$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139b212b-4391-3447-a68e-f4fa684c76b1.roa File: 139b212b-4391-3447-a68e-f4fa684c76b1.roa (raw, json) Hash identifier: kbEBkhOAzKAhY6kK30LNSYzP/d4pVhE6dEuvcE2XhVE= Subject key identifier: 8A:AB:CB:B6:71:EB:90:A1:5D:E8:66:6E:B8:5F:BC:CD:03:B4:E8:59 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848B4C0F05193E08DB282D7BD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139b212b-4391-3447-a68e-f4fa684c76b1.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 40647 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f0:51:93:e0:8d:b2:82:d7:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=a6d41a4a-9de1-455c-a91f-f74ce6112431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:91:45:a3:5b:f9:12:0d:3e:0b:60:8c:d2:4f: 17:4c:67:16:94:4f:3e:d1:5f:95:ce:56:f9:aa:03: 5c:97:47:28:59:c5:4e:31:d8:61:16:55:30:c8:55: 79:a6:9b:82:57:8d:2b:54:25:3d:0c:07:9d:2f:6a: 9a:20:3a:7a:1d:f8:b9:1f:9d:6b:8c:00:6d:b1:9f: d7:f6:9a:78:bc:ea:43:20:02:ea:1c:a8:bf:82:4d: cb:1d:8a:fc:2d:58:f6:01:19:eb:32:10:11:10:fc: 52:80:8f:24:4f:ee:d3:63:ba:f8:32:14:16:f2:29: 8a:dd:e6:14:66:ed:fd:79:9d:42:91:19:b3:db:a6: 39:bb:b8:1b:25:a0:89:9f:93:f8:d6:22:77:80:49: 84:b2:11:b4:76:a3:0a:d2:2d:d9:6a:84:0f:d9:1e: 35:b8:c5:a3:06:c2:c6:23:25:64:19:61:31:0d:86: 0f:47:55:14:e0:76:d2:24:82:d3:c5:65:5b:a4:07: d6:52:41:ea:ac:da:c8:28:8b:01:d8:19:e0:16:c7: f6:23:7f:18:70:f0:b1:0f:0a:1b:2a:6b:f1:97:8f: 9c:8d:12:01:69:98:bd:71:48:9a:1c:13:14:89:71: 0a:a4:5f:77:0b:20:a3:8f:05:6f:d5:a1:c7:f5:bb: 18:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AB:CB:B6:71:EB:90:A1:5D:E8:66:6E:B8:5F:BC:CD:03:B4:E8:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139b212b-4391-3447-a68e-f4fa684c76b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:1a:e8:97:8f:8b:6f:70:20:62:87:a6:94:4e:56:15:6f:23: 13:e1:78:1f:a2:80:11:8f:46:37:e8:a7:ef:5d:51:bf:27:cd: cc:33:6b:c6:08:b0:59:17:6a:ba:31:4f:07:b6:0b:a3:40:41: c7:11:64:de:4f:90:93:a8:c8:7f:50:f4:8d:84:e3:3a:eb:06: f8:12:4f:1e:6d:d0:f0:e9:17:17:f8:2f:65:1e:09:4c:d0:24: 9a:50:c3:9c:64:4c:50:cb:21:a4:53:8a:e5:78:5a:3a:b0:c2: 39:cc:90:e9:e1:05:63:35:b9:1f:76:a2:99:1f:5c:df:72:44: 82:18:f1:8f:65:26:6c:83:88:24:95:6b:5a:c6:c1:b3:42:ab: cb:92:9a:c8:85:80:40:50:01:4c:d9:1a:ba:9b:31:4e:35:08: 52:61:c9:88:69:88:8b:81:92:0a:ef:b1:e1:da:18:6c:8a:0f: 4e:a3:44:e2:f4:5f:dc:f4:b5:af:de:0d:e4:bb:45:cf:27:da: d5:68:27:76:9a:19:97:28:a2:4d:5d:1d:3a:c4:9d:89:95:d9: 92:ee:46:b3:c2:12:9a:37:6a:12:13:ea:17:15:1f:3a:f7:ca: 5b:d1:e4:19:9b:3d:5c:17:78:4f:0e:1b:1f:83:39:0a:0f:87: 29:75:16:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi0wPBRk+CNsoLXvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YTZkNDFhNGEtOWRlMS00NTVjLWE5MWYtZjc0Y2U2MTEyNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZFFo1v5Eg0+C2CM0k8XTGcWlE8+0V+Vzlb5 qgNcl0coWcVOMdhhFlUwyFV5ppuCV40rVCU9DAedL2qaIDp6Hfi5H51rjABtsZ/X 9pp4vOpDIALqHKi/gk3LHYr8LVj2ARnrMhAREPxSgI8kT+7TY7r4MhQW8imK3eYU Zu39eZ1CkRmz26Y5u7gbJaCJn5P41iJ3gEmEshG0dqMK0i3ZaoQP2R41uMWjBsLG IyVkGWExDYYPR1UU4HbSJILTxWVbpAfWUkHqrNrIKIsB2BngFsf2I38YcPCxDwob Kmvxl4+cjRIBaZi9cUiaHBMUiXEKpF93CyCjjwVv1aHH9bsYYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIqry7Zx65ChXehmbrhfvM0DtOhZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTM5YjIxMmItNDM5MS0z NDQ3LWE2OGUtZjRmYTY4NGM3NmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+GuiXj4tvcCBih6aUTlYVbyMT4XgfooARj0Y36KfvXVG/J83MM2vG CLBZF2q6MU8HtgujQEHHEWTeT5CTqMh/UPSNhOM66wb4Ek8ebdDw6RcX+C9lHglM 0CSaUMOcZExQyyGkU4rleFo6sMI5zJDp4QVjNbkfdqKZH1zfckSCGPGPZSZsg4gk lWtaxsGzQqvLkprIhYBAUAFM2Rq6mzFONQhSYcmIaYiLgZIK77Hh2hhsig9Oo0Ti 9F/c9LWv3g3ku0XPJ9rVaCd2mhmXKKJNXR06xJ2JldmS7kazwhKaN2oSE+oXFR86 98pb0eQZmz1cF3hPDhsfgzkKD4cpdRbV -----END CERTIFICATE-----Generated at Sat Apr 12 00:22:35 2025 by rpki-client