$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fa42897-8750-3c49-b424-23c1e4bec4a8.roa File: 5fa42897-8750-3c49-b424-23c1e4bec4a8.roa (raw, json) Hash identifier: gtP0AZa5ntGy3qY3J9VjZWp6UvY8jShDZDyjV0pDdsc= Subject key identifier: 72:AC:38:D5:B4:54:E5:CF:1A:B9:6F:3F:52:1F:8C:3F:A3:5E:3F:05 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848B4C0EEDDAF909216F44B0E20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fa42897-8750-3c49-b424-23c1e4bec4a8.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 396551 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:ee:dd:af:90:92:16:f4:4b:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=d788eb6b-66fd-4cef-8fd9-33c9476b932b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:33:d4:90:1e:31:7d:db:d2:f9:37:e4:7e:10: 5d:63:de:32:cd:a4:38:4c:89:49:1d:06:b7:0f:cc: 1d:31:ba:e3:bc:72:29:0e:92:0f:35:a8:69:34:b9: d6:a4:6d:5e:e7:6a:c0:56:fe:be:61:01:77:69:0a: c7:86:85:94:d7:32:d2:44:3a:b0:d4:4b:48:65:83: a6:a7:b9:25:37:03:e8:3b:97:aa:93:c0:85:87:b5: 8d:d6:bf:19:b4:c5:58:bc:e7:53:0e:08:9e:6a:e4: 64:19:9a:a7:b0:ac:e1:3a:34:9d:47:27:1c:4f:1c: 1f:b0:6d:77:de:ce:c1:48:db:64:13:df:f3:59:76: 78:11:9e:ab:40:fa:2e:c5:4e:d8:03:88:ae:08:bf: ab:91:c7:3c:57:66:b4:f6:ca:5e:12:b9:33:23:7c: bd:7b:6e:4d:54:4b:c7:62:b7:d2:a0:13:02:6a:4f: 38:e7:11:0f:8a:e3:9d:22:73:28:ed:00:24:83:d9: d6:72:e0:9e:1d:d2:7c:6b:df:c1:16:73:67:d3:f3: 5f:70:11:81:82:95:45:10:8e:8a:fc:87:44:58:de: ef:73:66:6a:95:d4:9b:db:32:19:6f:22:90:d3:71: e7:bf:d2:8f:a1:34:00:0b:9d:09:5a:e8:36:12:ed: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AC:38:D5:B4:54:E5:CF:1A:B9:6F:3F:52:1F:8C:3F:A3:5E:3F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fa42897-8750-3c49-b424-23c1e4bec4a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:aa:c9:8a:88:e7:aa:3a:70:5b:06:6a:06:f5:9e:9a:55:47: 80:4d:98:0d:2b:a4:49:ae:94:ef:b9:b1:61:89:c1:14:46:7e: d2:aa:bb:49:19:bb:6b:27:d7:29:44:6c:4f:15:51:94:a8:8f: 18:be:aa:bd:a6:56:1a:5d:15:18:1d:74:bb:c4:18:a0:06:29: 24:85:19:6c:ed:47:99:9f:62:4a:36:2a:23:3b:97:0a:bd:93: f2:ab:d1:1a:cb:28:c9:81:1e:f6:cd:ca:2f:1d:f8:cc:66:00: e4:b0:71:ec:fa:60:bb:6f:93:9f:c8:b1:a4:8e:49:5e:80:7f: 65:08:a5:10:f4:34:5a:6c:70:b7:96:fd:3b:58:6e:7d:71:3c: c2:af:60:1e:19:0e:8a:52:f0:dc:0a:bb:d3:62:3c:a0:b4:2e: f7:25:01:e7:a3:09:69:6b:70:ad:83:22:97:a7:3e:20:d9:30: ef:5e:bb:a5:d8:0a:97:fb:b2:0c:1c:e8:58:92:0b:25:8d:2c: 3f:96:0b:a0:71:3e:de:05:16:56:41:a3:d4:2b:54:eb:d6:e4: a5:d3:b7:1d:a6:26:7d:e4:c5:1a:53:1b:f7:af:97:be:57:aa: c9:e6:10:32:31:b0:4c:36:7d:f9:9c:6b:e3:6c:11:b9:7a:06: b1:c0:1d:96 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi0wO7dr5CSFvRLDiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZDc4OGViNmItNjZmZC00Y2VmLThmZDktMzNjOTQ3NmI5MzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jPUkB4xfdvS+TfkfhBdY94yzaQ4TIlJHQa3 D8wdMbrjvHIpDpIPNahpNLnWpG1e52rAVv6+YQF3aQrHhoWU1zLSRDqw1EtIZYOm p7klNwPoO5eqk8CFh7WN1r8ZtMVYvOdTDgieauRkGZqnsKzhOjSdRyccTxwfsG13 3s7BSNtkE9/zWXZ4EZ6rQPouxU7YA4iuCL+rkcc8V2a09speErkzI3y9e25NVEvH YrfSoBMCak845xEPiuOdInMo7QAkg9nWcuCeHdJ8a9/BFnNn0/NfcBGBgpVFEI6K /IdEWN7vc2ZqldSb2zIZbyKQ03Hnv9KPoTQAC50JWug2Eu1EzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHKsONW0VOXPGrlvP1IfjD+jXj8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWZhNDI4OTctODc1MC0z YzQ5LWI0MjQtMjNjMWU0YmVjNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKqsmKiOeqOnBbBmoG9Z6aVUeATZgNK6RJrpTvubFhicEURn7SqrtJ GbtrJ9cpRGxPFVGUqI8Yvqq9plYaXRUYHXS7xBigBikkhRls7UeZn2JKNiojO5cK vZPyq9EayyjJgR72zcovHfjMZgDksHHs+mC7b5OfyLGkjklegH9lCKUQ9DRabHC3 lv07WG59cTzCr2AeGQ6KUvDcCrvTYjygtC73JQHnowlpa3CtgyKXpz4g2TDvXrul 2AqX+7IMHOhYkgsljSw/lgugcT7eBRZWQaPUK1Tr1uSl07cdpiZ95MUaUxv3r5e+ V6rJ5hAyMbBMNn35nGvjbBG5egaxwB2W -----END CERTIFICATE-----Generated at Fri Apr 11 23:20:34 2025 by rpki-client