$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d9df6b9-045f-36ac-8454-c5b2bd31420f.roa File: 4d9df6b9-045f-36ac-8454-c5b2bd31420f.roa (raw, json) Hash identifier: kp7aOp8Mag9i8uz+CLgJ7gqoUF8PccMLt+WiV8sB0Uk= Subject key identifier: AE:2A:3D:12:83:60:38:9C:7A:08:6C:CB:D5:07:4A:C6:82:2B:6B:3D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849FF758CDD8ECAA9AD865D6540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d9df6b9-045f-36ac-8454-c5b2bd31420f.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 20362 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:8c:dd:8e:ca:a9:ad:86:5d:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=3a152be7-74f0-4b55-ba18-05c5611620ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:b1:a2:b3:8c:20:f8:f2:5e:12:fe:1a:b4: dd:1c:8e:81:60:f2:7d:0a:ab:24:dd:75:09:68:a3: 8a:d7:bf:53:e2:77:51:39:54:6c:af:01:56:c1:54: 33:e2:df:ae:3d:6b:c9:1e:9d:ca:22:96:03:58:66: ed:7d:83:73:df:91:1e:a5:94:79:90:e6:20:65:d1: 64:db:77:ec:d8:ae:38:26:aa:1a:e0:0b:4f:b0:31: 7c:3f:d1:18:98:24:a2:d5:a8:cb:b0:7a:df:03:3e: 1c:2f:69:af:0c:37:c3:a3:20:a8:aa:dc:92:09:35: bb:cb:d3:cf:c9:e1:9e:40:55:15:21:07:fb:c9:6f: 53:53:b1:a1:85:6e:12:fe:a2:60:55:b0:17:71:b8: 7d:96:8c:ec:26:35:b5:e6:c1:89:e1:39:71:1a:53: 66:f8:4a:20:d0:26:26:84:b4:85:bd:a0:a0:d6:e9: 98:30:83:b7:d2:41:7d:6f:b7:e1:35:4d:3f:2c:f2: df:ae:b6:e7:59:a6:30:01:96:17:a3:76:00:20:7d: f5:55:d0:ef:f1:6f:62:1e:10:b3:c8:28:7b:e0:6a: e9:7b:58:75:de:f7:2b:ac:ac:cc:c6:44:d5:0d:18: 79:01:17:2d:b6:0c:c5:68:5e:52:61:ef:95:4e:58: bd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2A:3D:12:83:60:38:9C:7A:08:6C:CB:D5:07:4A:C6:82:2B:6B:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d9df6b9-045f-36ac-8454-c5b2bd31420f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:4b:da:0f:f1:fb:92:dd:27:0c:35:36:4d:f5:15:38:55:e1: 9d:7b:51:95:76:f8:90:79:8a:04:26:41:95:8a:12:02:02:f8: 9d:8f:b0:a5:5d:6e:e4:e3:68:06:df:5c:c2:31:7b:58:3f:5a: 41:eb:8e:8a:41:13:54:e8:38:82:6e:c2:cc:9b:74:3a:d5:76: ca:c5:73:c3:f7:9c:9f:91:60:7c:1a:55:68:25:4a:44:86:25: 49:2c:b6:81:1e:39:18:3e:c8:44:a1:67:4c:d5:cc:a7:0a:36: ad:3a:58:93:56:23:89:56:fa:96:8b:0f:8b:c0:1a:e6:58:df: 18:72:42:fb:0b:00:0c:4e:16:e9:66:16:18:49:47:a4:12:d7: 83:4b:64:dd:6e:7a:3d:39:bd:9f:c5:c3:d7:ce:7a:a0:40:24: e8:77:15:70:74:bd:90:f2:0b:b1:4b:59:16:45:9d:3b:ee:35: 3d:be:65:48:75:d6:8e:93:a3:b6:40:51:64:71:e7:78:a0:8d: 38:b7:81:1e:c3:32:7f:1f:07:26:b9:f0:42:43:3b:58:5a:da: ed:14:01:16:7f:a6:00:4b:7f:38:9f:39:8a:83:96:36:6a:23: 66:2a:bb:bb:7b:5f:65:41:67:e2:e6:56:5c:09:53:57:ca:54: 15:9c:34:df -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn/dYzdjsqprYZdZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk M2ExNTJiZTctNzRmMC00YjU1LWJhMTgtMDVjNTYxMTYyMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h+xorOMIPjyXhL+GrTdHI6BYPJ9Cqsk3XUJ aKOK179T4ndROVRsrwFWwVQz4t+uPWvJHp3KIpYDWGbtfYNz35EepZR5kOYgZdFk 23fs2K44Jqoa4AtPsDF8P9EYmCSi1ajLsHrfAz4cL2mvDDfDoyCoqtySCTW7y9PP yeGeQFUVIQf7yW9TU7GhhW4S/qJgVbAXcbh9lozsJjW15sGJ4TlxGlNm+Eog0CYm hLSFvaCg1umYMIO30kF9b7fhNU0/LPLfrrbnWaYwAZYXo3YAIH31VdDv8W9iHhCz yCh74Grpe1h13vcrrKzMxkTVDRh5ARcttgzFaF5SYe+VTli9BQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK4qPRKDYDiceghsy9UHSsaCK2s9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGQ5ZGY2YjktMDQ1Zi0z NmFjLTg0NTQtYzViMmJkMzE0MjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCIS9oP8fuS3ScMNTZN9RU4VeGde1GVdviQeYoEJkGVihICAvidj7Cl XW7k42gG31zCMXtYP1pB646KQRNU6DiCbsLMm3Q61XbKxXPD95yfkWB8GlVoJUpE hiVJLLaBHjkYPshEoWdM1cynCjatOliTViOJVvqWiw+LwBrmWN8YckL7CwAMThbp ZhYYSUekEteDS2Tdbno9Ob2fxcPXznqgQCTodxVwdL2Q8guxS1kWRZ077jU9vmVI ddaOk6O2QFFkced4oI04t4EewzJ/HwcmufBCQztYWtrtFAEWf6YAS384nzmKg5Y2 aiNmKru7e19lQWfi5lZcCVNXylQVnDTf -----END CERTIFICATE-----Generated at Fri Jun 6 19:38:29 2025 by rpki-client