$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63aa7219-0d3a-3e9a-9c48-6ab34e7f1395.roa File: 63aa7219-0d3a-3e9a-9c48-6ab34e7f1395.roa (raw, json) Hash identifier: uWQnuTls6pfLdP83bbW56X8K9wTW/6+Sn2Qy5DDbLHs= Subject key identifier: 5E:92:1F:CB:39:BA:1A:6B:1E:55:EE:85:21:E4:62:D2:F7:5C:3F:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858493ED3F45D3C094B251082C380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63aa7219-0d3a-3e9a-9c48-6ab34e7f1395.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 396557 IP address blocks: 192.42.176.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:f4:5d:3c:09:4b:25:10:82:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=3bdbfcc7-12d0-42f7-8449-81907a7d2de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2d:05:8c:db:bb:0d:eb:0d:2f:5f:01:2c:25: 2d:ab:77:92:13:9e:ac:5f:ff:63:a2:ad:30:f2:5a: 7d:b6:ae:1e:c2:bd:8f:1f:ef:25:b9:73:c4:f4:96: 05:4b:44:56:e7:89:89:94:7c:ac:59:13:b9:b2:ae: 25:48:2a:e9:82:11:3c:db:1e:c8:df:f2:92:66:f4: e0:14:81:db:5b:57:b9:84:99:33:1f:0a:c9:cf:28: ba:d7:13:a7:3f:7f:01:8b:b4:52:f6:a2:e5:63:da: 94:3b:21:7f:5b:dd:0a:50:71:1c:54:cd:71:9a:ae: 73:39:90:3a:7e:a5:6e:db:5b:23:68:07:55:0e:c8: c8:65:2a:57:23:f6:b1:08:a1:4f:be:b3:0e:05:88: 5a:7f:ea:0a:69:d2:ea:2f:3a:40:20:8d:e3:2a:53: b8:e1:3b:48:92:b0:24:f3:27:9d:35:79:86:77:48: 9f:be:8e:6c:8c:ea:bc:46:50:6d:ac:b5:7d:38:87: 17:16:14:d7:cf:26:17:50:bc:7e:62:25:b5:34:77: e0:c9:71:49:b9:23:43:52:62:dd:41:ac:86:ba:9b: b4:29:9f:7b:46:0c:f9:6d:c3:92:24:42:ad:11:35: 91:fa:6d:c4:d4:fb:7d:e7:20:8f:2c:ff:1c:79:3a: 00:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:92:1F:CB:39:BA:1A:6B:1E:55:EE:85:21:E4:62:D2:F7:5C:3F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63aa7219-0d3a-3e9a-9c48-6ab34e7f1395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b5:3e:5f:0f:69:2f:51:11:40:89:67:8a:fe:50:5f:10:88: c3:ff:d9:09:0e:0c:0c:df:8d:d6:0d:53:48:30:95:1c:fb:57: 09:7b:d7:e4:c9:11:74:b2:da:e9:89:f3:35:be:19:6e:ac:0c: d1:60:2f:88:a0:d8:52:d6:e2:5c:17:d8:1d:87:4e:56:42:d2: bd:9e:2a:7c:8c:f0:25:c3:1f:b8:bd:4b:88:14:12:2c:cf:81: 55:d2:59:9a:7c:0a:d2:4a:8a:69:e3:03:82:85:18:df:a0:13: c2:dc:74:af:54:6b:98:05:1f:9a:7c:54:33:f2:14:81:be:25: 7d:89:32:90:54:f3:33:fd:cf:04:e3:82:e7:99:9f:34:54:73: 4f:4e:79:d9:20:2c:89:2a:6f:23:77:72:d0:49:51:a4:b8:68: f9:a0:1b:5c:1c:c8:94:40:87:15:b8:80:e8:23:1e:47:b9:38: 08:b9:6f:30:ba:a1:25:53:ba:61:3c:02:b1:d5:e3:c6:47:33: 30:37:8e:ff:25:ad:ec:61:8e:b2:f0:23:13:63:3e:25:1c:04: 13:3b:77:ce:41:09:72:8b:b7:4e:df:fe:61:e7:d1:f9:b8:9f: 3a:c0:16:58:8a:60:1d:5c:07:0e:a1:e2:55:d8:fb:6e:5a:c5: d8:d4:f9:3b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEk+0/RdPAlLJRCCw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk M2JkYmZjYzctMTJkMC00MmY3LTg0NDktODE5MDdhN2QyZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky0FjNu7DesNL18BLCUtq3eSE56sX/9joq0w 8lp9tq4ewr2PH+8luXPE9JYFS0RW54mJlHysWRO5sq4lSCrpghE82x7I3/KSZvTg FIHbW1e5hJkzHwrJzyi61xOnP38Bi7RS9qLlY9qUOyF/W90KUHEcVM1xmq5zOZA6 fqVu21sjaAdVDsjIZSpXI/axCKFPvrMOBYhaf+oKadLqLzpAII3jKlO44TtIkrAk 8yedNXmGd0ifvo5sjOq8RlBtrLV9OIcXFhTXzyYXULx+YiW1NHfgyXFJuSNDUmLd QayGupu0KZ97Rgz5bcOSJEKtETWR+m3E1Pt95yCPLP8ceToAxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF6SH8s5uhprHlXuhSHkYtL3XD9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjNhYTcyMTktMGQzYS0z ZTlhLTljNDgtNmFiMzRlN2YxMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCmtT5fD2kvURFAiWeK/lBfEIjD/9kJDgwM343WDVNIMJUc+1cJe9fk yRF0strpifM1vhlurAzRYC+IoNhS1uJcF9gdh05WQtK9nip8jPAlwx+4vUuIFBIs z4FV0lmafArSSopp4wOChRjfoBPC3HSvVGuYBR+afFQz8hSBviV9iTKQVPMz/c8E 44LnmZ80VHNPTnnZICyJKm8jd3LQSVGkuGj5oBtcHMiUQIcVuIDoIx5HuTgIuW8w uqElU7phPAKx1ePGRzMwN47/Ja3sYY6y8CMTYz4lHAQTO3fOQQlyi7dO3/5h59H5 uJ86wBZYimAdXAcOoeJV2PtuWsXY1Pk7 -----END CERTIFICATE-----Generated at Sat Apr 12 00:14:25 2025 by rpki-client