:39:d6:9b:44:63:0b:a5:8b:e4:be: 55:86:61:0f:22:bc:e4:8a:96:68:3d:8d:ea:1a:9c: 6b:0f:bc:03:37:24:43:5a:21:f6:76:22:68:29:ad: 1b:ad:c9:84:b0:97:26:bd:43:2b:f1:d1:95:0a:4f: 7c:68:01:83:6f:9d:89:03:ee:18:c5:fd:67:ef:3d: df:42:ac:92:82:36:d5:56:e1:05:4b:ae:db:30:27: 55:52:ce:25:bb:c5:87:48:c3:e0:e2:66:dd:b5:b0: 25:c8:2a:97:1c:62:8f:50:a4:0e:9b:7a:e3:49:0c: 4a:4a:21:df:72:fa:e7:bb:4c:1f:6a:e2:dd:49:c5: f6:31:34:2b:4f:49:fa:87:8d:d9:ba:29:12:c8:b1: 25:f6:3c:83:f3:68:83:ea:90:a4:45:b1:08:ec:16: d0:0a:1e:25:1e:4a:6f:35:36:0f:c5:d1:ba:78:88: e3:e0:d8:9c:c6:07:99:20:67:1a:90:53:7a:26:d1: f6:a0:6b:fb:f9:57:fc:12:56:a4:0a:ed:f4:a7:ae: 79:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9E:C9:16:38:8A:62:1F:60:6B:1F:45:79:48:C0:F9:D4:28:47:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db5ba651-9111-377b-87a8-5da87720f16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:9d:7e:e7:39:ab:ee:69:05:25:e5:4b:1f:74:f2:9b:3c:68: d4:9f:1b:3c:ec:03:95:42:16:15:ae:7f:a1:2a:eb:c0:e7:ed: 0a:b1:5e:2f:a4:0b:e8:f7:96:0d:cc:1c:f6:df:29:7c:eb:e2: 49:b9:93:41:ed:2e:ca:f7:79:89:65:48:5a:66:8b:0e:a8:7a: 25:08:bd:25:fe:ec:c1:f1:8a:60:0c:ec:97:c1:ea:72:9b:7e: 84:bc:96:e6:7b:d8:98:99:ab:85:1e:c1:67:7d:70:55:74:7e: 2b:01:ca:24:ed:20:c9:54:88:aa:70:8c:1e:c1:99:93:e2:71: 56:e0:ba:09:15:e3:79:40:a3:5a:5c:b8:f7:71:e8:03:67:5a: 36:db:9f:b0:ac:b4:a6:c8:fd:b6:58:15:a3:b7:a8:47:82:69: 99:ac:08:c8:f1:df:77:d0:43:57:ee:1a:33:ce:98:1b:3a:2c: e4:2c:e8:dd:31:99:d1:97:99:02:af:e1:0b:b6:bf:80:69:ca: b4:8b:95:6d:ce:45:2f:9d:cd:57:a0:bd:b7:d2:49:45:5f:3f: 30:8c:a7:6e:f6:81:28:26:f5:1e:df:32:fe:b0:f5:cc:19:21: ab:f7:92:88:61:55:c3:84:64:31:57:07:73:1b:a8:3e:d5:33: 8d:18:bb:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMLVOlk7yvcYnL3lQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEyMzMzMVoXDTI1MDkyMjEyMzMzMVowLzEtMCsGA1UEAxMk Nzc2Yjg3OTEtOTQ4Yy00NzZhLWIxZDgtNDFhMmMwNTAxYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3/bO5xxj8gMab1zMOG4UMZqoxrVAleGe9U/ b1TJcq78aCAg/m5TdXDhoOKEdpgXSTnWm0RjC6WL5L5VhmEPIrzkipZoPY3qGpxr D7wDNyRDWiH2diJoKa0brcmEsJcmvUMr8dGVCk98aAGDb52JA+4Yxf1n7z3fQqyS gjbVVuEFS67bMCdVUs4lu8WHSMPg4mbdtbAlyCqXHGKPUKQOm3rjSQxKSiHfcvrn u0wfauLdScX2MTQrT0n6h43ZuikSyLEl9jyD82iD6pCkRbEI7BbQCh4lHkpvNTYP xdG6eIjj4NicxgeZIGcakFN6JtH2oGv7+Vf8ElakCu30p655+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMieyRY4imIfYGsfRXlIwPnUKEdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGI1YmE2NTEtOTExMS0z NzdiLTg3YTgtNWRhODc3MjBmMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKidfuc5q+5pBSXlSx908ps8aNSfGzzsA5VCFhWuf6Eq68Dn7QqxXi+k C+j3lg3MHPbfKXzr4km5k0HtLsr3eYllSFpmiw6oeiUIvSX+7MHximAM7JfB6nKb foS8luZ72JiZq4UewWd9cFV0fisByiTtIMlUiKpwjB7BmZPicVbgugkV43lAo1pc uPdx6ANnWjbbn7CstKbI/bZYFaO3qEeCaZmsCMjx33fQQ1fuGjPOmBs6LOQs6N0x mdGXmQKv4Qu2v4BpyrSLlW3ORS+dzVegvbfSSUVfPzCMp272gSgm9R7fMv6w9cwZ Iav3kohhVcOEZDFXB3MbqD7VM40Yu9M= -----END CERTIFICATE-----Generated at Wed Jul 2 01:59:05 2025 by rpki-client