$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc3c3c1-6854-3a4b-b30f-1fc736e41e78.roa File: 5bc3c3c1-6854-3a4b-b30f-1fc736e41e78.roa (raw, json) Hash identifier: Lld6uCcanIAlruxehO90UezAzDtiWzmQyTjSpg8GoCc= Subject key identifier: F2:A9:AD:2C:C8:FA:FA:35:2B:7E:DE:A5:FE:66:16:73:10:08:0B:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849203C7F1405D1E2834E72A110 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc3c3c1-6854-3a4b-b30f-1fc736e41e78.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 36629 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:7f:14:05:d1:e2:83:4e:72:a1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=7ee4fba8-daa3-48e6-b1c4-649d0fc2efd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:33:fa:58:8e:47:70:77:d1:f0:01:bf:74: dc:bd:d2:17:98:9f:45:de:f4:a4:9a:be:cb:7e:ab: 7d:5a:ab:e6:67:0e:03:3b:f8:dc:12:9b:01:77:4f: 96:3f:99:18:63:a7:67:9d:90:8d:7b:07:00:4a:fd: d1:fe:f3:c4:c1:cb:1f:6f:42:c3:a0:cf:fa:47:d2: 52:c2:59:fd:a9:b6:c4:1a:8d:dc:ed:f1:b3:78:56: 2a:3b:fe:02:7c:cc:65:95:ef:f2:c7:ef:c5:44:bd: d3:7d:d0:2e:f7:37:f2:c6:0c:b9:9c:13:ea:32:54: ce:ef:57:d2:13:6a:5a:8b:bf:21:46:0e:41:3b:f2: 3a:0f:82:54:af:a6:84:af:36:08:a8:2e:67:f4:3d: 60:40:55:1b:3c:17:f9:e6:0b:62:0b:62:0f:4c:1b: 78:71:92:da:f8:58:17:80:2f:5d:eb:c7:31:fe:5f: e9:91:02:8b:d2:04:24:1e:86:4b:46:59:eb:d0:32: 9c:6f:c5:59:c8:f6:39:5b:1e:cf:00:e0:42:98:9d: a7:74:db:ad:70:ab:64:ad:29:16:df:d1:02:3a:a8: c7:0d:c6:4b:9a:e8:52:cc:2c:b2:33:ab:99:34:57: c3:b7:8d:db:82:2b:c3:42:69:d6:ee:6d:5b:7a:42: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A9:AD:2C:C8:FA:FA:35:2B:7E:DE:A5:FE:66:16:73:10:08:0B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc3c3c1-6854-3a4b-b30f-1fc736e41e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b2:73:a7:32:b6:f6:69:67:f1:88:4d:85:f9:a0:91:c8:b3: 66:c8:48:ea:70:dd:02:df:d3:6c:30:eb:57:a9:cc:ee:c8:3b: 92:8f:79:e8:fc:42:e3:82:8d:c9:03:f6:c2:5c:6d:94:b2:ac: 9b:b3:30:3d:9b:93:35:b6:8e:bd:d5:84:fb:53:fe:83:cf:57: 6c:25:2f:c2:71:c4:6e:7c:54:4a:5d:e0:9e:af:7d:78:ce:f5: be:e9:b5:69:e6:fa:71:86:78:dd:05:a5:94:30:f1:ab:2a:e1: 31:26:de:b8:ab:25:2a:8b:0e:56:c2:9d:42:d9:c0:14:6d:a3: 69:7a:e0:5e:03:87:58:9f:dd:33:cb:a3:ca:54:63:a5:22:3b: 52:e0:12:13:14:ea:a7:28:da:4b:1d:55:ac:83:6a:7b:ae:b8: 51:37:3f:0b:5b:68:0c:6f:9c:65:19:23:19:28:a6:5f:27:97: 7c:04:43:0c:ca:d7:dc:76:2d:1e:fa:61:e3:f0:b5:3f:d5:b7: 50:29:4f:f9:56:73:82:7f:0c:61:d0:97:38:87:3a:e2:fa:4b: db:85:38:28:84:da:8c:20:77:c8:0f:43:6d:72:07:03:d8:40: 86:2f:59:c4:56:fd:6e:7a:15:dc:31:8c:90:c8:da:6e:70:3e: 8e:60:e6:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkgPH8UBdHig05yoRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk N2VlNGZiYTgtZGFhMy00OGU2LWIxYzQtNjQ5ZDBmYzJlZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjokz+liOR3B30fABv3TcvdIXmJ9F3vSkmr7L fqt9WqvmZw4DO/jcEpsBd0+WP5kYY6dnnZCNewcASv3R/vPEwcsfb0LDoM/6R9JS wln9qbbEGo3c7fGzeFYqO/4CfMxlle/yx+/FRL3TfdAu9zfyxgy5nBPqMlTO71fS E2pai78hRg5BO/I6D4JUr6aErzYIqC5n9D1gQFUbPBf55gtiC2IPTBt4cZLa+FgX gC9d68cx/l/pkQKL0gQkHoZLRlnr0DKcb8VZyPY5Wx7PAOBCmJ2ndNutcKtkrSkW 39ECOqjHDcZLmuhSzCyyM6uZNFfDt43bgivDQmnW7m1bekJ4OQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPKprSzI+vo1K37epf5mFnMQCAuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWJjM2MzYzEtNjg1NC0z YTRiLWIzMGYtMWZjNzM2ZTQxZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAisnOnMrb2aWfxiE2F+aCRyLNmyEjqcN0C39NsMOtXqczuyDuSj3no /ELjgo3JA/bCXG2UsqybszA9m5M1to691YT7U/6Dz1dsJS/CccRufFRKXeCer314 zvW+6bVp5vpxhnjdBaWUMPGrKuExJt64qyUqiw5Wwp1C2cAUbaNpeuBeA4dYn90z y6PKVGOlIjtS4BITFOqnKNpLHVWsg2p7rrhRNz8LW2gMb5xlGSMZKKZfJ5d8BEMM ytfcdi0e+mHj8LU/1bdQKU/5VnOCfwxh0Jc4hzri+kvbhTgohNqMIHfID0NtcgcD 2ECGL1nEVv1uehXcMYyQyNpucD6OYOaO -----END CERTIFICATE-----Generated at Fri Apr 11 22:29:31 2025 by rpki-client