$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/683fa016-c707-3a52-afcc-de99b47bcb45.roa File: 683fa016-c707-3a52-afcc-de99b47bcb45.roa (raw, json) Hash identifier: 1ErCcM4EHTFGqtgXOqhXBpThdafYTxBz7SgOdCtoMHo= Subject key identifier: 69:96:D6:8C:1E:E2:F3:00:C9:49:63:B1:B7:52:62:82:DD:6D:41:FB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584973DEF4AF60725460372B6500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/683fa016-c707-3a52-afcc-de99b47bcb45.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 396615 IP address blocks: 192.42.174.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:f4:af:60:72:54:60:37:2b:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=a25bdc2f-125c-4708-8b39-d846e58670da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:ef:37:41:97:93:ad:a1:a8:8f:a1:de:dd: 32:a0:e2:20:0a:e3:72:a1:2e:28:fd:98:18:a5:7f: d8:42:7d:49:79:60:65:c1:a9:76:2f:af:66:ba:b2: 32:52:f4:af:b8:d8:86:3f:26:98:17:49:33:40:9a: 76:bb:e8:0d:3a:bc:ed:83:d2:7c:1d:dc:e4:74:f4: e8:e0:6d:5d:48:22:f7:0c:1e:5e:c2:0b:e3:39:2d: ec:b7:a7:38:11:a5:5a:ba:9c:20:ec:4c:94:c8:6a: 41:d8:73:fb:c8:a8:87:30:e9:9e:3e:a6:a6:ef:9b: e9:34:f4:23:d6:33:c6:db:0f:a1:c5:bb:a2:ff:44: 28:e3:50:09:4e:98:4b:52:a2:10:f4:01:d5:f5:24: 68:70:b5:46:2f:ea:bd:74:ae:50:42:03:8b:39:8b: 98:ce:84:e0:83:99:09:07:15:c7:df:14:b5:ad:03: 30:2a:d3:fb:37:32:b5:f7:e6:79:f2:af:44:0b:f5: ad:92:ba:73:38:1c:63:3f:13:e0:cf:28:0a:6b:5e: 99:42:82:c9:89:29:be:3f:83:ca:06:0b:eb:7a:6c: 87:a4:e0:6a:a7:2f:e6:77:93:03:d1:6e:f5:8f:8b: 79:83:3e:55:6d:69:a2:86:44:ce:ed:f4:2c:05:95: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:96:D6:8C:1E:E2:F3:00:C9:49:63:B1:B7:52:62:82:DD:6D:41:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/683fa016-c707-3a52-afcc-de99b47bcb45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:2a:94:92:5b:8d:aa:68:f8:4b:84:51:3d:84:f3:69:f7:1c: d6:af:f6:3b:4b:b6:12:29:12:88:3d:53:03:c9:3e:31:52:21: 49:15:5e:1d:a2:e5:af:a9:2a:43:ff:de:fa:3a:2a:19:56:d8: b7:ce:01:66:b6:fc:ee:57:f9:d8:71:ed:40:0a:09:0f:11:a0: cb:93:4b:c6:e3:48:b0:60:5a:d3:92:a0:39:58:e0:22:e1:2c: 68:e0:fc:e2:cc:bd:c2:d7:50:37:71:00:aa:b4:a2:e3:8e:17: 1d:8e:03:5d:2b:59:aa:0d:ce:6c:7f:10:9e:47:8b:79:0a:da: d8:09:70:7d:c6:7e:98:d0:9f:88:87:d0:df:51:ed:15:07:da: c7:cf:6d:eb:27:fb:44:b8:7e:f2:b1:72:cb:6c:df:8f:fe:3d: 54:fa:2a:a6:0a:96:4f:80:ba:f8:2e:56:87:77:8a:0d:49:33: e5:bf:3b:cf:7c:72:52:7f:c2:96:08:fb:81:dc:9f:9f:cd:a2: 7c:cc:0c:7b:c9:1c:93:e0:01:b9:7e:7c:9f:9f:42:76:13:1c: b9:c7:fa:46:62:f1:53:78:12:68:6b:9e:3d:cf:42:69:1b:bf: c3:2a:eb:1d:09:12:eb:89:cb:16:55:77:0b:9e:3b:35:d1:0d: 12:43:aa:cd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElz3vSvYHJUYDcrZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk YTI1YmRjMmYtMTI1Yy00NzA4LThiMzktZDg0NmU1ODY3MGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDXvN0GXk62hqI+h3t0yoOIgCuNyoS4o/ZgY pX/YQn1JeWBlwal2L69murIyUvSvuNiGPyaYF0kzQJp2u+gNOrztg9J8HdzkdPTo 4G1dSCL3DB5ewgvjOS3st6c4EaVaupwg7EyUyGpB2HP7yKiHMOmePqam75vpNPQj 1jPG2w+hxbui/0Qo41AJTphLUqIQ9AHV9SRocLVGL+q9dK5QQgOLOYuYzoTgg5kJ BxXH3xS1rQMwKtP7NzK19+Z58q9EC/WtkrpzOBxjPxPgzygKa16ZQoLJiSm+P4PK BgvremyHpOBqpy/md5MD0W71j4t5gz5VbWmihkTO7fQsBZWRmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGmW1owe4vMAyUljsbdSYoLdbUH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjgzZmEwMTYtYzcwNy0z YTUyLWFmY2MtZGU5OWI0N2JjYjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC7KpSSW42qaPhLhFE9hPNp9xzWr/Y7S7YSKRKIPVMDyT4xUiFJFV4d ouWvqSpD/976OioZVti3zgFmtvzuV/nYce1ACgkPEaDLk0vG40iwYFrTkqA5WOAi 4Sxo4PzizL3C11A3cQCqtKLjjhcdjgNdK1mqDc5sfxCeR4t5CtrYCXB9xn6Y0J+I h9DfUe0VB9rHz23rJ/tEuH7ysXLLbN+P/j1U+iqmCpZPgLr4LlaHd4oNSTPlvzvP fHJSf8KWCPuB3J+fzaJ8zAx7yRyT4AG5fnyfn0J2Exy5x/pGYvFTeBJoa549z0Jp G7/DKusdCRLricsWVXcLnjs10Q0SQ6rN -----END CERTIFICATE-----Generated at Sat Apr 12 00:16:58 2025 by rpki-client