$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53e68439-6857-3f13-9f99-e929d974dc3b.roa File: 53e68439-6857-3f13-9f99-e929d974dc3b.roa (raw, json) Hash identifier: vguqL19f05qn4PMOZ4nYk5UtRj/3QLOH+od1fiUoC+4= Subject key identifier: FA:86:E4:A5:6C:DC:51:93:92:87:B2:57:8B:82:DB:3A:E3:22:4E:B3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A830C1FC292491B911DB8384 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53e68439-6857-3f13-9f99-e929d974dc3b.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 396561 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c1:fc:29:24:91:b9:11:db:83:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=f3ea4a8d-be17-45e0-89a1-1ca41cb68c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:49:8b:96:54:6f:e8:a1:d5:aa:2d:92:0c: db:c4:89:90:93:61:66:a2:16:cc:8a:38:04:dc:ea: 13:7b:39:9b:a5:6e:ad:91:25:72:f6:7a:96:81:67: 09:18:45:b7:cc:e1:d4:e3:ce:87:70:38:fe:e1:24: e6:9a:8d:14:16:33:46:95:3c:8d:5c:2e:ee:6e:11: 3c:b1:04:1c:24:a0:77:14:24:f1:7c:6b:bf:1a:00: b7:7f:22:c9:7f:94:e0:d2:08:58:28:f6:b0:b0:13: c6:c7:f7:7d:6c:06:04:a0:f3:cd:46:97:f9:ce:85: 71:15:61:08:b5:de:94:d3:46:fa:c0:63:aa:1b:32: e8:b6:05:d7:af:f1:24:b3:ed:40:34:5e:de:80:d3: 2c:0b:7d:89:fb:a4:ae:e9:ff:89:1b:9c:50:91:b7: 97:1c:79:10:6c:20:dc:2d:07:b8:77:50:c3:7c:2b: dc:6e:77:d9:cf:6d:02:c1:ec:33:3c:f5:f9:b0:c5: e9:44:0d:31:fb:80:19:5a:f7:e0:df:3d:a4:91:62: bc:4f:76:a1:7c:b1:51:45:f0:2c:b0:da:2d:18:3b: 27:8e:1b:a6:12:f6:40:45:8c:3d:cd:7c:ef:90:67: ed:79:ed:5d:18:9c:4d:a6:3f:d5:ff:ed:6b:19:5f: e2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:86:E4:A5:6C:DC:51:93:92:87:B2:57:8B:82:DB:3A:E3:22:4E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53e68439-6857-3f13-9f99-e929d974dc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:6a:a6:fe:2c:50:37:b6:f2:0d:2d:8e:c8:dd:66:00:46:74: aa:a8:ee:ef:b0:7c:c9:be:e3:21:bd:b2:cb:f4:cf:8f:ed:46: a8:ae:b4:a0:38:c9:0a:7c:38:5e:af:60:e6:b1:1c:3a:da:67: 98:da:3d:ba:40:b4:83:09:21:e4:54:0b:05:52:e9:5a:6f:92: dd:30:29:4a:3f:3a:f2:53:6c:65:10:5b:a2:37:67:cd:42:58: 29:cb:d4:25:af:15:65:02:1d:ba:db:7c:f8:ca:b4:81:f7:09: cf:db:09:70:30:9a:d5:3b:e5:fa:ba:e6:e6:ea:dd:ba:38:c9: ee:33:07:8a:5f:06:f0:2b:0a:93:0d:1c:0d:9a:90:50:cc:96: 5d:51:50:33:9d:f3:7c:ea:ab:01:c5:99:b6:9f:d9:2e:10:47: 04:65:4c:58:b5:ac:f3:06:ef:e0:48:ed:16:01:57:60:25:82: d2:5c:35:ca:d2:ed:3d:49:48:ed:0b:1c:7b:e5:2a:d7:4d:0f: 6b:39:44:e5:7b:b3:12:59:c7:c5:04:81:e6:aa:d9:08:fd:71: 65:72:8b:4c:41:6d:f3:71:95:2c:d5:63:4f:4a:41:fc:0f:4e: ad:b6:49:56:57:a9:a4:d8:10:c9:00:4f:4a:fc:af:a2:ea:67: 0d:34:14:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMMH8KSSRuRHbg4QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjNlYTRhOGQtYmUxNy00NWUwLTg5YTEtMWNhNDFjYjY4YzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT9Ji5ZUb+ih1aotkgzbxImQk2FmohbMijgE 3OoTezmbpW6tkSVy9nqWgWcJGEW3zOHU486HcDj+4STmmo0UFjNGlTyNXC7ubhE8 sQQcJKB3FCTxfGu/GgC3fyLJf5Tg0ghYKPawsBPGx/d9bAYEoPPNRpf5zoVxFWEI td6U00b6wGOqGzLotgXXr/Eks+1ANF7egNMsC32J+6Su6f+JG5xQkbeXHHkQbCDc LQe4d1DDfCvcbnfZz20CwewzPPX5sMXpRA0x+4AZWvfg3z2kkWK8T3ahfLFRRfAs sNotGDsnjhumEvZARYw9zXzvkGftee1dGJxNpj/V/+1rGV/iKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPqG5KVs3FGTkoeyV4uC2zrjIk6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTNlNjg0MzktNjg1Ny0z ZjEzLTlmOTktZTkyOWQ5NzRkYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIaqb+LFA3tvINLY7I3WYARnSqqO7vsHzJvuMhvbLL9M+P7UaorrSg OMkKfDher2DmsRw62meY2j26QLSDCSHkVAsFUulab5LdMClKPzryU2xlEFuiN2fN Qlgpy9QlrxVlAh2623z4yrSB9wnP2wlwMJrVO+X6uubm6t26OMnuMweKXwbwKwqT DRwNmpBQzJZdUVAznfN86qsBxZm2n9kuEEcEZUxYtazzBu/gSO0WAVdgJYLSXDXK 0u09SUjtCxx75SrXTQ9rOUTle7MSWcfFBIHmqtkI/XFlcotMQW3zcZUs1WNPSkH8 D06ttklWV6mk2BDJAE9K/K+i6mcNNBRD -----END CERTIFICATE-----Generated at Sat Apr 12 00:05:08 2025 by rpki-client