$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cdf171e-46bc-3d2c-8998-65eea4aafcac.roa File: 3cdf171e-46bc-3d2c-8998-65eea4aafcac.roa (raw, json) Hash identifier: 9LA1LqaudVg0Ax/a/JGH7OASBSR/DdiFa+xPDh/YtUw= Subject key identifier: 8D:89:F1:73:5B:CB:15:7F:A7:31:28:9A:12:8E:00:F2:09:B8:16:45 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830C3F451B3D281842856D0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cdf171e-46bc-3d2c-8998-65eea4aafcac.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 396827 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c3:f4:51:b3:d2:81:84:28:56:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=95c617c9-1d61-4c3b-9af9-7e19442852e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:0d:68:87:bf:8e:1d:e1:78:28:40:bf:70: 1b:39:3e:8f:0f:3c:77:aa:8e:91:b9:0d:5b:ea:56: 7f:67:16:be:3b:ba:18:6f:4d:e5:4f:8f:c6:c1:9d: b2:30:a9:d8:c9:98:7e:2b:69:4a:66:66:a8:95:73: 73:ea:df:83:f8:00:14:81:9e:77:1a:b3:94:0b:86: 08:89:f0:35:a3:ba:8f:94:52:3f:e1:8e:7d:90:02: c1:89:46:f9:fe:dc:48:15:1a:95:3d:d3:2b:75:38: a2:ce:bc:bb:31:7e:0f:12:55:7d:08:f5:7c:fc:e2: d5:f1:24:55:98:cd:25:07:79:75:4c:15:da:09:c8: 27:01:e1:bf:65:ff:de:d5:1c:bd:7a:01:ae:a6:7a: 12:49:49:42:8f:71:0c:22:74:e0:fd:b7:68:eb:da: 49:e0:de:dd:ba:5a:b1:a5:2b:e2:f3:5f:da:3a:36: 11:86:64:73:62:6d:c3:27:98:cf:0c:d1:c5:00:f4: a6:f8:f4:b1:43:28:ff:12:0d:ed:42:de:2d:5f:68: a7:05:74:ed:36:25:55:cf:77:08:f7:9a:00:45:3a: e8:c3:7a:b2:d2:ea:d1:dd:b1:d5:dd:81:ff:41:d2: f1:a1:b5:a3:7f:28:6e:aa:2d:81:10:03:6b:99:05: 1c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:89:F1:73:5B:CB:15:7F:A7:31:28:9A:12:8E:00:F2:09:B8:16:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cdf171e-46bc-3d2c-8998-65eea4aafcac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:28:25:ab:9c:86:dc:1f:c6:b8:96:96:65:da:17:b8:3d:ba: f7:e4:49:77:68:fb:60:04:9b:f4:3b:e8:ec:b2:ea:18:da:cb: 42:ad:b1:b7:70:ae:51:4f:ba:20:6c:8c:1d:fe:dc:42:3f:0e: 56:9b:6b:09:77:47:95:7c:18:92:6a:49:4b:e7:67:b6:cc:6e: ca:98:a5:91:49:02:52:f6:dd:18:a5:5c:8d:a3:2b:b6:d8:ec: 77:97:7d:8c:0f:9f:b5:97:78:5a:0d:00:ec:e9:14:05:19:a4: 8d:f8:15:3b:30:71:fc:13:02:c0:3e:27:ab:0d:8a:cf:fb:ec: 25:10:d3:4c:22:0c:90:22:f6:01:0f:fa:22:14:9e:4d:8c:0d: 28:bf:ac:e9:3b:d3:5d:c1:0d:21:d8:aa:00:17:0f:ef:d5:04: 7f:8d:08:c6:e5:31:8f:36:46:86:35:7b:54:e1:fc:cb:81:2a: 56:eb:85:4a:e6:c1:23:b5:ee:74:19:1b:01:89:8e:1e:9a:9b: 52:11:a8:26:e1:76:d3:ec:93:c1:97:7a:a1:38:fa:5d:7e:c7: 69:bf:dd:f9:6b:24:f4:a6:4b:03:40:03:70:80:5a:67:69:6c: 4b:6f:f9:e8:f7:60:ac:2d:25:39:fa:08:42:13:a4:2e:f9:75: 80:90:08:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMP0UbPSgYQoVtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk OTVjNjE3YzktMWQ2MS00YzNiLTlhZjktN2UxOTQ0Mjg1MmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1gNaIe/jh3heChAv3AbOT6PDzx3qo6RuQ1b 6lZ/Zxa+O7oYb03lT4/GwZ2yMKnYyZh+K2lKZmaolXNz6t+D+AAUgZ53GrOUC4YI ifA1o7qPlFI/4Y59kALBiUb5/txIFRqVPdMrdTiizry7MX4PElV9CPV8/OLV8SRV mM0lB3l1TBXaCcgnAeG/Zf/e1Ry9egGupnoSSUlCj3EMInTg/bdo69pJ4N7dulqx pSvi81/aOjYRhmRzYm3DJ5jPDNHFAPSm+PSxQyj/Eg3tQt4tX2inBXTtNiVVz3cI 95oARTrow3qy0urR3bHV3YH/QdLxobWjfyhuqi2BEANrmQUcnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI2J8XNbyxV/pzEomhKOAPIJuBZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2NkZjE3MWUtNDZiYy0z ZDJjLTg5OTgtNjVlZWE0YWFmY2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdKCWrnIbcH8a4lpZl2he4Pbr35El3aPtgBJv0O+jssuoY2stCrbG3 cK5RT7ogbIwd/txCPw5Wm2sJd0eVfBiSaklL52e2zG7KmKWRSQJS9t0YpVyNoyu2 2Ox3l32MD5+1l3haDQDs6RQFGaSN+BU7MHH8EwLAPierDYrP++wlENNMIgyQIvYB D/oiFJ5NjA0ov6zpO9NdwQ0h2KoAFw/v1QR/jQjG5TGPNkaGNXtU4fzLgSpW64VK 5sEjte50GRsBiY4emptSEagm4XbT7JPBl3qhOPpdfsdpv935ayT0pksDQANwgFpn aWxLb/no92CsLSU5+ghCE6Qu+XWAkAiV -----END CERTIFICATE-----Generated at Fri Apr 11 23:05:29 2025 by rpki-client