$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b63282-b443-34d9-b7e8-2cb5f0aa0462.roa File: 29b63282-b443-34d9-b7e8-2cb5f0aa0462.roa (raw, json) Hash identifier: 1SMQnqybbJVQftRxtGtGQKBj1eHwP5mxpYDT1+33kLQ= Subject key identifier: 63:F6:AF:BE:53:B4:21:B5:B4:87:92:41:27:95:CF:A8:8E:FF:20:A0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492CB2306A5D302D8C72837A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b63282-b443-34d9-b7e8-2cb5f0aa0462.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 22547 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:30:6a:5d:30:2d:8c:72:83:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=ddd23ee6-77aa-4f7c-8eed-a92b29df26d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:21:d4:9a:1c:e0:b0:54:fd:18:ff:2d:6f: 51:bf:c9:ef:3f:98:83:f8:6f:58:1e:0c:5f:fc:9f: 34:97:b7:93:bb:39:da:82:5b:75:3b:01:7f:83:82: a2:27:b4:80:a3:34:79:da:dc:51:cb:a4:15:3d:dd: ff:ed:e1:05:d3:ad:89:18:cd:3d:64:dd:44:90:af: 77:a6:23:eb:99:dc:1e:47:91:6a:7e:f4:67:98:82: ba:82:74:fb:ed:f6:49:ec:fd:ae:c4:b3:b0:a1:04: 71:4a:0e:f8:68:96:5f:a9:c0:98:3b:e0:f1:65:ce: ed:3c:50:bd:73:71:bb:ff:4f:b9:e9:01:5e:1d:49: 14:5f:b0:ba:6e:d8:17:0e:91:32:1e:0a:56:f2:21: 14:d9:90:93:51:c7:81:56:4c:89:08:3b:ef:41:a9: bd:26:9c:d5:a6:47:21:28:e4:51:e8:d5:a8:f3:86: 5f:65:4a:af:58:84:c2:46:ed:cc:00:af:88:e7:40: aa:25:45:33:1d:07:4f:3a:c5:f6:f8:6e:cd:2d:da: eb:25:a0:5c:9b:1d:69:a0:5b:6a:62:55:cd:09:2d: cd:76:11:54:87:78:c6:8d:9b:47:20:3c:6f:2b:cb: 86:77:b1:6b:88:8d:03:6f:96:88:0e:fa:4b:f5:d7: ad:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F6:AF:BE:53:B4:21:B5:B4:87:92:41:27:95:CF:A8:8E:FF:20:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b63282-b443-34d9-b7e8-2cb5f0aa0462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c4:b9:be:83:a2:c7:7d:67:d0:ad:4c:e5:80:c7:94:ec:ec: e6:d0:2a:d2:13:cc:4f:e7:fe:16:0b:d6:45:c3:9a:9a:97:48: f4:f6:fd:77:10:0a:7e:cf:fd:03:04:ac:b7:3c:e4:9a:5b:fd: 77:b8:46:b7:ef:c0:79:d7:8d:66:94:d7:b6:1a:a6:9f:d5:5e: 21:ce:f7:ea:22:4d:9e:90:3e:b6:fd:01:d7:4f:61:83:fe:36: c7:30:b3:01:70:de:14:83:d8:c0:62:d3:88:e4:ec:fd:81:22: 47:74:0a:83:8f:7f:fa:06:d8:40:e3:fe:d9:a4:7c:10:92:e6: 48:12:f0:a2:06:88:03:70:94:b3:1e:cc:89:f8:c0:b0:07:82: 53:ca:07:b4:5f:26:60:5d:74:63:18:a8:a1:50:59:a3:71:d1: 06:46:08:45:a5:83:4c:76:80:34:4e:a8:61:16:96:06:98:ae: 3c:96:80:d5:b0:0e:c2:43:c0:fc:08:f9:7e:e9:f8:23:ca:f6: 28:d3:be:d3:66:25:0d:5b:95:82:d0:43:86:62:c1:04:c1:3e: e9:fc:6b:a8:6d:05:96:cf:e4:37:07:a2:6f:84:f9:cd:29:7b: 30:c3:e9:14:12:1b:61:1f:db:e4:db:12:84:0d:4b:77:61:22: 25:6b:52:55 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkssjBqXTAtjHKDegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZGRkMjNlZTYtNzdhYS00ZjdjLThlZWQtYTkyYjI5ZGYyNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Yh1Joc4LBU/Rj/LW9Rv8nvP5iD+G9YHgxf /J80l7eTuznaglt1OwF/g4KiJ7SAozR52txRy6QVPd3/7eEF062JGM09ZN1EkK93 piPrmdweR5FqfvRnmIK6gnT77fZJ7P2uxLOwoQRxSg74aJZfqcCYO+DxZc7tPFC9 c3G7/0+56QFeHUkUX7C6btgXDpEyHgpW8iEU2ZCTUceBVkyJCDvvQam9JpzVpkch KORR6NWo84ZfZUqvWITCRu3MAK+I50CqJUUzHQdPOsX2+G7NLdrrJaBcmx1poFtq YlXNCS3NdhFUh3jGjZtHIDxvK8uGd7FriI0Db5aIDvpL9detDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGP2r75TtCG1tIeSQSeVz6iO/yCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjliNjMyODItYjQ0My0z NGQ5LWI3ZTgtMmNiNWYwYWEwNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJxLm+g6LHfWfQrUzlgMeU7Ozm0CrSE8xP5/4WC9ZFw5qal0j09v13 EAp+z/0DBKy3POSaW/13uEa378B5141mlNe2Gqaf1V4hzvfqIk2ekD62/QHXT2GD /jbHMLMBcN4Ug9jAYtOI5Oz9gSJHdAqDj3/6BthA4/7ZpHwQkuZIEvCiBogDcJSz HsyJ+MCwB4JTyge0XyZgXXRjGKihUFmjcdEGRghFpYNMdoA0TqhhFpYGmK48loDV sA7CQ8D8CPl+6fgjyvYo077TZiUNW5WC0EOGYsEEwT7p/GuobQWWz+Q3B6JvhPnN KXsww+kUEhthH9vk2xKEDUt3YSIla1JV -----END CERTIFICATE-----Generated at Fri Apr 11 22:55:05 2025 by rpki-client