$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d0ea8ba-42c5-3020-b93a-3c2108bdffb3.roa File: 3d0ea8ba-42c5-3020-b93a-3c2108bdffb3.roa (raw, json) Hash identifier: h7Y0bGjga0gg+1uoRnC9xbQwlfBbBxdAGWv+DlCi+/k= Subject key identifier: 33:2B:2D:3E:DA:A2:67:CC:95:45:DA:AB:C4:1C:17:D9:9E:17:B6:B0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492CB23F4AA1A9FFC842A820C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d0ea8ba-42c5-3020-b93a-3c2108bdffb3.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 396562 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:3f:4a:a1:a9:ff:c8:42:a8:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f42b324b-f1c9-4a69-843c-3743444bade1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fa:44:37:bb:1f:22:ae:be:b8:5d:86:97:5d: 47:87:f1:d4:72:0d:ad:67:66:d3:6a:8c:2c:e5:e9: 58:0e:c7:3e:fb:65:61:53:84:75:08:e9:3b:1a:d7: 49:72:0b:00:41:36:ad:cd:e5:15:a6:ae:c2:95:b4: a2:5e:36:3a:a5:04:a7:09:13:06:d4:e5:11:17:18: 91:9d:ea:33:a8:58:29:08:ee:48:cb:ab:51:d3:a8: 4e:a5:33:88:66:32:79:08:2c:2f:52:14:30:16:e4: b2:d2:89:fe:b2:4f:18:e1:4d:ba:83:40:92:92:ea: 9c:1d:22:08:1b:86:fb:8b:2f:9e:07:c1:dd:0d:1c: f3:0a:d4:56:6c:e0:0b:01:20:7f:aa:55:6e:61:88: f0:79:7f:a0:69:32:3a:79:1d:d4:69:27:49:21:be: e6:a7:42:78:45:11:20:47:f3:db:cd:d7:36:3e:c8: 1e:4d:e1:8e:d4:27:f1:9c:fc:17:d3:dd:cf:14:62: ea:66:5c:fa:16:19:4c:04:f8:b0:3f:43:ec:52:ba: 45:e8:f8:fa:e0:33:67:e9:b5:2b:1f:d3:02:9d:01: 49:16:80:30:2d:76:b4:9c:68:a1:5f:f2:ad:99:77: 8f:12:17:22:13:a6:ca:78:fd:86:0c:4e:1d:60:d8: 96:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2B:2D:3E:DA:A2:67:CC:95:45:DA:AB:C4:1C:17:D9:9E:17:B6:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d0ea8ba-42c5-3020-b93a-3c2108bdffb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:fd:b0:4f:56:46:7b:43:49:f3:0d:60:cd:53:25:6f:1a:9c: 1c:98:50:3e:b1:19:a9:7f:a9:7c:e0:ec:a9:ac:72:60:18:10: 26:f5:53:ed:4c:0d:e9:44:26:dd:8e:7e:3a:cd:96:3c:97:cb: a5:26:71:cb:e4:f5:e5:99:2f:3d:d1:b9:6a:d4:ee:e3:77:cb: f1:43:eb:25:4f:ff:d4:d0:b8:f1:93:b5:61:f9:09:35:2b:7e: 0d:bc:52:5c:4f:26:86:8a:50:0e:0f:28:be:61:03:ba:66:33: cb:c9:52:12:1f:95:1c:d3:bd:59:6b:aa:58:37:49:38:fd:80: a8:b9:43:26:8d:82:85:5a:ed:65:b1:db:4d:79:4e:30:a3:6f: e6:a9:26:f7:0f:b7:69:2b:94:9a:4b:52:08:42:ca:f8:87:5c: d9:7a:e5:db:1f:31:79:e9:11:72:4a:4d:58:1b:25:a7:aa:d2: 9e:75:2e:e1:4e:bc:e2:a8:f9:ea:80:47:2e:8d:f0:f7:d4:01: 7f:fb:ed:06:1a:8d:3d:48:e7:87:4f:0d:6e:c3:42:f3:2a:32: 07:b9:e6:97:a4:d2:e9:c6:a7:cc:8e:54:e8:1a:7e:d7:91:f7: 72:5f:f8:e8:5f:51:67:37:da:7b:f8:d6:4c:ee:74:fd:75:a1: 9b:6a:8d:ed -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkssj9Koan/yEKoIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjQyYjMyNGItZjFjOS00YTY5LTg0M2MtMzc0MzQ0NGJhZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvpEN7sfIq6+uF2Gl11Hh/HUcg2tZ2bTaows 5elYDsc++2VhU4R1COk7GtdJcgsAQTatzeUVpq7ClbSiXjY6pQSnCRMG1OURFxiR neozqFgpCO5Iy6tR06hOpTOIZjJ5CCwvUhQwFuSy0on+sk8Y4U26g0CSkuqcHSII G4b7iy+eB8HdDRzzCtRWbOALASB/qlVuYYjweX+gaTI6eR3UaSdJIb7mp0J4RREg R/Pbzdc2PsgeTeGO1CfxnPwX093PFGLqZlz6FhlMBPiwP0PsUrpF6Pj64DNn6bUr H9MCnQFJFoAwLXa0nGihX/KtmXePEhciE6bKeP2GDE4dYNiWyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDMrLT7aomfMlUXaq8QcF9meF7awMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2QwZWE4YmEtNDJjNS0z MDIwLWI5M2EtM2MyMTA4YmRmZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJ/bBPVkZ7Q0nzDWDNUyVvGpwcmFA+sRmpf6l84OyprHJgGBAm9VPt TA3pRCbdjn46zZY8l8ulJnHL5PXlmS890blq1O7jd8vxQ+slT//U0Ljxk7Vh+Qk1 K34NvFJcTyaGilAODyi+YQO6ZjPLyVISH5Uc071Za6pYN0k4/YCouUMmjYKFWu1l sdtNeU4wo2/mqSb3D7dpK5SaS1IIQsr4h1zZeuXbHzF56RFySk1YGyWnqtKedS7h TrziqPnqgEcujfD31AF/++0GGo09SOeHTw1uw0LzKjIHueaXpNLpxqfMjlToGn7X kfdyX/joX1FnN9p7+NZM7nT9daGbao3t -----END CERTIFICATE-----Generated at Sun Apr 13 00:53:24 2025 by rpki-client