$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64996e53-c089-3c8a-a533-e7b6d2f7061a.roa File: 64996e53-c089-3c8a-a533-e7b6d2f7061a.roa (raw, json) Hash identifier: /vBzQ+g0OOEZa4SIVi5s18NLuysNjbXeDs4C4XzG7mo= Subject key identifier: 32:4D:DE:2C:43:D4:76:A6:BE:E1:49:F1:3F:E7:86:B9:AC:50:32:15 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584979744E6DCE58DBACDAB27B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64996e53-c089-3c8a-a533-e7b6d2f7061a.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 396540 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:4e:6d:ce:58:db:ac:da:b2:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=0b3f1eff-b7d0-4c8e-9e41-32c693eff0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ea:81:68:82:2a:a5:af:05:78:02:60:07:a0: 2b:9d:09:ba:bb:87:9a:5b:32:a7:ab:55:61:99:6c: 45:98:a2:f0:bb:20:8d:92:9a:94:57:f4:85:c7:9c: 89:b4:3c:9b:39:06:41:f7:4d:ae:60:82:1c:25:d5: e8:fc:fd:57:4d:b6:d3:b7:2d:08:d2:7b:07:30:76: 1e:80:a1:b7:ec:ef:d2:89:68:09:51:f4:f1:1b:95: 33:1b:c8:56:2f:e3:a2:84:a9:8d:0e:01:54:dc:94: 6f:f7:dd:37:89:f1:f0:9b:ba:52:fd:42:e8:55:88: 1b:68:9f:a8:72:25:1d:20:b9:5b:44:17:2c:31:44: e1:d6:9f:94:1d:c1:f6:d1:46:c3:5b:28:6c:21:e1: 83:1c:b1:a6:b2:7d:42:37:40:7e:ac:ce:38:34:fe: ea:b0:66:e6:2b:c1:52:d6:7a:0e:f1:b2:a7:6a:40: 7d:39:b1:86:4a:8d:06:11:66:6e:d5:5f:e6:61:e4: 41:cb:13:44:1b:b3:ac:e8:be:36:6f:ca:5b:cd:fd: d7:29:0f:83:ee:a3:79:28:3c:b6:4d:15:2e:54:89: 3b:f8:40:0c:3f:2d:f3:18:0c:41:e7:aa:db:8f:28: 6c:fb:f9:47:90:7d:29:e0:dd:00:ab:6d:e7:45:53: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4D:DE:2C:43:D4:76:A6:BE:E1:49:F1:3F:E7:86:B9:AC:50:32:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64996e53-c089-3c8a-a533-e7b6d2f7061a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:af:c7:a3:3c:50:b5:6b:9c:29:39:ea:c7:b1:e2:e0:5d:14: 1a:18:94:cb:8e:50:5d:2e:cd:a8:c2:a4:da:bc:cc:d1:d1:4e: f6:8c:e8:bb:3b:a8:8e:10:97:91:22:b5:7d:41:80:35:b0:f2: 25:f8:1f:97:e9:6a:ce:dd:5c:2e:b8:89:22:34:73:f4:d1:a5: 35:70:b9:dc:92:6b:56:44:b3:01:e0:9f:a7:53:84:91:4c:ab: ef:30:e0:8f:56:62:d8:e5:e5:f6:b2:89:35:4b:81:bf:6e:74: 7c:fa:7e:0f:fe:8c:c2:55:1b:33:8c:92:6b:97:f2:eb:5c:3e: 86:3c:2b:1b:db:4c:bd:81:81:16:7e:ba:91:a2:3e:98:89:dc: b8:59:58:5c:9f:3a:b3:43:1b:3b:40:be:d2:ed:ac:1c:a3:43: 38:db:6f:1d:3b:a8:37:50:05:75:e8:b2:d8:18:8d:d8:04:8e: 9e:53:b9:f6:33:ea:d0:21:79:16:6b:49:e8:66:ba:4b:4e:ab: 75:be:fe:3e:b4:22:19:3e:29:4d:0f:eb:71:73:a6:6c:7c:53: a5:ea:24:26:56:fe:56:52:d3:e4:e1:89:b2:77:8d:20:8f:e6: 1a:56:73:92:31:1a:d8:87:13:9b:ce:b8:ac:f9:0b:72:29:4a: 32:12:9b:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl5dE5tzljbrNqyewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk MGIzZjFlZmYtYjdkMC00YzhlLTllNDEtMzJjNjkzZWZmMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uqBaIIqpa8FeAJgB6ArnQm6u4eaWzKnq1Vh mWxFmKLwuyCNkpqUV/SFx5yJtDybOQZB902uYIIcJdXo/P1XTbbTty0I0nsHMHYe gKG37O/SiWgJUfTxG5UzG8hWL+OihKmNDgFU3JRv9903ifHwm7pS/ULoVYgbaJ+o ciUdILlbRBcsMUTh1p+UHcH20UbDWyhsIeGDHLGmsn1CN0B+rM44NP7qsGbmK8FS 1noO8bKnakB9ObGGSo0GEWZu1V/mYeRByxNEG7Os6L42b8pbzf3XKQ+D7qN5KDy2 TRUuVIk7+EAMPy3zGAxB56rbjyhs+/lHkH0p4N0Aq23nRVPfBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDJN3ixD1HamvuFJ8T/nhrmsUDIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQ5OTZlNTMtYzA4OS0z YzhhLWE1MzMtZTdiNmQyZjcwNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCtr8ejPFC1a5wpOerHseLgXRQaGJTLjlBdLs2owqTavMzR0U72jOi7 O6iOEJeRIrV9QYA1sPIl+B+X6WrO3VwuuIkiNHP00aU1cLnckmtWRLMB4J+nU4SR TKvvMOCPVmLY5eX2sok1S4G/bnR8+n4P/ozCVRszjJJrl/LrXD6GPCsb20y9gYEW frqRoj6Yidy4WVhcnzqzQxs7QL7S7awco0M4228dO6g3UAV16LLYGI3YBI6eU7n2 M+rQIXkWa0noZrpLTqt1vv4+tCIZPilND+txc6ZsfFOl6iQmVv5WUtPk4Ymyd40g j+YaVnOSMRrYhxObzris+QtyKUoyEpsg -----END CERTIFICATE-----Generated at Sat Apr 12 00:15:22 2025 by rpki-client