$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1b4c6-55dc-35af-b992-4101ab414964.roa File: 3fa1b4c6-55dc-35af-b992-4101ab414964.roa (raw, json) Hash identifier: nHZm5ceGu/rSi5kP50pikVXIddi5qTjFBPMgUZ9fNec= Subject key identifier: 6C:A6:8A:E9:19:59:73:E7:D3:9A:A9:5B:06:EA:3F:5B:69:76:03:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AC9DBB34884CBFA6A55C7BC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1b4c6-55dc-35af-b992-4101ab414964.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 396590 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:b3:48:84:cb:fa:6a:55:c7:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=8d108275-d9ff-4d48-9ad0-efed1e064579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5c:0a:c0:44:9c:5e:b4:5a:a4:6e:ca:27:c8: 2a:68:1f:b5:bc:36:8e:9e:b7:8f:83:3f:ea:55:f6: 2d:03:6d:8c:36:ba:ac:20:05:d1:1d:37:c1:b2:df: 4e:d6:7d:e7:4c:18:92:60:e1:84:d7:90:3d:7f:79: 72:18:2d:c6:ed:b4:96:56:06:7d:90:91:e4:b9:d5: 38:b4:a6:4a:85:d0:f2:10:4a:76:6b:e6:5e:56:b1: f2:e9:7b:a6:98:b3:48:3f:86:33:90:de:3f:4b:e0: 79:c3:07:7d:0f:5a:5b:f1:57:79:af:96:89:b5:c1: f5:d4:89:95:50:d1:ec:a2:70:a6:f0:22:33:d1:b6: a1:ec:af:4f:68:3b:6a:64:ec:b0:ee:56:36:47:75: c5:e0:6e:3d:4a:89:3b:23:d0:ca:73:e4:be:10:ae: 74:30:48:61:07:d3:0c:ad:14:41:57:38:54:b6:de: 7d:b5:e2:c3:33:0e:27:b5:8e:0f:1b:e9:f7:48:8e: 0c:16:4f:c9:c1:57:08:03:b5:69:ce:0d:08:d0:0b: f6:c5:26:97:66:56:d5:80:1f:42:a1:96:f5:2f:c8: 7e:ea:b5:ad:3e:56:92:30:e1:be:95:f2:bb:81:e3: 7c:bc:89:62:6f:a1:62:44:43:a0:b0:45:01:09:e4: 79:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A6:8A:E9:19:59:73:E7:D3:9A:A9:5B:06:EA:3F:5B:69:76:03:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1b4c6-55dc-35af-b992-4101ab414964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a2:d6:6c:14:09:fe:08:b6:7c:e1:6c:2a:91:07:9a:14:17: 89:54:41:a4:a7:52:3b:87:2c:6b:cf:6c:53:90:c1:0b:49:12: 18:18:bc:b2:ba:f6:d3:59:26:3f:c8:1e:0b:20:ea:b1:93:b5: b3:08:53:85:21:bb:1d:2d:90:51:40:fa:73:fc:aa:89:60:59: 84:4f:f5:3c:c2:ab:95:cf:1d:fa:59:00:f2:54:8b:dd:b5:4c: ff:5d:8e:d5:41:0d:af:4a:5d:f9:e9:03:19:77:96:d2:0b:81: a2:2d:7a:a5:96:78:be:8c:b3:32:2d:5a:bf:8e:2b:f6:dc:bd: f3:dd:37:b6:df:55:04:a1:e5:ea:56:22:0b:2f:8c:50:87:d7: 6f:9c:22:06:d3:78:03:15:6f:9b:cf:44:74:6b:c1:8c:4e:a0: 89:22:ce:6e:50:aa:09:91:04:4f:5a:f3:d0:05:fe:4c:bf:40: c8:11:89:c0:c6:06:23:73:b3:96:67:9a:65:d0:67:cc:07:ca: ee:83:66:53:b3:9d:f4:05:51:d5:33:cc:5e:04:2f:b1:23:7e: 81:c4:ca:82:25:f1:c4:50:ae:0c:50:1d:c0:2c:09:e0:62:55: 60:bd:6c:f2:e4:48:ce:ef:e9:07:f3:d5:bf:13:f6:38:1c:70: c3:16:09:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27NIhMv6alXHvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk OGQxMDgyNzUtZDlmZi00ZDQ4LTlhZDAtZWZlZDFlMDY0NTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVwKwEScXrRapG7KJ8gqaB+1vDaOnrePgz/q VfYtA22MNrqsIAXRHTfBst9O1n3nTBiSYOGE15A9f3lyGC3G7bSWVgZ9kJHkudU4 tKZKhdDyEEp2a+ZeVrHy6XummLNIP4YzkN4/S+B5wwd9D1pb8Vd5r5aJtcH11ImV UNHsonCm8CIz0bah7K9PaDtqZOyw7lY2R3XF4G49Sok7I9DKc+S+EK50MEhhB9MM rRRBVzhUtt59teLDMw4ntY4PG+n3SI4MFk/JwVcIA7Vpzg0I0Av2xSaXZlbVgB9C oZb1L8h+6rWtPlaSMOG+lfK7geN8vIlib6FiREOgsEUBCeR5KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGymiukZWXPn05qpWwbqP1tpdgP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2ZhMWI0YzYtNTVkYy0z NWFmLWI5OTItNDEwMWFiNDE0OTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWi1mwUCf4ItnzhbCqRB5oUF4lUQaSnUjuHLGvPbFOQwQtJEhgYvLK6 9tNZJj/IHgsg6rGTtbMIU4Uhux0tkFFA+nP8qolgWYRP9TzCq5XPHfpZAPJUi921 TP9djtVBDa9KXfnpAxl3ltILgaIteqWWeL6MszItWr+OK/bcvfPdN7bfVQSh5epW IgsvjFCH12+cIgbTeAMVb5vPRHRrwYxOoIkizm5QqgmRBE9a89AF/ky/QMgRicDG BiNzs5ZnmmXQZ8wHyu6DZlOznfQFUdUzzF4EL7EjfoHEyoIl8cRQrgxQHcAsCeBi VWC9bPLkSM7v6Qfz1b8T9jgccMMWCdI= -----END CERTIFICATE-----Generated at Fri Aug 8 19:29:43 2025 by rpki-client