$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffabd0b-933a-3e74-98f2-2425dea49eaa.roa File: 2ffabd0b-933a-3e74-98f2-2425dea49eaa.roa (raw, json) Hash identifier: dVSX67wg4a2aC8lb3jv1i3Qs/Sj1tDqQn2BDVHJLPeY= Subject key identifier: 6B:FE:0C:87:36:CA:95:D1:72:BD:47:C9:2C:AB:C9:66:51:0A:48:D8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A3F584E6E4A3CEABA5D49400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffabd0b-933a-3e74-98f2-2425dea49eaa.roa Signing time: Thu 23 Jan 2025 13:38:20 +0000 ROA not before: Thu 23 Jan 2025 13:38:20 +0000 ROA not after: Wed 23 Apr 2025 12:38:20 +0000 asID: 396580 IP address blocks: 192.12.94.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:f5:84:e6:e4:a3:ce:ab:a5:d4:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 23 13:38:20 2025 GMT Not After : Apr 23 12:38:20 2025 GMT Subject: CN=ca1c1f72-2d2a-4376-ae95-78b4dfe5358f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:00:0f:39:7a:36:4d:25:33:ee:98:13:3a:2f: ef:7a:7d:26:f6:76:0c:9d:53:98:7d:de:69:26:15: 03:a3:d0:bc:5b:f5:13:92:ef:f8:5a:c0:b2:0e:6e: 6a:9f:f7:a1:51:b4:14:e8:a5:59:95:be:1c:ee:01: 3c:6c:f3:15:04:92:dc:4c:44:38:3b:a9:5e:03:aa: 73:2a:b3:22:77:5b:23:2d:ab:8e:9e:c5:dc:4a:13: 51:00:3c:c6:b9:ba:c2:7c:5d:b0:fd:d6:07:01:b9: 4f:fb:b4:f2:74:01:95:f3:c3:c6:a2:9e:ce:5a:b0: 3d:46:84:37:ad:bb:9a:b2:50:cd:8b:67:fa:91:dd: 44:f9:4e:ed:d0:43:1f:36:70:4b:10:6f:49:fe:cd: c7:0c:cc:25:df:b5:0b:0c:ea:69:c3:3c:55:78:36: 5b:be:48:5b:26:96:7f:ed:4d:9e:8d:82:ef:8e:06: 6c:33:e3:00:7d:dc:a7:cb:4a:63:81:61:f1:93:4a: e5:fd:ca:16:d8:f9:ce:9a:47:64:10:01:5d:22:79: 58:85:78:da:f6:58:ab:cc:ef:64:0f:a9:9f:40:13: f3:36:86:1a:ed:cc:7b:ca:17:16:b1:47:bc:94:7b: 85:fc:8e:76:7c:98:b1:05:13:a9:d2:f1:28:61:38: fd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FE:0C:87:36:CA:95:D1:72:BD:47:C9:2C:AB:C9:66:51:0A:48:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffabd0b-933a-3e74-98f2-2425dea49eaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:92:3e:ba:72:c0:01:4a:5d:f9:6d:33:53:56:f5:cc:d2:19: dc:f4:9c:7e:37:2a:aa:3b:11:3b:2c:88:30:e9:5b:e2:95:87: 0a:6a:1f:f7:26:22:f9:ae:27:2a:d7:7f:85:e6:cd:56:62:33: 1f:41:c7:4a:b6:89:80:42:5d:ba:02:6f:a0:8a:39:74:09:d1: 06:e8:ff:0e:68:55:1f:8b:77:a3:62:22:53:62:61:4d:c6:4e: a6:b8:a5:1e:49:65:3c:67:3d:6e:78:d2:fc:24:6d:36:21:09: d7:cd:63:2a:c8:ba:71:8c:92:8d:a6:4c:db:e6:9c:8a:19:e6: 41:04:5f:b3:ac:a3:53:2b:9d:c6:b2:ca:90:17:81:f1:d3:85: 9c:d4:96:91:54:83:58:86:04:7c:34:5e:62:bd:23:dd:c8:ad: 23:ad:d5:93:fe:b9:c6:6a:fb:4e:79:a7:58:1e:3f:b2:87:78: 0e:04:5c:b9:c6:ea:ca:db:f5:f5:0e:ae:40:82:15:4f:53:03: ba:fc:cf:60:5c:05:41:44:59:3b:45:a2:d0:5d:eb:b4:99:77: 8e:cf:41:88:22:f1:54:20:8e:8e:b5:66:5f:7e:be:b8:b0:3d: 35:cd:0b:b9:80:d6:8f:a4:62:ae:14:21:84:b0:82:1f:03:57: bd:c3:52:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEij9YTm5KPOq6XUlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyMzEzMzgyMFoXDTI1MDQyMzEyMzgyMFowLzEtMCsGA1UEAxMk Y2ExYzFmNzItMmQyYS00Mzc2LWFlOTUtNzhiNGRmZTUzNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwAPOXo2TSUz7pgTOi/ven0m9nYMnVOYfd5p JhUDo9C8W/UTku/4WsCyDm5qn/ehUbQU6KVZlb4c7gE8bPMVBJLcTEQ4O6leA6pz KrMid1sjLauOnsXcShNRADzGubrCfF2w/dYHAblP+7TydAGV88PGop7OWrA9RoQ3 rbuaslDNi2f6kd1E+U7t0EMfNnBLEG9J/s3HDMwl37ULDOppwzxVeDZbvkhbJpZ/ 7U2ejYLvjgZsM+MAfdyny0pjgWHxk0rl/coW2PnOmkdkEAFdInlYhXja9lirzO9k D6mfQBPzNoYa7cx7yhcWsUe8lHuF/I52fJixBROp0vEoYTj9AQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGv+DIc2ypXRcr1HySyryWZRCkjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmZmYWJkMGItOTMzYS0z ZTc0LTk4ZjItMjQyNWRlYTQ5ZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBEkj66csABSl35bTNTVvXM0hnc9Jx+NyqqOxE7LIgw6VvilYcKah/3 JiL5ricq13+F5s1WYjMfQcdKtomAQl26Am+gijl0CdEG6P8OaFUfi3ejYiJTYmFN xk6muKUeSWU8Zz1ueNL8JG02IQnXzWMqyLpxjJKNpkzb5pyKGeZBBF+zrKNTK53G ssqQF4Hx04Wc1JaRVINYhgR8NF5ivSPdyK0jrdWT/rnGavtOeadYHj+yh3gOBFy5 xurK2/X1Dq5AghVPUwO6/M9gXAVBRFk7RaLQXeu0mXeOz0GIIvFUII6OtWZffr64 sD01zQu5gNaPpGKuFCGEsIIfA1e9w1IB -----END CERTIFICATE-----Generated at Fri Apr 11 23:59:30 2025 by rpki-client