$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dc0265c-d8e4-3102-8d78-620ce5f5a57c.roa File: 4dc0265c-d8e4-3102-8d78-620ce5f5a57c.roa (raw, json) Hash identifier: 62FUC31ZssiwBBxOeHqo+XbL9OK3jBVWMl+1oOuSTK0= Subject key identifier: F8:8D:35:6F:6C:B7:10:CA:20:34:21:55:A0:BF:B9:CE:85:99:05:C5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848B784482F4DB3D111C206A400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dc0265c-d8e4-3102-8d78-620ce5f5a57c.roa Signing time: Thu 30 Jan 2025 13:46:21 +0000 ROA not before: Thu 30 Jan 2025 13:46:21 +0000 ROA not after: Wed 30 Apr 2025 12:46:21 +0000 asID: 396595 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:84:48:2f:4d:b3:d1:11:c2:06:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 30 13:46:21 2025 GMT Not After : Apr 30 12:46:21 2025 GMT Subject: CN=84a9844b-0c05-4af0-87c7-b8de132c87fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:db:39:bf:92:63:5c:4a:27:32:3c:88:0a:9e: 12:2e:b0:51:af:4a:bb:33:a3:e6:67:9b:b8:c6:42: 95:0c:5b:f8:fb:74:11:22:cf:bc:d1:94:07:0e:0a: 42:48:44:4f:f1:47:17:ae:60:bb:24:d7:46:be:44: ed:76:59:32:3c:6d:cb:61:b2:44:a1:4f:c8:1e:7e: f6:4c:4c:ed:76:ba:36:33:24:05:4d:7e:d8:ac:39: 1d:b6:c4:4a:8a:7a:44:66:a0:6d:75:12:02:72:70: bf:61:e1:44:c6:46:4e:d7:99:70:85:7c:74:d6:71: a8:60:17:61:48:8e:62:7b:3b:be:cd:0b:ba:aa:09: 0e:e5:0e:58:15:a1:81:2c:a4:f5:9f:2d:05:e9:e3: 83:2f:19:62:be:cd:66:a4:af:c8:54:f0:7b:86:0b: 1f:8f:7b:6c:8e:ba:13:d3:1f:26:3d:76:83:f9:ab: 05:1d:29:38:d7:24:fe:13:ab:ef:8d:64:1c:39:dc: d6:17:36:df:3c:ca:47:07:59:ad:3e:f8:e1:da:18: 36:a6:be:ff:de:d9:60:93:bc:e0:08:50:b8:e3:bc: ec:f5:02:43:9e:28:d2:9a:f3:e3:6f:79:72:b6:2c: d2:c5:28:6c:92:a5:66:95:7c:2e:cc:58:f4:06:27: 09:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8D:35:6F:6C:B7:10:CA:20:34:21:55:A0:BF:B9:CE:85:99:05:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dc0265c-d8e4-3102-8d78-620ce5f5a57c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e2:e3:6c:13:2a:1d:36:64:63:22:10:85:63:4e:03:bf:33: df:96:d5:27:d2:66:1e:bd:d7:d4:4f:3a:a6:bf:8d:8e:fc:6d: 36:60:d5:4b:11:e9:8e:0a:7c:33:02:6e:08:4d:27:40:2f:19: c6:78:4b:e3:2b:51:97:08:83:a7:5d:8f:db:fa:87:c3:c1:f9: 9a:18:1d:f3:72:17:7d:bb:3c:38:7c:56:47:80:fc:3e:ed:a8: e2:d5:10:9e:97:14:df:75:96:a3:a8:27:25:0a:e7:c7:b2:a3: 6b:c7:aa:00:83:45:39:b2:51:73:67:36:23:ae:42:ae:5a:c7: 01:06:dc:09:a1:ff:13:78:9a:99:47:9b:d5:63:02:32:44:85: 82:10:47:54:f5:78:62:0a:40:80:02:ca:f0:69:44:76:65:f5: 41:da:29:3e:80:59:fd:57:08:30:c9:ee:3c:f1:50:dc:d1:61: e0:47:89:e5:ff:49:94:53:22:77:9b:f6:b6:47:d4:02:23:7a: 5d:67:5a:44:9d:13:8b:22:55:e1:17:90:cf:0c:22:d5:41:10: 82:72:94:29:a0:02:05:8e:4a:f1:a9:67:41:2b:74:2c:f4:01: 85:33:1e:ec:e0:ed:46:01:79:cc:8f:f9:e9:47:7a:36:7f:ad: 2b:9f:30:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hEgvTbPREcIGpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEzMDEzNDYyMVoXDTI1MDQzMDEyNDYyMVowLzEtMCsGA1UEAxMk ODRhOTg0NGItMGMwNS00YWYwLTg3YzctYjhkZTEzMmM4N2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjds5v5JjXEonMjyICp4SLrBRr0q7M6PmZ5u4 xkKVDFv4+3QRIs+80ZQHDgpCSERP8UcXrmC7JNdGvkTtdlkyPG3LYbJEoU/IHn72 TEztdro2MyQFTX7YrDkdtsRKinpEZqBtdRICcnC/YeFExkZO15lwhXx01nGoYBdh SI5iezu+zQu6qgkO5Q5YFaGBLKT1ny0F6eODLxlivs1mpK/IVPB7hgsfj3tsjroT 0x8mPXaD+asFHSk41yT+E6vvjWQcOdzWFzbfPMpHB1mtPvjh2hg2pr7/3tlgk7zg CFC447zs9QJDnijSmvPjb3lytizSxShskqVmlXwuzFj0BicJrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPiNNW9stxDKIDQhVaC/uc6FmQXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGRjMDI2NWMtZDhlNC0z MTAyLThkNzgtNjIwY2U1ZjVhNTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAF4uNsEyodNmRjIhCFY04DvzPfltUn0mYevdfUTzqmv42O/G02YNVL EemOCnwzAm4ITSdALxnGeEvjK1GXCIOnXY/b+ofDwfmaGB3zchd9uzw4fFZHgPw+ 7aji1RCelxTfdZajqCclCufHsqNrx6oAg0U5slFzZzYjrkKuWscBBtwJof8TeJqZ R5vVYwIyRIWCEEdU9XhiCkCAAsrwaUR2ZfVB2ik+gFn9Vwgwye488VDc0WHgR4nl /0mUUyJ3m/a2R9QCI3pdZ1pEnROLIlXhF5DPDCLVQRCCcpQpoAIFjkrxqWdBK3Qs 9AGFMx7s4O1GAXnMj/npR3o2f60rnzB0 -----END CERTIFICATE-----Generated at Fri Apr 11 23:40:50 2025 by rpki-client