$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3378ea8e-5cb0-30a1-872e-a160e265559c.roa File: 3378ea8e-5cb0-30a1-872e-a160e265559c.roa (raw, json) Hash identifier: 5WPdE1jWp8RjoTGqqH/aexZmNlC4JSWKO75434ZQ3Lw= Subject key identifier: 3A:99:4F:8A:CE:96:79:27:A3:64:42:E5:4B:09:A5:7D:B3:03:93:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848B7844BBAC4DF00E9885E8900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3378ea8e-5cb0-30a1-872e-a160e265559c.roa Signing time: Thu 30 Jan 2025 13:46:22 +0000 ROA not before: Thu 30 Jan 2025 13:46:22 +0000 ROA not after: Wed 30 Apr 2025 12:46:22 +0000 asID: 396569 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:84:4b:ba:c4:df:00:e9:88:5e:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 30 13:46:22 2025 GMT Not After : Apr 30 12:46:22 2025 GMT Subject: CN=11a88b0c-83c1-4c06-b255-c8b207e393b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cb:bb:3e:61:2a:5a:52:01:fc:48:d8:f4:1d: d4:4d:01:78:24:fa:4d:7e:bc:17:49:0b:76:87:4e: 7b:b0:fe:6d:08:c6:c8:4d:8c:8f:a2:22:30:32:c0: db:c5:09:50:a0:e1:ae:9e:9b:9b:2e:26:af:9e:c0: b6:d3:e9:e9:f4:ab:3f:92:c1:ca:cd:0f:50:34:25: 62:e4:b0:08:41:d0:be:1c:26:df:1d:e8:56:73:1d: 03:1b:93:a6:f0:f5:3b:0c:40:af:6c:23:3b:65:53: 2f:6c:f0:68:40:47:12:38:11:7b:3a:36:35:91:77: b0:70:4e:52:7a:bb:2e:09:a4:f4:7a:1e:c8:d6:5f: 15:69:50:0c:a9:a0:3b:de:35:6f:31:a1:61:77:5e: 84:29:6d:68:98:83:03:b1:46:63:01:aa:e9:f6:31: 39:da:29:41:92:99:e2:27:8e:66:0a:24:f2:cd:ac: c7:65:83:08:f5:c5:be:fc:87:53:1d:04:40:fd:b7: b5:d5:cc:a0:8a:1a:82:79:f1:59:64:9b:cf:4d:20: d6:61:b8:31:5f:ab:64:23:02:e5:fe:7f:e3:20:2d: be:7d:32:0e:7d:7f:e3:f0:ab:c8:08:61:d3:dc:cb: 01:e5:bd:97:0c:96:4b:cb:d8:26:73:76:4a:df:b5: 72:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:99:4F:8A:CE:96:79:27:A3:64:42:E5:4B:09:A5:7D:B3:03:93:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3378ea8e-5cb0-30a1-872e-a160e265559c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:4f:52:e5:a7:6f:83:3b:f7:73:a8:e5:a1:4a:99:82:5f:9c: da:93:3c:65:b7:52:15:44:c9:90:29:18:c5:d5:c0:72:fe:48: 8a:6f:ba:9c:29:2b:1d:1c:0a:73:ff:8a:23:21:8b:ec:13:47: 80:d8:fa:c6:8c:95:d7:90:43:5d:e7:e1:5a:b1:2c:38:b9:04: 08:a1:4c:1c:66:21:1b:75:4c:bd:a7:ec:93:fa:a0:65:50:39: 9d:7f:21:51:0c:83:3c:c7:82:18:4e:1a:17:0c:1c:2a:b9:36: 59:30:80:a0:0d:94:d1:20:b7:f9:29:31:90:32:a6:6c:ac:a8: b1:13:45:a5:0d:a6:ef:21:a1:4f:0f:bb:1f:52:38:9f:30:04: 3e:a3:a3:42:ef:8b:44:7a:4c:15:09:cd:3a:03:ef:51:a2:ce: e1:e0:c1:e1:84:d9:45:b6:3f:22:96:86:f2:e1:b3:7b:e7:39: 64:3c:95:3f:8f:cb:fe:b9:29:66:13:57:42:0c:d5:57:22:f5: 19:d7:5d:d0:6d:d1:81:be:58:01:01:48:06:88:2b:f0:87:6a: cc:78:69:ba:00:5c:ff:52:b8:23:db:70:b7:4a:59:87:dc:7b: 40:5c:86:d7:88:92:94:82:25:5c:1e:ae:b6:f3:84:a4:7c:e0: 6c:28:36:3b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hEu6xN8A6YheiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEzMDEzNDYyMloXDTI1MDQzMDEyNDYyMlowLzEtMCsGA1UEAxMk MTFhODhiMGMtODNjMS00YzA2LWIyNTUtYzhiMjA3ZTM5M2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksu7PmEqWlIB/EjY9B3UTQF4JPpNfrwXSQt2 h057sP5tCMbITYyPoiIwMsDbxQlQoOGunpubLiavnsC20+np9Ks/ksHKzQ9QNCVi 5LAIQdC+HCbfHehWcx0DG5Om8PU7DECvbCM7ZVMvbPBoQEcSOBF7OjY1kXewcE5S ersuCaT0eh7I1l8VaVAMqaA73jVvMaFhd16EKW1omIMDsUZjAarp9jE52ilBkpni J45mCiTyzazHZYMI9cW+/IdTHQRA/be11cygihqCefFZZJvPTSDWYbgxX6tkIwLl /n/jIC2+fTIOfX/j8KvICGHT3MsB5b2XDJZLy9gmc3ZK37VyUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDqZT4rOlnkno2RC5UsJpX2zA5NoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzM3OGVhOGUtNWNiMC0z MGExLTg3MmUtYTE2MGUyNjU1NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJT1Llp2+DO/dzqOWhSpmCX5zakzxlt1IVRMmQKRjF1cBy/kiKb7qc KSsdHApz/4ojIYvsE0eA2PrGjJXXkENd5+FasSw4uQQIoUwcZiEbdUy9p+yT+qBl UDmdfyFRDIM8x4IYThoXDBwquTZZMICgDZTRILf5KTGQMqZsrKixE0WlDabvIaFP D7sfUjifMAQ+o6NC74tEekwVCc06A+9Ros7h4MHhhNlFtj8iloby4bN75zlkPJU/ j8v+uSlmE1dCDNVXIvUZ113QbdGBvlgBAUgGiCvwh2rMeGm6AFz/Urgj23C3SlmH 3HtAXIbXiJKUgiVcHq6284SkfOBsKDY7 -----END CERTIFICATE-----Generated at Sat Apr 12 00:06:24 2025 by rpki-client