$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4098cbd0-9842-33a3-97e3-c1f33675af83.roa File: 4098cbd0-9842-33a3-97e3-c1f33675af83.roa (raw, json) Hash identifier: hvi2Or0gNjzqU7totUZGKozKrjnGupyDWXC8qJ+vWRo= Subject key identifier: 9A:8D:63:FF:0A:3C:EE:66:49:1D:31:3D:89:D5:3C:B0:00:92:BE:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848B4C0EFCA1022D2AB76FE0E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4098cbd0-9842-33a3-97e3-c1f33675af83.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 396614 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:ef:ca:10:22:d2:ab:76:fe:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=a2176867-71ee-4682-8b66-40e1992d7f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:e7:98:aa:dd:ca:5e:ba:f2:d7:c8:fc:65: 68:af:0a:46:49:85:ca:3b:39:d3:f8:6f:a9:77:7a: 57:f8:d6:81:96:af:89:18:55:fe:3d:86:32:e2:ec: 7b:1c:02:31:9a:22:36:41:ee:16:01:61:8b:24:02: a5:d1:3e:89:9c:2b:68:af:f7:b9:40:43:09:92:e0: 2b:1b:b0:99:92:84:98:86:28:14:46:33:50:3d:21: 61:d0:8b:6b:67:5a:09:9d:da:60:b4:4e:72:c7:97: 79:d0:74:76:0d:62:64:02:55:74:a8:dd:5f:12:ae: 9a:58:50:f0:e4:4a:21:69:83:a1:b7:d5:2d:c2:9d: c3:ae:83:2f:76:7d:e2:2a:15:dd:62:52:90:47:ec: 39:ec:7e:be:e4:4c:19:91:ae:be:c3:af:d1:9f:f5: f9:82:50:49:30:b3:37:2f:ad:58:ac:20:d7:fd:c7: 4f:ee:bb:09:4b:da:20:b1:6b:d6:8a:4e:e4:45:55: 0a:13:64:5f:9e:ca:61:0d:c5:21:e6:d7:23:f5:71: d0:c6:11:7a:ba:37:dc:c2:6d:a0:0e:e3:cb:1c:a7: 8b:17:44:9b:12:50:84:8f:bb:30:de:58:b0:cd:7a: 26:e4:2b:d2:c9:38:21:a3:d3:0f:49:12:54:39:7a: 94:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8D:63:FF:0A:3C:EE:66:49:1D:31:3D:89:D5:3C:B0:00:92:BE:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4098cbd0-9842-33a3-97e3-c1f33675af83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ea:b9:9a:29:08:df:85:df:aa:e8:b0:bd:f6:68:43:12:37: a1:ea:04:79:8f:b5:19:b1:9e:82:55:f3:cf:c8:e1:a8:1a:0b: b4:f3:2d:cd:06:62:34:12:9b:f7:e1:ac:cc:05:b5:09:a1:6a: 73:1c:29:4c:ca:7c:8d:7e:d9:23:33:a1:bb:af:79:6a:81:26: 65:b8:67:76:08:fb:1d:e8:32:46:f6:6a:ba:42:82:35:15:47: db:62:a1:49:54:04:d0:2d:8b:90:a0:85:00:aa:27:04:7a:9d: ae:42:02:2f:bd:03:13:90:91:45:dc:34:8d:51:5a:9d:cb:79: 64:cc:de:07:a5:14:93:31:50:6d:a7:48:a1:33:5a:72:2e:7f: 2a:76:52:f3:5d:50:ad:15:8a:20:7f:f8:a3:f7:2a:24:6f:4c: ac:f2:3f:fd:78:5c:09:26:9a:7b:4f:40:20:a9:c6:e6:f9:c7: cb:5f:54:d0:a6:6b:d7:41:79:ac:9e:bf:bb:71:4e:7e:bb:e9: e5:bf:54:a9:95:15:e8:25:26:0a:eb:a8:d3:cf:39:20:21:85: 8e:8f:18:1d:55:35:9d:e6:2f:83:e6:30:7d:d5:d7:06:c5:87: b1:bb:dd:20:7c:5f:54:b7:d8:22:f2:dd:d6:ab:01:63:c4:d3: 4a:cc:3d:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi0wO/KECLSq3b+DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YTIxNzY4NjctNzFlZS00NjgyLThiNjYtNDBlMTk5MmQ3ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqbnmKrdyl668tfI/GVorwpGSYXKOznT+G+p d3pX+NaBlq+JGFX+PYYy4ux7HAIxmiI2Qe4WAWGLJAKl0T6JnCtor/e5QEMJkuAr G7CZkoSYhigURjNQPSFh0ItrZ1oJndpgtE5yx5d50HR2DWJkAlV0qN1fEq6aWFDw 5EohaYOht9Utwp3DroMvdn3iKhXdYlKQR+w57H6+5EwZka6+w6/Rn/X5glBJMLM3 L61YrCDX/cdP7rsJS9ogsWvWik7kRVUKE2RfnsphDcUh5tcj9XHQxhF6ujfcwm2g DuPLHKeLF0SbElCEj7sw3liwzXom5CvSyTgho9MPSRJUOXqU5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJqNY/8KPO5mSR0xPYnVPLAAkr6QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDA5OGNiZDAtOTg0Mi0z M2EzLTk3ZTMtYzFmMzM2NzVhZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAy6rmaKQjfhd+q6LC99mhDEjeh6gR5j7UZsZ6CVfPPyOGoGgu08y3N BmI0Epv34azMBbUJoWpzHClMynyNftkjM6G7r3lqgSZluGd2CPsd6DJG9mq6QoI1 FUfbYqFJVATQLYuQoIUAqicEep2uQgIvvQMTkJFF3DSNUVqdy3lkzN4HpRSTMVBt p0ihM1pyLn8qdlLzXVCtFYogf/ij9yokb0ys8j/9eFwJJpp7T0Agqcbm+cfLX1TQ pmvXQXmsnr+7cU5+u+nlv1SplRXoJSYK66jTzzkgIYWOjxgdVTWd5i+D5jB91dcG xYexu90gfF9Ut9gi8t3WqwFjxNNKzD1j -----END CERTIFICATE-----Generated at Fri Apr 11 23:05:19 2025 by rpki-client