$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e9ef7fc-e82d-3f3c-946a-5b80c52db989.roa File: 3e9ef7fc-e82d-3f3c-946a-5b80c52db989.roa (raw, json) Hash identifier: 1i5uMSk3GiKj6dyqivy7eTAs2qJvMWB4Ikl4+hIH0SE= Subject key identifier: 07:B3:73:5C:9B:52:2B:6A:EE:F8:76:1C:63:E9:36:E7:52:FE:E7:06 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AADE2EE5BBA928967DDCF0800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e9ef7fc-e82d-3f3c-946a-5b80c52db989.roa Signing time: Tue 29 Jul 2025 12:32:51 +0000 ROA not before: Tue 29 Jul 2025 12:32:51 +0000 ROA not after: Mon 27 Oct 2025 12:32:51 +0000 asID: 396570 IP address blocks: 192.82.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:e2:ee:5b:ba:92:89:67:dd:cf:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 12:32:51 2025 GMT Not After : Oct 27 12:32:51 2025 GMT Subject: CN=b90d2cb2-784f-4290-974e-a723ce3e535b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:1b:6d:4a:77:82:73:7a:97:b8:69:9e:f9: f9:21:55:6d:67:0e:c3:96:f7:f4:62:f3:80:9f:94: b1:92:ed:d6:54:fa:9a:9d:c1:e9:f9:bc:f0:79:0d: c3:3a:05:64:e3:de:3d:21:28:30:ee:ec:cf:30:49: 06:a0:b8:45:d2:d6:2c:7f:24:92:39:53:99:75:30: ac:dd:57:69:2a:c1:50:10:40:5c:db:03:81:d9:23: b6:35:e0:fb:ae:07:3a:60:66:16:65:26:31:ef:02: e7:66:e2:58:dd:fc:c2:2a:07:1e:44:07:18:d2:4a: f3:df:4c:45:38:fc:10:67:2b:d5:98:eb:47:fa:2e: 7d:c5:12:ab:9b:d8:a8:99:d0:5e:53:9a:bb:0d:c8: a7:26:02:25:be:9c:ce:79:a2:ac:60:f2:e6:32:de: 55:01:7a:db:40:00:9e:00:9b:2e:ea:4a:8e:8f:9b: de:79:ce:1b:e9:24:8a:da:8f:2a:65:36:5a:c2:cb: f6:36:26:cc:d6:f4:ec:db:c8:09:99:b3:74:ba:d6: e6:7b:61:4e:ee:e8:64:be:f3:96:b2:d9:42:d2:b7: de:7c:83:6c:89:08:fd:f1:7d:7c:47:e8:9b:7d:15: d3:3d:85:f1:66:1b:fe:db:81:c4:f0:be:c0:15:21: 01:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B3:73:5C:9B:52:2B:6A:EE:F8:76:1C:63:E9:36:E7:52:FE:E7:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e9ef7fc-e82d-3f3c-946a-5b80c52db989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d4:39:c4:97:cf:1b:26:e1:b7:65:e6:ca:3a:1e:c5:95:99: 40:93:d6:ab:a1:3c:6b:63:b0:3d:ce:78:c6:f9:30:4a:d1:e3: 58:42:d9:46:cf:ec:11:9f:55:0a:2d:5d:20:e6:5c:61:51:08: b2:80:14:29:da:71:30:2c:b2:b2:50:d2:ea:64:9e:94:ca:98: cf:93:a5:de:8d:43:31:a2:c5:51:26:cb:a1:87:de:a5:c1:45: 80:c0:5f:37:50:8f:50:c3:80:58:71:d4:f5:42:ef:b9:f7:8f: 96:57:94:1a:e5:cc:8a:34:69:ae:31:ad:2d:2e:12:d9:6d:f1: fb:ff:4c:d8:02:94:d1:2d:7e:b9:64:f7:fc:6c:2c:55:b3:cb: 4e:5e:b4:d0:05:fc:59:f0:b6:14:16:4b:dc:d7:50:c4:99:55: d0:b1:5e:09:34:cb:91:24:a2:2c:41:c1:8f:d7:44:c8:d5:8f: 4a:59:46:1d:a9:a1:77:84:e1:ec:41:de:67:74:bc:14:02:1b: 31:f7:ee:4a:3d:f4:82:78:ab:bb:9b:60:70:30:b2:09:eb:3c: 6a:56:c1:b0:e7:ba:48:e5:8c:10:83:02:4c:58:46:8c:95:19: a7:9b:46:af:a3:80:14:09:1f:32:2d:e2:c7:fb:12:de:18:50: 61:c7:27:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt4u5bupKJZ93PCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyOTEyMzI1MVoXDTI1MTAyNzEyMzI1MVowLzEtMCsGA1UEAxMk YjkwZDJjYjItNzg0Zi00MjkwLTk3NGUtYTcyM2NlM2U1MzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVMbbUp3gnN6l7hpnvn5IVVtZw7Dlvf0YvOA n5Sxku3WVPqancHp+bzweQ3DOgVk4949ISgw7uzPMEkGoLhF0tYsfySSOVOZdTCs 3VdpKsFQEEBc2wOB2SO2NeD7rgc6YGYWZSYx7wLnZuJY3fzCKgceRAcY0krz30xF OPwQZyvVmOtH+i59xRKrm9iomdBeU5q7DcinJgIlvpzOeaKsYPLmMt5VAXrbQACe AJsu6kqOj5veec4b6SSK2o8qZTZawsv2NibM1vTs28gJmbN0utbme2FO7uhkvvOW stlC0rfefINsiQj98X18R+ibfRXTPYXxZhv+24HE8L7AFSEBrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAezc1ybUitq7vh2HGPpNudS/ucGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2U5ZWY3ZmMtZTgyZC0z ZjNjLTk0NmEtNWI4MGM1MmRiOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbUOcSXzxsm4bdl5so6HsWVmUCT1quhPGtjsD3OeMb5MErR41hC2UbP 7BGfVQotXSDmXGFRCLKAFCnacTAssrJQ0upknpTKmM+Tpd6NQzGixVEmy6GH3qXB RYDAXzdQj1DDgFhx1PVC77n3j5ZXlBrlzIo0aa4xrS0uEtlt8fv/TNgClNEtfrlk 9/xsLFWzy05etNAF/FnwthQWS9zXUMSZVdCxXgk0y5EkoixBwY/XRMjVj0pZRh2p oXeE4exB3md0vBQCGzH37ko99IJ4q7ubYHAwsgnrPGpWwbDnukjljBCDAkxYRoyV GaebRq+jgBQJHzIt4sf7Et4YUGHHJ3k= -----END CERTIFICATE-----Generated at Tue Aug 5 16:40:02 2025 by rpki-client