$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68815dd3-a97e-3d7b-a1a9-6770da53696a.roa File: 68815dd3-a97e-3d7b-a1a9-6770da53696a.roa (raw, json) Hash identifier: xOJlfTrFoPCf98g8oPjaklSLACuRIM9VRVXhPY+uzmg= Subject key identifier: 55:1F:C0:EC:40:E1:24:CD:A5:72:B0:3D:87:F5:10:76:1B:A9:0C:38 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848B78447F543891AFEACA7DC60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68815dd3-a97e-3d7b-a1a9-6770da53696a.roa Signing time: Thu 30 Jan 2025 13:46:21 +0000 ROA not before: Thu 30 Jan 2025 13:46:21 +0000 ROA not after: Wed 30 Apr 2025 12:46:21 +0000 asID: 396612 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:84:47:f5:43:89:1a:fe:ac:a7:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 30 13:46:21 2025 GMT Not After : Apr 30 12:46:21 2025 GMT Subject: CN=af3b7109-0a55-4850-8c21-12bc6103754d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e3:4f:24:93:b1:a0:0c:da:ab:90:f7:ce:23: 21:ce:c7:62:c4:9a:6f:e0:f2:e2:97:0c:9a:dd:25: 1d:3e:60:64:f2:a9:52:68:48:88:d3:68:15:a3:15: 6d:0b:99:47:97:b8:dd:e7:00:05:54:5f:e9:16:e0: 60:92:36:ea:1a:42:1b:76:b8:20:ba:84:60:89:34: cf:ff:31:de:8f:aa:16:c9:de:74:a3:1e:4a:ff:ee: 2e:c0:39:75:85:a2:e9:d3:e6:6e:82:21:0f:03:f2: c5:ba:2f:67:04:8d:1a:05:91:ba:79:b8:66:6b:aa: 93:76:2e:a8:42:14:73:2b:5e:fd:c1:f9:8c:88:f4: 9a:79:6b:2e:56:69:56:36:37:d7:4b:ed:af:d4:50: 0d:59:f9:55:5a:f8:47:d2:bd:86:f5:94:f3:2b:be: d7:dd:33:39:06:98:cf:a4:ed:f1:be:8c:64:94:66: 6f:06:11:48:20:2d:c7:8d:09:f7:20:ee:ae:e2:d2: fd:89:f1:55:95:69:89:02:b4:49:a7:20:31:a9:77: 98:46:29:f9:36:fb:a4:a4:71:c1:0d:03:fd:f0:30: 6e:a9:0c:b1:92:cd:42:32:1c:26:e4:bb:30:1b:fb: ec:88:c6:bf:18:b4:44:aa:13:cb:79:a7:2e:d3:c1: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1F:C0:EC:40:E1:24:CD:A5:72:B0:3D:87:F5:10:76:1B:A9:0C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68815dd3-a97e-3d7b-a1a9-6770da53696a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f5:c3:98:5c:eb:de:dd:3c:71:58:06:5d:bb:aa:4f:b5:d7: 4a:3c:ec:0e:98:d7:eb:71:5f:7b:f6:2a:12:3c:ec:56:82:5a: 51:c2:3f:7b:77:31:9a:bd:ce:db:40:37:de:16:7a:da:b7:14: e9:a5:6d:0e:c0:13:5e:f0:44:05:3a:8b:e7:fc:0c:a4:92:a5: fa:3a:87:f0:e8:a7:bc:6b:59:a0:5e:b8:1e:16:ad:56:6b:fe: 61:92:93:a1:40:71:78:4d:fe:28:ae:b6:78:08:2b:55:46:0c: e6:0a:6a:67:ca:1e:25:4c:d1:68:de:d5:71:a1:a4:ab:de:6a: 14:5d:64:79:68:ba:14:0a:b4:32:36:ad:c7:8e:42:36:b2:d8: cf:95:65:76:01:8f:82:d0:bf:7f:a9:33:ab:14:a7:f6:3b:00: c4:e1:69:98:53:d4:55:cb:8a:1c:ba:40:71:6f:10:d9:2f:1d: b0:d0:05:f5:b2:fd:4b:79:be:87:52:93:31:c5:81:8f:eb:16: e3:f5:e5:30:9c:3e:a2:44:8c:0d:cb:2d:d0:77:fb:2e:8b:72: 44:ee:bd:df:a5:01:35:0a:46:5d:47:16:57:9b:93:c9:b6:b1: bb:7c:b9:5d:30:34:39:db:ca:61:7b:ec:ef:0b:0b:08:ce:e0: d2:8e:1e:6f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hEf1Q4ka/qyn3GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEzMDEzNDYyMVoXDTI1MDQzMDEyNDYyMVowLzEtMCsGA1UEAxMk YWYzYjcxMDktMGE1NS00ODUwLThjMjEtMTJiYzYxMDM3NTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+NPJJOxoAzaq5D3ziMhzsdixJpv4PLilwya 3SUdPmBk8qlSaEiI02gVoxVtC5lHl7jd5wAFVF/pFuBgkjbqGkIbdrgguoRgiTTP /zHej6oWyd50ox5K/+4uwDl1haLp0+ZugiEPA/LFui9nBI0aBZG6ebhma6qTdi6o QhRzK179wfmMiPSaeWsuVmlWNjfXS+2v1FANWflVWvhH0r2G9ZTzK77X3TM5BpjP pO3xvoxklGZvBhFIIC3HjQn3IO6u4tL9ifFVlWmJArRJpyAxqXeYRin5NvukpHHB DQP98DBuqQyxks1CMhwm5LswG/vsiMa/GLREqhPLeacu08HK6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFUfwOxA4STNpXKwPYf1EHYbqQw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjg4MTVkZDMtYTk3ZS0z ZDdiLWExYTktNjc3MGRhNTM2OTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBT9cOYXOve3TxxWAZdu6pPtddKPOwOmNfrcV979ioSPOxWglpRwj97 dzGavc7bQDfeFnratxTppW0OwBNe8EQFOovn/AykkqX6Oofw6Ke8a1mgXrgeFq1W a/5hkpOhQHF4Tf4orrZ4CCtVRgzmCmpnyh4lTNFo3tVxoaSr3moUXWR5aLoUCrQy Nq3HjkI2stjPlWV2AY+C0L9/qTOrFKf2OwDE4WmYU9RVy4ocukBxbxDZLx2w0AX1 sv1Leb6HUpMxxYGP6xbj9eUwnD6iRIwNyy3Qd/sui3JE7r3fpQE1CkZdRxZXm5PJ trG7fLldMDQ528phe+zvCwsIzuDSjh5v -----END CERTIFICATE-----Generated at Fri Apr 11 22:37:25 2025 by rpki-client