$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2baa2b81-c6dc-37a1-90dc-cb8e8cec3849.roa File: 2baa2b81-c6dc-37a1-90dc-cb8e8cec3849.roa (raw, json) Hash identifier: oqtE+lf/IUBRbm504YFOZx+wSu8Ka5Zf+SSonyFdoN4= Subject key identifier: 4C:4F:59:FA:A2:F1:43:2F:25:AF:5C:EB:60:7D:C0:FB:65:3E:5F:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830C2ABD50F80D226655980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2baa2b81-c6dc-37a1-90dc-cb8e8cec3849.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 397193 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c2:ab:d5:0f:80:d2:26:65:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=f67cba31-e333-4d30-9659-da757f203258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b5:a9:48:33:00:1c:05:f0:8f:60:0c:a8:52: 54:5f:ce:95:e8:b5:d2:c0:ab:e7:c9:a1:c7:c1:79: 89:55:46:f3:11:14:d8:87:56:4c:7a:31:8c:69:06: 2c:d2:82:d5:3f:2d:42:11:d2:11:83:31:c5:88:a8: d2:bb:f1:e5:66:66:3b:13:ff:88:e8:0e:6e:12:fc: ff:f2:d6:9c:77:88:ea:a0:39:0b:c1:f0:21:76:8f: e0:c2:ac:c9:75:d7:bb:22:76:ff:51:53:7a:fb:38: ab:2c:e1:19:8f:93:d0:a3:13:6d:ee:66:cd:10:71: 27:aa:48:99:30:87:b1:e2:63:bf:14:92:ac:7f:a9: 6f:97:3d:51:d6:7e:7c:c1:15:05:60:37:a8:87:b7: 9e:ee:1a:e6:7e:eb:38:a7:d3:67:1f:6d:48:ef:80: 85:bc:37:a6:12:fb:7a:5a:06:9b:4d:ea:ec:aa:8f: 28:81:47:87:14:f4:74:ee:69:32:8c:ed:78:19:31: 72:a5:f4:22:52:6b:d2:6a:bc:8e:f6:a0:f4:7e:03: f1:7b:69:fe:79:a4:22:e6:50:a1:e2:a1:a4:78:ae: fc:77:6c:4c:da:14:d0:51:94:48:06:ca:8f:8e:66: 91:0f:ba:aa:64:e1:73:8e:6c:ed:8d:36:58:a1:7e: c3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4F:59:FA:A2:F1:43:2F:25:AF:5C:EB:60:7D:C0:FB:65:3E:5F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2baa2b81-c6dc-37a1-90dc-cb8e8cec3849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:70:9c:83:12:e6:fd:81:5b:10:0a:e8:81:cb:b8:39:11:93: 35:af:72:e3:45:2c:56:0a:c3:30:9d:f7:18:98:86:7c:87:a4: 78:05:23:72:ca:58:2a:64:4a:68:ce:23:30:68:46:d4:82:07: 8b:7b:b0:27:42:43:5f:ea:30:20:4d:a0:bb:53:75:cf:b7:0a: 68:cb:07:1b:24:7b:7e:49:8b:a8:05:31:09:99:a5:18:53:1c: a2:92:b2:7a:e0:e3:f0:ac:51:c7:d0:ff:e6:d8:63:20:fa:e7: 6e:41:ad:32:c1:40:52:4f:63:6c:3f:9b:3e:ef:8b:cf:1b:c1: 7a:c1:67:3f:62:36:4d:1a:97:4c:e0:f8:a0:a3:24:6c:56:10: f3:20:81:41:2e:17:a3:ef:26:ea:9e:be:5f:cc:05:68:66:2a: 8e:14:20:da:93:d5:69:eb:f9:1d:dd:e1:1d:ee:11:1b:8e:04: 8f:c2:df:77:ad:e4:1b:be:12:eb:36:1b:bf:e9:73:43:94:97: f1:8e:5e:b0:b6:e2:b1:b4:c9:0f:44:48:9d:b1:a8:1a:74:bf: 28:dd:bd:0d:c1:06:fd:9b:02:17:93:dd:ac:da:ad:5f:0b:a9: ff:32:fa:93:95:ad:4e:b5:0d:e6:5f:07:00:d6:42:3e:51:29: 4a:7b:64:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMKr1Q+A0iZlWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjY3Y2JhMzEtZTMzMy00ZDMwLTk2NTktZGE3NTdmMjAzMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbWpSDMAHAXwj2AMqFJUX86V6LXSwKvnyaHH wXmJVUbzERTYh1ZMejGMaQYs0oLVPy1CEdIRgzHFiKjSu/HlZmY7E/+I6A5uEvz/ 8tacd4jqoDkLwfAhdo/gwqzJdde7Inb/UVN6+zirLOEZj5PQoxNt7mbNEHEnqkiZ MIex4mO/FJKsf6lvlz1R1n58wRUFYDeoh7ee7hrmfus4p9NnH21I74CFvDemEvt6 WgabTersqo8ogUeHFPR07mkyjO14GTFypfQiUmvSaryO9qD0fgPxe2n+eaQi5lCh 4qGkeK78d2xM2hTQUZRIBsqPjmaRD7qqZOFzjmztjTZYoX7DUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFExPWfqi8UMvJa9c62B9wPtlPl9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmJhYTJiODEtYzZkYy0z N2ExLTkwZGMtY2I4ZThjZWMzODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBncJyDEub9gVsQCuiBy7g5EZM1r3LjRSxWCsMwnfcYmIZ8h6R4BSNy ylgqZEpoziMwaEbUggeLe7AnQkNf6jAgTaC7U3XPtwpoywcbJHt+SYuoBTEJmaUY UxyikrJ64OPwrFHH0P/m2GMg+uduQa0ywUBST2NsP5s+74vPG8F6wWc/YjZNGpdM 4PigoyRsVhDzIIFBLhej7ybqnr5fzAVoZiqOFCDak9Vp6/kd3eEd7hEbjgSPwt93 reQbvhLrNhu/6XNDlJfxjl6wtuKxtMkPREidsagadL8o3b0NwQb9mwIXk92s2q1f C6n/MvqTla1OtQ3mXwcA1kI+USlKe2QZ -----END CERTIFICATE-----Generated at Fri Apr 11 22:27:37 2025 by rpki-client