$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f18efcb5-e379-3985-a866-14847afbbdd2.roa File: f18efcb5-e379-3985-a866-14847afbbdd2.roa (raw, json) Hash identifier: 1o4pAyxCzxKtuGTUbWuQpIOmzLp74jvY2QTjBa8I8Hw= Subject key identifier: CC:D2:71:7A:FA:7F:A2:4C:28:09:0F:0E:86:4B:66:16:E6:18:FD:18 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AC9DBB6FC1CACD560B0E86680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f18efcb5-e379-3985-a866-14847afbbdd2.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 396543 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:b6:fc:1c:ac:d5:60:b0:e8:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=fc2d799f-5e0b-4ada-b353-c8f1db4232cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:ca:63:3a:b2:9e:27:c1:fd:10:83:12:e8: 4b:46:c0:03:8b:28:4d:1d:8e:c8:56:34:98:6c:ea: 0d:90:5e:bf:e4:84:37:42:af:37:96:99:e2:b5:69: b7:be:91:bd:e6:50:50:0e:2b:65:85:c7:be:7c:4b: 4c:8d:08:5f:36:d7:a5:79:07:13:27:83:ab:32:90: 30:a7:1a:ff:20:c5:02:fe:3f:b5:0a:33:a3:42:88: 2e:c2:c2:01:bf:7d:e8:7f:62:c7:3b:c3:89:06:83: 0e:f8:9a:d0:2d:3d:59:fc:03:55:aa:ee:21:fe:f9: 46:36:ad:1f:af:d4:b4:11:e6:67:7c:18:42:43:57: 2e:a1:32:19:d3:3a:79:7d:ec:2b:0b:f4:c7:65:35: 4e:65:17:e0:95:6c:e4:27:b7:ae:95:33:9f:08:d7: 2c:32:6e:87:e8:2a:36:ac:c9:02:df:2c:db:b2:08: f8:20:81:1a:0d:c6:8d:7c:66:ac:94:2d:b6:f0:88: fe:a9:0a:20:78:b1:fc:22:7b:22:85:b7:ba:73:ce: 36:03:4e:6c:8f:f9:60:c4:40:63:4a:bc:b3:4b:4d: 5b:61:3f:07:1f:86:0e:d9:44:fb:85:df:5d:4f:87: a9:96:31:41:56:80:60:95:7a:5b:d8:61:44:0e:1f: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D2:71:7A:FA:7F:A2:4C:28:09:0F:0E:86:4B:66:16:E6:18:FD:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f18efcb5-e379-3985-a866-14847afbbdd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:01:eb:46:01:7a:66:78:8a:9d:57:23:cf:b8:20:4d:96:ea: a7:05:42:86:4c:54:fb:8b:2d:fc:df:8c:d2:2f:1f:e1:a8:30: a8:8f:03:21:65:b1:d9:1a:d4:23:75:9e:78:f5:de:e1:af:7c: c9:b6:31:27:49:4d:02:4a:2e:e5:01:e2:18:ba:3f:d3:7f:5b: 22:a8:7e:bd:f2:05:1f:62:48:ee:64:f6:2d:7c:7e:cf:44:8f: bb:b8:8d:d7:e2:7f:cd:f0:91:7b:6f:61:9c:6f:a5:d2:b6:8c: bd:39:0d:58:3d:53:fb:2e:47:c5:15:dd:7e:5c:66:e3:40:dc: 24:76:c0:4c:1d:cc:6d:1d:3d:58:9b:ea:e6:70:f3:06:45:55: 78:94:4c:2a:4d:2c:4e:fe:51:d6:a4:2e:d2:67:7d:47:c3:18: 56:da:f6:0b:af:99:b2:98:e5:a7:9b:2f:87:ca:dc:b0:0c:4f: fb:27:13:5f:49:09:f7:1a:b8:df:17:8f:06:1c:40:c0:06:47: ad:19:13:47:12:ac:e8:ab:93:c9:33:53:34:97:5d:9f:fc:ca: d7:67:b9:69:70:a8:5e:b5:14:cd:e8:a9:90:5f:7b:24:1c:38: 5b:d3:cd:73:23:55:e2:5e:70:f9:c5:3e:8c:f9:0c:ac:b8:c5: ab:3e:cf:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27b8HKzVYLDoZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk ZmMyZDc5OWYtNWUwYi00YWRhLWIzNTMtYzhmMWRiNDIzMmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8jKYzqynifB/RCDEuhLRsADiyhNHY7IVjSY bOoNkF6/5IQ3Qq83lpnitWm3vpG95lBQDitlhce+fEtMjQhfNteleQcTJ4OrMpAw pxr/IMUC/j+1CjOjQoguwsIBv33of2LHO8OJBoMO+JrQLT1Z/ANVqu4h/vlGNq0f r9S0EeZnfBhCQ1cuoTIZ0zp5fewrC/THZTVOZRfglWzkJ7eulTOfCNcsMm6H6Co2 rMkC3yzbsgj4IIEaDcaNfGaslC228Ij+qQogeLH8Insihbe6c842A05sj/lgxEBj SryzS01bYT8HH4YO2UT7hd9dT4epljFBVoBglXpb2GFEDh8F7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzScXr6f6JMKAkPDoZLZhbmGP0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjE4ZWZjYjUtZTM3OS0z OTg1LWE4NjYtMTQ4NDdhZmJiZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkB60YBemZ4ip1XI8+4IE2W6qcFQoZMVPuLLfzfjNIvH+GoMKiPAyFl sdka1CN1nnj13uGvfMm2MSdJTQJKLuUB4hi6P9N/WyKofr3yBR9iSO5k9i18fs9E j7u4jdfif83wkXtvYZxvpdK2jL05DVg9U/suR8UV3X5cZuNA3CR2wEwdzG0dPVib 6uZw8wZFVXiUTCpNLE7+UdakLtJnfUfDGFba9guvmbKY5aebL4fK3LAMT/snE19J CfcauN8XjwYcQMAGR60ZE0cSrOirk8kzUzSXXZ/8ytdnuWlwqF61FM3oqZBfeyQc OFvTzXMjVeJecPnFPoz5DKy4xas+z1o= -----END CERTIFICATE-----Generated at Sat Aug 23 15:02:45 2025 by rpki-client