$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/624739cb-f9cf-3c95-952a-46c431505a2a.roa File: 624739cb-f9cf-3c95-952a-46c431505a2a.roa (raw, json) Hash identifier: FU9r0EQdrlJ0npzemTDrHSFxglbKPty8LIjs2Iwoy24= Subject key identifier: 8C:5A:DA:D3:E3:B3:C8:AD:64:C1:7D:CA:C1:94:35:70:0A:BB:75:55 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A0C0917659FD99D27B3AD3580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/624739cb-f9cf-3c95-952a-46c431505a2a.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 36624 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:09:17:65:9f:d9:9d:27:b3:ad:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=744fe4e6-ee1e-487f-ace6-365f8b619466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a3:8f:a1:b2:58:01:a0:07:6f:6d:76:72:e5: 63:41:f0:e5:f0:0a:78:5f:ff:f6:6f:7d:87:92:57: bf:7a:2d:df:cb:36:61:83:3e:f2:d8:ce:b6:a1:2a: a2:42:9c:b1:96:e1:a9:37:c9:b2:94:95:cd:95:f3: 8c:9c:01:53:d8:3b:00:1f:9a:3c:f6:91:e6:03:db: f0:d9:66:59:60:04:33:c4:6c:d9:ed:bc:14:cb:ea: 32:8f:26:fb:75:3b:01:d7:fb:3d:7e:e2:d4:6d:91: ed:65:86:f6:c3:51:be:1d:f1:0b:6f:69:52:bc:4c: 77:b5:a9:d7:7c:02:40:49:b0:02:df:90:00:ac:5a: 97:da:e0:82:b3:13:77:5f:82:25:dd:3e:2d:5a:88: 06:42:81:e7:56:4f:b2:d2:2e:6f:49:4a:8d:5f:1e: 25:dc:3e:b0:90:e6:25:11:ae:da:35:73:6c:55:06: a8:92:5a:bc:bc:7b:55:7b:05:ec:66:55:9d:6e:78: 0f:9a:ba:2a:e4:17:84:bf:a0:f2:6f:3f:aa:53:56: 79:86:87:58:ad:7b:57:0e:cb:af:c9:91:2f:3e:31: cc:96:5a:3f:ec:b6:27:02:ad:2f:79:aa:b7:b9:39: 85:05:b0:8a:a0:e5:6e:49:09:a1:da:c0:d0:e2:74: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5A:DA:D3:E3:B3:C8:AD:64:C1:7D:CA:C1:94:35:70:0A:BB:75:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/624739cb-f9cf-3c95-952a-46c431505a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:42:26:2c:26:50:4e:a9:b7:bd:36:09:2a:f3:e4:18:2e:34: 5a:30:1b:38:88:c4:16:bf:f7:af:10:60:9a:1b:3b:0a:7d:ea: e4:b9:fe:c2:ef:04:62:6b:3c:7e:43:65:27:2c:13:aa:4d:be: ca:35:1a:28:81:f2:f1:5b:e8:79:14:2b:c3:2d:b3:00:51:ec: 63:54:fe:82:66:19:30:65:63:1d:a7:a6:97:cf:f3:58:c4:99: 48:82:8c:3d:48:60:3a:68:5d:37:3b:be:10:c7:4c:f0:c0:31: b8:34:13:34:28:ad:2e:3e:4f:62:58:d5:d1:2c:1c:f4:f7:7b: 57:37:9b:a1:b5:a8:ee:96:1d:72:26:90:e1:2c:10:8a:1c:05: 38:37:e9:e3:f9:bd:09:7d:64:93:91:94:30:52:b9:6b:8d:fc: b1:27:ed:a0:b2:ec:04:b7:90:93:5c:44:d4:85:5e:8a:e3:b1: 1b:91:47:ff:f7:59:12:3f:54:21:01:45:92:a6:3e:b3:2d:9c: f9:41:22:d3:eb:71:47:16:8f:9e:01:71:d8:6e:db:52:93:e8: aa:25:94:26:23:a9:57:96:72:ad:f2:a6:26:c2:58:dc:46:51: 21:50:70:aa:24:6a:35:07:84:2d:0c:29:e2:42:21:4a:3a:58: f2:19:36:77 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoMCRdln9mdJ7OtNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NzQ0ZmU0ZTYtZWUxZS00ODdmLWFjZTYtMzY1ZjhiNjE5NDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKOPobJYAaAHb212cuVjQfDl8Ap4X//2b32H kle/ei3fyzZhgz7y2M62oSqiQpyxluGpN8mylJXNlfOMnAFT2DsAH5o89pHmA9vw 2WZZYAQzxGzZ7bwUy+oyjyb7dTsB1/s9fuLUbZHtZYb2w1G+HfELb2lSvEx3tanX fAJASbAC35AArFqX2uCCsxN3X4Il3T4tWogGQoHnVk+y0i5vSUqNXx4l3D6wkOYl Ea7aNXNsVQaoklq8vHtVewXsZlWdbngPmroq5BeEv6Dybz+qU1Z5hodYrXtXDsuv yZEvPjHMllo/7LYnAq0veaq3uTmFBbCKoOVuSQmh2sDQ4nRlJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIxa2tPjs8itZMF9ysGUNXAKu3VVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjI0NzM5Y2ItZjljZi0z Yzk1LTk1MmEtNDZjNDMxNTA1YTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBtQiYsJlBOqbe9Ngkq8+QYLjRaMBs4iMQWv/evEGCaGzsKferkuf7C 7wRiazx+Q2UnLBOqTb7KNRoogfLxW+h5FCvDLbMAUexjVP6CZhkwZWMdp6aXz/NY xJlIgow9SGA6aF03O74Qx0zwwDG4NBM0KK0uPk9iWNXRLBz093tXN5uhtajulh1y JpDhLBCKHAU4N+nj+b0JfWSTkZQwUrlrjfyxJ+2gsuwEt5CTXETUhV6K47EbkUf/ 91kSP1QhAUWSpj6zLZz5QSLT63FHFo+eAXHYbttSk+iqJZQmI6lXlnKt8qYmwljc RlEhUHCqJGo1B4QtDCniQiFKOljyGTZ3 -----END CERTIFICATE-----Generated at Sun Jun 8 13:42:37 2025 by rpki-client