$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dbb3d0e-a0bd-3869-9537-a114ec6667a3.roa File: 4dbb3d0e-a0bd-3869-9537-a114ec6667a3.roa (raw, json) Hash identifier: f/QOJ54kPtDLw6GMukgOY+eiYDygLGC5Tuw+hY8iFso= Subject key identifier: 2D:64:87:02:92:C1:71:4D:70:51:12:DA:22:BB:EE:09:7B:31:90:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A3F58C81013B1E9D58DB5970 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dbb3d0e-a0bd-3869-9537-a114ec6667a3.roa Signing time: Thu 23 Jan 2025 13:38:24 +0000 ROA not before: Thu 23 Jan 2025 13:38:24 +0000 ROA not after: Wed 23 Apr 2025 12:38:24 +0000 asID: 36632 IP address blocks: 192.12.94.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:f5:8c:81:01:3b:1e:9d:58:db:59:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 23 13:38:24 2025 GMT Not After : Apr 23 12:38:24 2025 GMT Subject: CN=6a8e080d-d530-48e5-8e53-26c427a4a3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:11:ba:ec:b8:af:5a:9f:3b:1c:2d:bf:f1:f2: eb:33:48:1e:47:63:67:79:c0:85:59:1d:37:c7:41: 62:24:1b:fd:fb:7f:27:6c:e2:3c:ca:b6:67:6d:74: 5c:cf:a8:3e:20:4b:f5:2e:8c:db:aa:55:30:ab:2e: e2:49:74:2f:50:bd:ee:f8:be:58:eb:af:f5:57:30: 0b:c7:6f:05:a9:86:8d:6a:77:aa:ff:f3:94:cd:98: 6a:77:7b:fb:65:f4:85:83:e1:2a:9d:b5:3e:0b:2d: 67:fd:11:0e:6f:24:fc:ab:62:03:8f:5d:37:28:01: 07:b9:48:c3:87:ef:a3:48:df:1d:4d:36:0c:d6:0e: e2:21:5e:48:bb:ed:a9:3d:3d:29:05:6c:30:e4:eb: e3:b2:3b:18:b0:fa:03:36:25:d8:10:a5:39:b7:c4: 7c:b8:e7:4d:7b:50:c4:77:02:3f:fd:b9:90:30:74: af:8e:4a:9e:a4:06:b4:73:d8:ef:87:cd:9f:aa:b8: 14:d9:ba:ef:8e:c5:ae:a9:2b:0a:01:f5:bb:f0:42: 82:97:dc:60:4b:be:da:5c:8c:5e:4a:f5:6d:4e:6c: 9e:cd:90:c6:2c:a8:32:a3:56:f5:83:c6:cf:9a:95: b8:19:45:90:a0:7d:5a:1b:b4:e8:2a:7e:07:04:9c: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:64:87:02:92:C1:71:4D:70:51:12:DA:22:BB:EE:09:7B:31:90:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dbb3d0e-a0bd-3869-9537-a114ec6667a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:64:d8:52:2b:3c:8c:05:c2:be:fb:5e:e2:f9:54:8e:8b:49: bd:a1:72:d3:49:c1:f0:2f:a4:dc:a5:83:4f:68:26:6e:fe:8c: 05:fa:f1:fe:ac:19:50:e4:45:d5:d9:bd:eb:73:fe:e8:bd:04: df:9e:ae:1f:5c:2a:1e:07:23:9b:c8:97:26:93:c0:fa:bc:cb: 78:5b:7d:18:d9:73:eb:d0:4c:f8:4c:db:41:68:6f:ae:ec:33: 31:6c:5f:48:03:f9:7b:65:fa:da:d9:cb:34:e0:d1:cc:f1:9d: f6:f2:34:6b:46:d8:ea:c1:e6:9f:42:cd:78:12:0c:5f:98:e0: 3f:db:42:0b:bd:9e:a1:7d:4e:78:af:08:19:d5:c6:c1:0e:c2: 4d:2e:af:f0:23:da:7c:e7:a9:1f:2c:b6:62:e3:f0:ed:8f:02: f1:c4:be:4d:c3:05:c1:53:20:ad:62:f0:2f:c8:b8:37:40:97: 7c:a3:ef:8e:2f:20:66:ed:ab:8e:18:09:cb:10:0d:64:7d:39: 85:57:72:57:9e:52:fd:db:7a:9d:75:0b:ac:23:58:1c:61:b5: a5:24:07:dd:63:95:3e:f3:c5:ee:db:2b:15:ae:e1:b1:16:c6: c8:72:fa:bb:24:65:e1:84:1f:b6:d5:40:48:76:57:f7:d2:d7: 67:b2:bc:dc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEij9YyBATsenVjbWXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyMzEzMzgyNFoXDTI1MDQyMzEyMzgyNFowLzEtMCsGA1UEAxMk NmE4ZTA4MGQtZDUzMC00OGU1LThlNTMtMjZjNDI3YTRhM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBG67LivWp87HC2/8fLrM0geR2NnecCFWR03 x0FiJBv9+38nbOI8yrZnbXRcz6g+IEv1LozbqlUwqy7iSXQvUL3u+L5Y66/1VzAL x28FqYaNaneq//OUzZhqd3v7ZfSFg+EqnbU+Cy1n/REObyT8q2IDj103KAEHuUjD h++jSN8dTTYM1g7iIV5Iu+2pPT0pBWww5OvjsjsYsPoDNiXYEKU5t8R8uOdNe1DE dwI//bmQMHSvjkqepAa0c9jvh82fqrgU2brvjsWuqSsKAfW78EKCl9xgS77aXIxe SvVtTmyezZDGLKgyo1b1g8bPmpW4GUWQoH1aG7ToKn4HBJxYAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC1khwKSwXFNcFES2iK77gl7MZCZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGRiYjNkMGUtYTBiZC0z ODY5LTk1MzctYTExNGVjNjY2N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2ZNhSKzyMBcK++17i+VSOi0m9oXLTScHwL6TcpYNPaCZu/owF+vH+ rBlQ5EXV2b3rc/7ovQTfnq4fXCoeByObyJcmk8D6vMt4W30Y2XPr0Ez4TNtBaG+u 7DMxbF9IA/l7Zfra2cs04NHM8Z328jRrRtjqweafQs14EgxfmOA/20ILvZ6hfU54 rwgZ1cbBDsJNLq/wI9p856kfLLZi4/DtjwLxxL5NwwXBUyCtYvAvyLg3QJd8o++O LyBm7auOGAnLEA1kfTmFV3JXnlL923qddQusI1gcYbWlJAfdY5U+88Xu2ysVruGx FsbIcvq7JGXhhB+21UBIdlf30tdnsrzc -----END CERTIFICATE-----Generated at Sat Apr 12 00:11:53 2025 by rpki-client