$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfc00b5f-42c5-3305-a498-7f478563374e.roa File: dfc00b5f-42c5-3305-a498-7f478563374e.roa (raw, json) Hash identifier: zJvBHP+sZzdecNOypHsOAGAo4WJIAwB7MOZQyVzSaLA= Subject key identifier: 88:B8:70:12:42:C9:55:F7:8E:77:DA:1E:4B:EC:BB:EB:E9:50:E2:20 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A58CB0FDF3DCF12F0A3E539E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfc00b5f-42c5-3305-a498-7f478563374e.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 396547 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:0f:df:3d:cf:12:f0:a3:e5:39:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=22a791a4-e42e-4c92-aafe-140c90209c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:f0:34:cc:be:1d:91:d8:3a:9a:78:27:f1: 68:aa:20:32:58:ba:34:8a:eb:5d:20:b9:bf:07:6b: 09:b0:7f:c6:a4:b8:28:b3:6e:23:4c:3b:a2:ee:70: a6:6a:86:fa:c3:a3:92:3c:40:88:0f:2c:8a:56:9a: 0e:e3:75:3e:b4:2e:11:50:d4:8a:50:b3:29:eb:d4: c1:f5:37:7e:61:da:b7:53:09:fd:66:0f:99:73:de: 08:b2:7c:8c:d5:45:c9:d9:da:ff:6a:cf:68:71:ff: e6:f7:3c:d0:c5:74:00:e3:27:3c:c0:ef:d7:ee:19: 81:e4:8d:39:5e:df:7d:d5:9a:55:fd:6f:b2:58:5d: a7:67:38:3f:dd:89:9c:7c:ba:c0:d2:c8:05:a9:1e: 5f:9e:f2:80:6e:4d:0e:d2:6c:ba:78:11:4d:0f:a1: e7:d1:d3:5f:96:46:8a:48:e9:f1:b8:c1:ba:27:bf: 97:d4:9f:b4:48:88:07:69:99:1a:c5:c9:44:85:40: 4d:68:4c:bb:f5:b2:dd:13:05:b1:12:ee:84:84:ca: 39:90:b7:42:20:14:17:1c:a3:22:38:2e:1f:0f:50: 42:ad:27:42:b7:6a:fc:0e:13:e5:55:05:10:e8:ec: 89:74:44:a9:24:9b:80:42:59:0f:3e:c0:79:4a:86: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B8:70:12:42:C9:55:F7:8E:77:DA:1E:4B:EC:BB:EB:E9:50:E2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfc00b5f-42c5-3305-a498-7f478563374e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:28:16:e2:e8:7d:23:34:ee:ea:ac:b7:dc:76:50:4c:e0:f7: a8:23:76:53:20:55:29:1b:f2:a8:15:2f:2a:6a:68:32:82:e5: ff:47:59:ba:f8:0d:bf:8e:bd:76:85:23:87:01:38:3a:c6:33: ba:d1:a1:eb:89:25:13:c7:52:1a:7c:f8:2a:4b:5d:2b:19:d9: e7:62:dc:16:2d:14:bc:70:8e:e5:1e:4c:c7:8f:01:a2:9a:63: 6a:2c:cf:2c:a3:87:45:5a:30:1e:fc:e9:ac:b2:e8:9b:4b:1e: 1f:da:20:de:3a:af:dd:27:51:84:dd:c9:f5:1d:e6:5d:d7:be: 95:ab:e0:0c:78:cd:3e:d4:c7:b2:86:a8:3a:a9:73:7e:48:51: bc:aa:15:b6:29:24:15:a1:0e:78:c3:6d:f9:43:65:2a:a7:f3: be:b9:fa:34:c4:d1:fe:e3:bb:6d:4b:b6:62:af:78:49:5c:34: 06:86:ae:35:bc:20:f2:93:b5:58:d8:46:3e:f8:9e:92:38:ab: 41:48:96:76:4e:85:a8:e9:17:c4:12:85:a6:85:f1:76:2d:8d: a0:2f:06:77:01:77:33:62:04:5d:69:e6:b2:36:5e:a4:e7:00: ee:b0:90:94:a8:a1:cf:85:41:f3:21:76:a7:e0:cc:88:74:0b: c8:42:e0:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpYyw/fPc8S8KPlOeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk MjJhNzkxYTQtZTQyZS00YzkyLWFhZmUtMTQwYzkwMjA5YzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGHwNMy+HZHYOpp4J/FoqiAyWLo0iutdILm/ B2sJsH/GpLgos24jTDui7nCmaob6w6OSPECIDyyKVpoO43U+tC4RUNSKULMp69TB 9Td+Ydq3Uwn9Zg+Zc94IsnyM1UXJ2dr/as9ocf/m9zzQxXQA4yc8wO/X7hmB5I05 Xt991ZpV/W+yWF2nZzg/3YmcfLrA0sgFqR5fnvKAbk0O0my6eBFND6Hn0dNflkaK SOnxuMG6J7+X1J+0SIgHaZkaxclEhUBNaEy79bLdEwWxEu6EhMo5kLdCIBQXHKMi OC4fD1BCrSdCt2r8DhPlVQUQ6OyJdESpJJuAQlkPPsB5SobpGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIi4cBJCyVX3jnfaHkvsu+vpUOIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGZjMDBiNWYtNDJjNS0z MzA1LWE0OTgtN2Y0Nzg1NjMzNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCjKBbi6H0jNO7qrLfcdlBM4PeoI3ZTIFUpG/KoFS8qamgyguX/R1m6 +A2/jr12hSOHATg6xjO60aHriSUTx1IafPgqS10rGdnnYtwWLRS8cI7lHkzHjwGi mmNqLM8so4dFWjAe/OmssuibSx4f2iDeOq/dJ1GE3cn1HeZd176Vq+AMeM0+1Mey hqg6qXN+SFG8qhW2KSQVoQ54w235Q2Uqp/O+ufo0xNH+47ttS7Zir3hJXDQGhq41 vCDyk7VY2EY++J6SOKtBSJZ2ToWo6RfEEoWmhfF2LY2gLwZ3AXczYgRdaeayNl6k 5wDusJCUqKHPhUHzIXan4MyIdAvIQuDJ -----END CERTIFICATE-----Generated at Mon Jun 30 16:49:06 2025 by rpki-client