$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dca37ca7-7be6-3b8f-8dd1-e42725afa15f.roa File: dca37ca7-7be6-3b8f-8dd1-e42725afa15f.roa (raw, json) Hash identifier: 7+aPU83o+rXRYg2DwJk1CzBfSNU/L8V3LrGx+oEL26o= Subject key identifier: 0C:73:8D:CB:DA:20:BF:72:E4:2C:03:8A:06:E4:F9:E4:8F:73:B0:E9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EA79923A5143FC29F9EC5280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dca37ca7-7be6-3b8f-8dd1-e42725afa15f.roa Signing time: Tue 20 May 2025 12:37:56 +0000 ROA not before: Tue 20 May 2025 12:37:56 +0000 ROA not after: Mon 18 Aug 2025 12:37:56 +0000 asID: 22547 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:79:92:3a:51:43:fc:29:f9:ec:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 20 12:37:56 2025 GMT Not After : Aug 18 12:37:56 2025 GMT Subject: CN=838cf709-87e4-4e45-a4a0-ad05e8eeeb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:13:18:09:02:db:3e:4b:0f:37:04:54:77: 59:f3:bc:09:63:3f:c8:ad:97:aa:c2:ae:2e:3b:96: b9:c3:f3:42:bb:1b:77:6c:1f:b6:41:a7:26:4d:e2: c0:f4:b0:0f:9a:3b:0d:68:fb:03:3c:83:fb:27:b0: fa:6b:d8:a5:74:28:64:9a:03:68:c7:3c:fe:97:c1: 66:c8:12:cb:38:1c:f7:b2:ba:ed:c3:d9:60:19:6d: 46:93:de:38:91:84:4d:c9:8d:1f:14:19:6c:55:6f: a3:9d:01:c8:81:bb:10:3a:ab:db:18:7c:e8:1a:44: 07:9f:57:30:42:85:a0:66:8f:50:f2:c4:21:02:f3: ec:b8:de:24:bd:27:b9:5e:f9:ce:91:0b:1c:12:ee: 87:5b:b6:d7:0f:59:63:d5:12:6c:6d:c1:4c:fd:94: 52:8f:e0:f5:ba:64:27:c9:49:9e:81:b9:83:82:7d: 2d:44:91:86:8a:1e:9b:9a:b1:26:50:c6:73:d8:d6: de:26:99:03:9a:3f:b2:bc:d2:e3:4d:4a:95:57:e0: c1:50:70:51:79:3c:24:9d:30:a3:82:c2:a2:0d:79: 1a:4b:d6:28:2a:4d:96:10:b5:2c:b0:e3:e1:ab:ef: 16:65:b7:67:a1:03:42:01:b7:5b:39:cb:eb:46:ab: 70:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:73:8D:CB:DA:20:BF:72:E4:2C:03:8A:06:E4:F9:E4:8F:73:B0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dca37ca7-7be6-3b8f-8dd1-e42725afa15f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f4:1d:fb:c8:82:f9:3b:29:ce:8f:d8:f8:b4:79:93:4c:0d: e0:e9:03:40:20:68:6e:82:bd:10:a3:a4:71:a0:86:af:3a:a6: f8:b2:17:b0:af:a6:59:95:27:84:97:3b:94:bc:5c:c5:a4:64: ad:c1:78:db:56:a9:93:0b:be:40:d9:ff:5d:bd:91:59:87:00: b9:44:cb:b8:30:4d:85:ac:c9:d2:26:42:03:bd:98:88:d3:d8: b5:52:5c:f2:55:61:26:f5:02:3b:8d:36:eb:14:9b:60:30:0c: 01:67:55:0e:bc:9d:69:9c:6f:9b:49:6a:18:ef:d6:82:8d:c4: 4a:7a:bb:89:23:c0:e8:cf:d4:1e:5c:4e:c5:93:89:71:45:2d: 9e:44:99:d9:d8:9f:4d:91:c5:5a:fd:40:69:c7:46:c4:d8:4a: a3:b6:2b:18:cc:91:29:36:68:93:ed:fe:9d:71:5c:82:8c:9b: bd:6e:7c:21:42:e4:14:ad:64:71:4a:59:68:c1:29:fc:d1:52: e0:fa:b0:a7:9e:76:e4:1e:3c:68:c1:9e:0b:f7:49:e9:78:1c: af:84:78:fa:4b:5e:17:b0:2d:ac:1e:e1:f9:8b:9f:6e:0f:7f: 02:97:8f:02:50:1c:fd:2d:46:03:32:4f:85:12:e8:77:30:81: a3:55:9c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqeZI6UUP8KfnsUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMDEyMzc1NloXDTI1MDgxODEyMzc1NlowLzEtMCsGA1UEAxMk ODM4Y2Y3MDktODdlNC00ZTQ1LWE0YTAtYWQwNWU4ZWVlYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsygTGAkC2z5LDzcEVHdZ87wJYz/IrZeqwq4u O5a5w/NCuxt3bB+2QacmTeLA9LAPmjsNaPsDPIP7J7D6a9ildChkmgNoxzz+l8Fm yBLLOBz3srrtw9lgGW1Gk944kYRNyY0fFBlsVW+jnQHIgbsQOqvbGHzoGkQHn1cw QoWgZo9Q8sQhAvPsuN4kvSe5XvnOkQscEu6HW7bXD1lj1RJsbcFM/ZRSj+D1umQn yUmegbmDgn0tRJGGih6bmrEmUMZz2NbeJpkDmj+yvNLjTUqVV+DBUHBReTwknTCj gsKiDXkaS9YoKk2WELUssOPhq+8WZbdnoQNCAbdbOcvrRqtwbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxzjcvaIL9y5CwDigbk+eSPc7DpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGNhMzdjYTctN2JlNi0z YjhmLThkZDEtZTQyNzI1YWZhMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI30HfvIgvk7Kc6P2Pi0eZNMDeDpA0AgaG6CvRCjpHGghq86pviyF7Cv plmVJ4SXO5S8XMWkZK3BeNtWqZMLvkDZ/129kVmHALlEy7gwTYWsydImQgO9mIjT 2LVSXPJVYSb1AjuNNusUm2AwDAFnVQ68nWmcb5tJahjv1oKNxEp6u4kjwOjP1B5c TsWTiXFFLZ5EmdnYn02RxVr9QGnHRsTYSqO2KxjMkSk2aJPt/p1xXIKMm71ufCFC 5BStZHFKWWjBKfzRUuD6sKeeduQePGjBngv3Sel4HK+EePpLXhewLawe4fmLn24P fwKXjwJQHP0tRgMyT4US6HcwgaNVnCA= -----END CERTIFICATE-----Generated at Mon Jun 16 05:31:07 2025 by rpki-client