$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b07d667-2b6e-388d-8129-f79cd99672da.roa File: 2b07d667-2b6e-388d-8129-f79cd99672da.roa (raw, json) Hash identifier: HVhlYeYmep07avzKuQ7ApTTmGx5v05uOygoKYXgrjUc= Subject key identifier: C4:7A:44:F1:33:98:09:EF:79:02:DC:D5:B5:71:70:06:DB:71:13:B2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848B4C0EF394BC6B80A9A90E2C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b07d667-2b6e-388d-8129-f79cd99672da.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 396550 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:ef:39:4b:c6:b8:0a:9a:90:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=2c0f7cdc-8f87-46fe-b82a-302626060e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6d:81:be:b7:b4:b3:c2:4a:f3:85:9d:f0:0f: 7c:f0:88:de:ba:77:ca:a6:6d:7c:4c:5d:0e:d7:74: 51:32:a9:d8:5d:19:ca:34:99:ba:96:64:e0:e4:82: 50:b6:de:ed:c3:a2:da:a9:7f:5e:b0:c2:eb:15:0d: aa:03:fb:f3:28:d6:c6:e4:b2:b7:c2:c5:67:4a:95: e5:32:a3:0c:d4:7e:7a:3f:32:2f:7f:ea:6f:de:c1: 13:31:56:99:8e:70:43:b5:7b:9d:6c:d2:f3:65:81: 65:6b:4b:56:26:ce:a7:d7:8b:ee:1c:77:88:5e:f7: 92:3d:ff:c7:5c:f3:38:82:37:10:ed:61:02:79:a7: e7:91:ac:74:e8:0f:58:f0:68:f3:46:b3:50:40:63: f2:bf:8e:17:93:a1:67:38:8e:2b:0d:d1:76:d7:91: 7e:61:53:8d:c3:c3:68:ee:1f:2d:de:2f:2f:3d:06: 40:db:a2:4b:a3:32:ba:11:01:c8:01:32:9f:9d:ff: 74:8e:78:ef:8c:d6:48:10:7c:d9:4e:d5:9f:dc:e3: 11:9d:65:39:15:55:80:36:62:d2:f2:4b:16:95:59: ae:ab:9e:6d:7a:3a:07:ed:fd:a4:96:8f:f0:a1:45: 3d:e0:03:a9:de:18:9a:96:c4:a3:ee:e8:0d:18:74: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7A:44:F1:33:98:09:EF:79:02:DC:D5:B5:71:70:06:DB:71:13:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b07d667-2b6e-388d-8129-f79cd99672da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:1e:b7:fe:02:51:17:86:db:b4:2d:78:6a:ac:f9:aa:ff:75: 0d:0c:f9:04:fb:4d:7f:ea:51:be:b1:0e:d9:c0:b7:0c:76:03: ee:8a:17:a1:3a:eb:14:21:0d:97:a4:3d:e4:ce:9d:05:80:ef: e5:84:e3:6e:b2:8f:b8:e4:a0:ce:55:b6:ab:41:30:79:28:1c: 12:4c:0e:97:4f:f8:1a:48:9a:e7:4a:ef:45:9d:17:80:c6:0d: 86:17:d9:15:6f:05:e9:c7:11:91:94:1f:9b:90:05:ad:bc:9d: b6:43:e5:f6:98:57:70:55:bb:35:c1:b7:a0:16:be:10:07:f6: 3d:52:9b:95:11:35:9e:10:e9:a0:8a:65:99:54:98:98:c4:ca: 60:2e:4f:de:6e:d6:bd:f8:88:7d:b6:cb:57:f0:20:9b:8f:26: dd:12:27:ac:78:d5:46:60:13:57:52:2c:f2:47:90:51:43:65: 49:a2:17:18:d2:2e:27:c7:d7:09:dc:b8:c0:62:34:5c:02:27: 7c:f7:67:63:04:9b:1d:3b:21:f8:f9:21:f7:ba:d4:f7:4b:fc: 52:c7:1d:86:a0:d9:2a:b6:64:7f:0e:ac:39:42:35:00:ae:22: 11:44:ba:34:de:ae:5a:67:83:00:b6:86:ce:a9:ce:79:38:a0: de:d4:dd:65 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi0wO85S8a4CpqQ4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk MmMwZjdjZGMtOGY4Ny00NmZlLWI4MmEtMzAyNjI2MDYwZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG2Bvre0s8JK84Wd8A988IjeunfKpm18TF0O 13RRMqnYXRnKNJm6lmTg5IJQtt7tw6LaqX9esMLrFQ2qA/vzKNbG5LK3wsVnSpXl MqMM1H56PzIvf+pv3sETMVaZjnBDtXudbNLzZYFla0tWJs6n14vuHHeIXveSPf/H XPM4gjcQ7WECeafnkax06A9Y8GjzRrNQQGPyv44Xk6FnOI4rDdF215F+YVONw8No 7h8t3i8vPQZA26JLozK6EQHIATKfnf90jnjvjNZIEHzZTtWf3OMRnWU5FVWANmLS 8ksWlVmuq55tejoH7f2klo/woUU94AOp3hialsSj7ugNGHS17wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMR6RPEzmAnveQLc1bVxcAbbcROyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmIwN2Q2NjctMmI2ZS0z ODhkLTgxMjktZjc5Y2Q5OTY3MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUHrf+AlEXhtu0LXhqrPmq/3UNDPkE+01/6lG+sQ7ZwLcMdgPuiheh OusUIQ2XpD3kzp0FgO/lhONuso+45KDOVbarQTB5KBwSTA6XT/gaSJrnSu9FnReA xg2GF9kVbwXpxxGRlB+bkAWtvJ22Q+X2mFdwVbs1wbegFr4QB/Y9UpuVETWeEOmg imWZVJiYxMpgLk/ebta9+Ih9tstX8CCbjybdEieseNVGYBNXUizyR5BRQ2VJohcY 0i4nx9cJ3LjAYjRcAid892djBJsdOyH4+SH3utT3S/xSxx2GoNkqtmR/Dqw5QjUA riIRRLo03q5aZ4MAtobOqc55OKDe1N1l -----END CERTIFICATE-----Generated at Fri Apr 11 22:35:10 2025 by rpki-client