$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53021730-f7b9-340e-aa31-c6b5a516cf80.roa File: 53021730-f7b9-340e-aa31-c6b5a516cf80.roa (raw, json) Hash identifier: D9Q1AXpEnXtlEeVgmuEBCJR//ZoL2rDHOhsC5SUJ/A4= Subject key identifier: 5E:2D:B2:02:31:D0:9C:87:98:15:D9:BC:09:B3:8B:AF:A8:BF:3A:36 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849203C80FE1B482E1609B8B8C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53021730-f7b9-340e-aa31-c6b5a516cf80.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 20172 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:80:fe:1b:48:2e:16:09:b8:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=b4b7a2d6-8a2c-4826-95fb-5edaf28ce792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:11:65:7e:fb:62:f7:55:50:2d:8b:94:c3:0d: 05:29:d7:e5:cf:63:33:57:22:ef:31:40:c3:5a:65: f0:1c:27:8c:e5:7d:fc:0c:53:c5:29:1a:81:3f:b5: 7a:01:f5:31:0c:55:c1:79:3c:0a:f7:bb:11:bb:83: 0a:4e:64:e7:30:41:9c:a9:a7:f0:73:a4:cd:6e:d8: 8f:97:f3:ee:13:f2:81:c7:e0:2d:ce:de:c3:ad:42: db:1f:8e:fe:f7:92:27:d7:bf:59:0c:a0:17:7e:bd: f5:f3:70:5b:e3:d6:10:d3:25:0f:bf:54:7f:4e:0a: ea:4d:d7:19:8e:b7:ea:fb:68:c7:d9:7a:3a:5f:7f: 7e:2e:3d:10:72:a0:b1:14:36:6b:ca:a3:8f:26:75: f6:65:5c:62:1a:2b:f3:09:b9:ba:7f:68:d5:0a:1e: 61:e8:f7:07:62:a5:c6:f3:0d:c6:b9:05:9a:00:3f: b6:09:f4:57:dc:9e:97:15:fe:54:84:7b:6b:d2:01: 22:18:0b:24:73:ef:26:ab:26:bc:24:0c:13:e2:03: 28:25:80:a5:c7:66:96:20:92:25:33:37:2f:91:61: 64:79:1e:66:f8:fe:af:e7:5e:15:89:91:2d:08:6e: 34:9b:e2:01:c1:92:90:76:e5:29:d0:2a:81:7e:d5: 4e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2D:B2:02:31:D0:9C:87:98:15:D9:BC:09:B3:8B:AF:A8:BF:3A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53021730-f7b9-340e-aa31-c6b5a516cf80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8c:29:1e:18:ae:4c:43:09:60:40:26:89:8c:d3:73:36:25: aa:e6:64:24:6c:ca:44:2d:76:a6:05:51:08:f9:57:41:56:65: 6c:34:73:c8:4a:07:3a:68:14:bc:4a:65:23:00:c0:f5:4b:32: 48:0c:5f:91:0d:8d:fd:d7:41:eb:c4:90:ef:48:4f:85:2d:7f: 4f:19:f9:ef:fe:60:84:3f:96:8c:92:ef:1a:07:73:ce:46:5a: 98:1b:79:eb:d7:24:f8:fc:c9:3d:23:c8:35:47:0f:9f:f7:1b: d0:aa:77:c8:36:bc:a2:5b:df:c1:b0:85:96:b2:66:ce:c3:2f: c6:8d:f5:fa:d9:79:82:f2:4b:de:e3:96:b1:8c:51:2f:dc:1f: db:ce:0e:71:ec:8d:2e:57:fa:89:e9:6f:63:46:54:74:10:1e: 87:32:34:3d:e5:eb:31:c6:08:c2:6e:6b:f3:1b:e1:ac:b1:9d: 9a:ca:09:3b:30:fa:09:72:b0:4c:d0:09:58:66:69:1f:97:1c: c4:bd:83:e1:29:5c:2c:cb:f2:ca:e8:1d:6e:bd:68:96:ed:0c: 65:83:b1:90:4b:10:8b:da:4f:a8:2a:a8:a1:aa:5f:36:05:83: bc:21:79:e6:7a:cf:d2:3b:65:b0:cb:f9:42:61:af:93:07:f3: dc:45:32:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkgPID+G0guFgm4uMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk YjRiN2EyZDYtOGEyYy00ODI2LTk1ZmItNWVkYWYyOGNlNzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xFlfvti91VQLYuUww0FKdflz2MzVyLvMUDD WmXwHCeM5X38DFPFKRqBP7V6AfUxDFXBeTwK97sRu4MKTmTnMEGcqafwc6TNbtiP l/PuE/KBx+Atzt7DrULbH47+95In179ZDKAXfr3183Bb49YQ0yUPv1R/TgrqTdcZ jrfq+2jH2Xo6X39+Lj0QcqCxFDZryqOPJnX2ZVxiGivzCbm6f2jVCh5h6PcHYqXG 8w3GuQWaAD+2CfRX3J6XFf5UhHtr0gEiGAskc+8mqya8JAwT4gMoJYClx2aWIJIl MzcvkWFkeR5m+P6v514ViZEtCG40m+IBwZKQduUp0CqBftVOGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF4tsgIx0JyHmBXZvAmzi6+ovzo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTMwMjE3MzAtZjdiOS0z NDBlLWFhMzEtYzZiNWE1MTZjZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGjCkeGK5MQwlgQCaJjNNzNiWq5mQkbMpELXamBVEI+VdBVmVsNHPI Sgc6aBS8SmUjAMD1SzJIDF+RDY3910HrxJDvSE+FLX9PGfnv/mCEP5aMku8aB3PO RlqYG3nr1yT4/Mk9I8g1Rw+f9xvQqnfINryiW9/BsIWWsmbOwy/GjfX62XmC8kve 45axjFEv3B/bzg5x7I0uV/qJ6W9jRlR0EB6HMjQ95esxxgjCbmvzG+GssZ2aygk7 MPoJcrBM0AlYZmkflxzEvYPhKVwsy/LK6B1uvWiW7Qxlg7GQSxCL2k+oKqihql82 BYO8IXnmes/SO2Wwy/lCYa+TB/PcRTLl -----END CERTIFICATE-----Generated at Fri Apr 11 22:29:27 2025 by rpki-client