$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b2cd2b8-1960-3c52-b5f2-b53844a2cfa5.roa File: 2b2cd2b8-1960-3c52-b5f2-b53844a2cfa5.roa (raw, json) Hash identifier: 4GCu31kPauCjsyRO5UkQi1gP9+QMG+wEax5vlwXdKi4= Subject key identifier: E0:0B:68:04:16:4D:74:8E:73:85:0C:10:52:AE:48:7B:45:5C:87:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A3F58000FCCFDAF0E3B34160 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b2cd2b8-1960-3c52-b5f2-b53844a2cfa5.roa Signing time: Thu 23 Jan 2025 13:38:18 +0000 ROA not before: Thu 23 Jan 2025 13:38:18 +0000 ROA not after: Wed 23 Apr 2025 12:38:18 +0000 asID: 396559 IP address blocks: 192.12.94.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:f5:80:00:fc:cf:da:f0:e3:b3:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 23 13:38:18 2025 GMT Not After : Apr 23 12:38:18 2025 GMT Subject: CN=baf059f6-00a9-4794-9d97-a313bb2806e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:25:9a:e4:18:49:d8:82:24:68:bc:e9:95:be: f8:e7:fd:ca:a8:2f:29:e4:b4:4e:06:db:d9:4c:89: 39:5d:4c:26:43:43:e3:bb:01:e3:75:4f:4b:a2:17: c4:f3:ac:ec:95:2e:d3:6b:84:02:22:67:98:db:c7: 02:cb:c4:6b:ad:19:e9:9d:70:56:36:dc:db:1e:71: 4a:6c:23:e0:af:da:f9:2e:5a:57:31:82:d8:93:10: bb:82:8c:24:ac:2b:a5:c6:06:50:e9:16:55:ec:3f: 71:9a:9e:84:7d:ef:3b:31:82:2d:ae:90:a7:18:d5: 40:0c:88:27:2d:6c:d8:31:40:a1:46:e5:54:56:4d: 5a:f6:52:79:c5:8a:7c:42:a9:02:e2:31:1e:36:4c: 86:a0:0c:08:fc:a4:ac:f7:86:63:d8:ad:42:1d:7c: 34:ca:24:db:13:27:69:2a:ac:6a:48:27:ba:69:ed: bb:6d:69:d7:78:61:2d:ec:c6:93:23:41:16:d9:1c: f0:1d:bc:ff:c3:8c:b5:75:eb:f0:bb:8a:13:2c:8c: 4b:0a:b4:cf:e7:35:6f:58:ab:20:82:81:41:21:99: 4e:db:ce:ff:7a:5c:b1:3b:46:b6:0a:4c:4e:4e:85: ff:6d:5a:cc:6d:e1:d9:85:ea:fb:7b:7b:49:cc:61: d2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0B:68:04:16:4D:74:8E:73:85:0C:10:52:AE:48:7B:45:5C:87:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b2cd2b8-1960-3c52-b5f2-b53844a2cfa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:a4:60:2c:04:22:62:36:ec:7b:5c:b3:e5:37:e9:c5:cf:80: 30:83:b2:2d:6b:91:13:0a:81:f5:94:96:fe:65:ce:08:7a:03: b2:33:bb:e4:63:89:9f:d6:52:10:2e:91:6f:9b:17:27:74:1e: 19:e9:79:b6:2f:02:1b:e3:76:c9:61:a4:2d:65:74:57:0f:4d: 4e:36:4d:92:96:69:5c:47:37:a7:8e:55:c3:48:e1:fb:1b:1d: ee:aa:2a:29:3a:bc:7c:e8:22:8c:53:c2:84:e9:ad:27:b6:14: 86:36:70:98:68:76:a2:73:5f:9a:b5:7b:67:74:9c:3e:c9:fc: 50:3c:ea:b3:3f:5e:11:dd:2c:bf:78:45:f3:23:d8:95:6c:99: f1:d3:ab:5e:03:6a:89:55:c0:7c:8d:ad:2e:1b:ae:5d:2d:50: 76:11:b4:9f:fd:4b:56:5e:b5:21:a9:3e:0c:dc:03:c9:3e:14: 9a:db:3a:ac:01:47:36:76:86:5a:5e:ce:7b:c7:eb:48:56:d0: 74:d9:32:6f:ee:62:fa:1b:8f:47:e8:db:3d:af:c1:43:25:9f: 31:15:c9:a5:1d:9b:47:60:65:23:7b:66:40:45:e7:b7:d0:7b: 3e:0a:11:df:da:d8:f2:cb:91:da:73:16:29:4e:b9:ea:bf:28: aa:2d:83:b1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEij9YAA/M/a8OOzQWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyMzEzMzgxOFoXDTI1MDQyMzEyMzgxOFowLzEtMCsGA1UEAxMk YmFmMDU5ZjYtMDBhOS00Nzk0LTlkOTctYTMxM2JiMjgwNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyWa5BhJ2IIkaLzplb745/3KqC8p5LROBtvZ TIk5XUwmQ0PjuwHjdU9LohfE86zslS7Ta4QCImeY28cCy8RrrRnpnXBWNtzbHnFK bCPgr9r5LlpXMYLYkxC7gowkrCulxgZQ6RZV7D9xmp6Efe87MYItrpCnGNVADIgn LWzYMUChRuVUVk1a9lJ5xYp8QqkC4jEeNkyGoAwI/KSs94Zj2K1CHXw0yiTbEydp KqxqSCe6ae27bWnXeGEt7MaTI0EW2RzwHbz/w4y1devwu4oTLIxLCrTP5zVvWKsg goFBIZlO287/elyxO0a2CkxOToX/bVrMbeHZher7e3tJzGHSvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOALaAQWTXSOc4UMEFKuSHtFXIdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmIyY2QyYjgtMTk2MC0z YzUyLWI1ZjItYjUzODQ0YTJjZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQChpGAsBCJiNux7XLPlN+nFz4Awg7Ita5ETCoH1lJb+Zc4IegOyM7vk Y4mf1lIQLpFvmxcndB4Z6Xm2LwIb43bJYaQtZXRXD01ONk2SlmlcRzenjlXDSOH7 Gx3uqiopOrx86CKMU8KE6a0nthSGNnCYaHaic1+atXtndJw+yfxQPOqzP14R3Sy/ eEXzI9iVbJnx06teA2qJVcB8ja0uG65dLVB2EbSf/UtWXrUhqT4M3APJPhSa2zqs AUc2doZaXs57x+tIVtB02TJv7mL6G49H6Ns9r8FDJZ8xFcmlHZtHYGUje2ZARee3 0Hs+ChHf2tjyy5HacxYpTrnqvyiqLYOx -----END CERTIFICATE-----Generated at Fri Apr 11 22:32:46 2025 by rpki-client