$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c2a0368-e602-3a53-b942-d16b2dd2147e.roa File: 4c2a0368-e602-3a53-b942-d16b2dd2147e.roa (raw, json) Hash identifier: w/+EayDaBAdam7MUbDgTG+K/PkWnmnZNNlsRjAseNCs= Subject key identifier: D1:0A:05:66:5E:91:85:F7:6E:F9:7F:5E:57:96:DE:50:75:8C:07:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183D66450E3B6E75A1A4030 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c2a0368-e602-3a53-b942-d16b2dd2147e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 36622 IP address blocks: 192.82.133.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:d6:64:50:e3:b6:e7:5a:1a:40:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=d19e41cf-c34a-4d93-8554-866a19ca1ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:14:3c:e7:77:6d:7b:a3:ad:ca:1d:8d:67:cd: a5:da:52:9a:83:42:f2:6f:f6:d9:ee:da:2d:5c:b5: fa:94:40:2d:d5:d4:c3:d7:ff:01:47:07:22:f3:da: be:06:f1:14:9a:8e:d2:df:79:f1:77:10:6c:0f:4d: cd:99:dc:a7:1c:23:c0:14:7e:b6:91:2d:bb:d5:b1: e1:bf:89:7b:50:df:65:aa:7a:1c:db:6e:c5:c0:9a: d1:62:55:b3:08:ca:6b:dd:58:0b:ab:c9:9c:d9:a2: 88:0d:61:ca:6b:c6:5f:51:7b:e4:79:0e:de:10:90: 93:32:cf:80:78:d2:42:31:80:3b:8a:88:1a:c5:79: 63:97:0a:60:60:ab:86:30:c2:10:60:4f:ed:0d:64: 3b:4f:24:16:b4:5a:76:e8:7a:61:6c:59:5b:90:7a: 56:f8:7e:ac:e5:9f:a1:eb:27:44:37:61:ac:00:f2: d4:6e:49:16:49:4d:4d:91:9a:e9:ea:ec:78:d2:bd: 5f:e6:18:25:ff:83:1d:5c:70:8a:27:53:79:63:c8: d9:18:1e:8b:25:d9:d3:21:ba:3f:7e:8a:52:47:05: 48:36:8c:e9:ec:b0:03:fa:aa:0a:a4:b1:f3:44:24: 62:03:ab:da:4a:1e:9d:05:2b:12:9d:58:e3:b6:fd: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0A:05:66:5E:91:85:F7:6E:F9:7F:5E:57:96:DE:50:75:8C:07:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c2a0368-e602-3a53-b942-d16b2dd2147e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.133.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b6:21:ae:68:ba:bd:34:51:29:fb:47:db:51:6e:bc:ca:03: bf:79:5c:17:7b:81:68:70:a9:7b:0e:c0:ba:e5:60:b3:8f:f5: 9c:ee:38:db:8f:27:34:59:74:66:0b:2b:74:55:5f:d1:39:3e: 57:ae:05:da:a7:9b:27:f2:0a:78:9f:af:47:a2:15:96:66:7f: b3:dd:31:3e:b6:7e:12:20:8e:d5:05:59:3e:a7:83:c5:ee:ea: 50:f9:e6:c1:58:b5:33:bc:55:21:01:c7:ce:ac:26:ab:c2:f9: fd:1b:a5:0b:7a:01:34:94:59:6d:99:5a:40:73:f1:5d:5c:85: a0:92:70:a6:72:48:e0:80:ec:32:c9:30:60:69:a5:0f:1a:f0: 23:43:df:e2:9d:a7:30:24:42:3c:34:4e:50:3f:b1:e9:0b:d9: fa:41:13:86:b5:51:79:5c:54:73:ab:50:33:a8:83:b2:39:1a: f7:95:07:ff:13:54:6a:19:f9:b4:8d:13:35:ba:f3:2d:fc:04: f4:72:c5:88:4b:9f:c3:ac:81:57:99:2e:62:f9:c5:bb:16:44: 00:1c:5d:3c:ed:de:61:77:89:46:72:2d:91:54:fa:87:6b:c4: 07:bc:0d:bf:f5:ce:b9:8d:77:27:35:cc:75:9a:11:e7:95:02: 9a:e9:b1:3b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg9ZkUOO251oaQDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZDE5ZTQxY2YtYzM0YS00ZDkzLTg1NTQtODY2YTE5Y2ExY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBQ853dte6Otyh2NZ82l2lKag0Lyb/bZ7tot XLX6lEAt1dTD1/8BRwci89q+BvEUmo7S33nxdxBsD03NmdynHCPAFH62kS271bHh v4l7UN9lqnoc227FwJrRYlWzCMpr3VgLq8mc2aKIDWHKa8ZfUXvkeQ7eEJCTMs+A eNJCMYA7iogaxXljlwpgYKuGMMIQYE/tDWQ7TyQWtFp26HphbFlbkHpW+H6s5Z+h 6ydEN2GsAPLUbkkWSU1NkZrp6ux40r1f5hgl/4MdXHCKJ1N5Y8jZGB6LJdnTIbo/ fopSRwVINozp7LAD+qoKpLHzRCRiA6vaSh6dBSsSnVjjtv0MLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNEKBWZekYX3bvl/XleW3lB1jAcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGMyYTAzNjgtZTYwMi0z YTUzLWI5NDItZDE2YjJkZDIxNDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAStiGuaLq9NFEp+0fbUW68ygO/eVwXe4FocKl7DsC65WCzj/Wc7jjb jyc0WXRmCyt0VV/ROT5XrgXap5sn8gp4n69HohWWZn+z3TE+tn4SII7VBVk+p4PF 7upQ+ebBWLUzvFUhAcfOrCarwvn9G6ULegE0lFltmVpAc/FdXIWgknCmckjggOwy yTBgaaUPGvAjQ9/inacwJEI8NE5QP7HpC9n6QROGtVF5XFRzq1AzqIOyORr3lQf/ E1RqGfm0jRM1uvMt/AT0csWIS5/DrIFXmS5i+cW7FkQAHF087d5hd4lGci2RVPqH a8QHvA2/9c65jXcnNcx1mhHnlQKa6bE7 -----END CERTIFICATE-----Generated at Sat Apr 12 00:20:16 2025 by rpki-client