$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/787b9e41-419e-36c0-bc51-a5b982496b3e.roa File: 787b9e41-419e-36c0-bc51-a5b982496b3e.roa (raw, json) Hash identifier: NYdUTz38+sNpKxD1Y6I6TVSfj+b8Q3sfp5tWPD/3CCA= Subject key identifier: 00:CF:AC:CD:9B:C7:B3:C5:3D:B6:E3:12:68:37:B8:42:5A:EB:28:97 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183EFC8209A90F8EB9B0B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/787b9e41-419e-36c0-bc51-a5b982496b3e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 36627 IP address blocks: 192.82.134.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:ef:c8:20:9a:90:f8:eb:9b:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=686d33f7-29ce-425e-bc46-86edea6ab27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:03:5f:49:6c:f5:ac:9c:ab:31:e0:bb:50:52: f1:6d:58:e8:74:0a:5e:21:11:5e:68:c3:cb:80:93: 0c:87:23:89:89:67:84:55:83:06:1e:0b:2f:a7:db: 6c:fd:ff:df:1d:d3:d2:5b:33:e0:53:ce:7c:b8:fe: bf:25:6d:46:1b:f3:4e:32:18:58:35:49:3d:c5:c9: 70:43:20:47:57:de:a2:f3:40:51:4d:5e:fe:89:21: b2:f6:08:75:dd:72:c6:89:a3:cf:ec:85:34:f4:79: 37:2e:3b:37:58:d1:24:a1:70:ac:19:d5:58:ce:7a: 80:95:2a:cc:e4:84:71:0b:ff:20:a5:11:8b:db:d1: 48:de:63:01:40:e4:7a:0d:a9:02:8e:58:2c:13:8e: 71:bd:60:44:c1:f1:dc:0d:07:10:d6:2b:6d:6c:26: 14:cf:8c:f5:49:e8:72:be:31:ab:83:e6:0f:68:b5: f1:e9:4f:f4:65:e6:4b:2c:f5:4d:2a:42:5e:8f:3b: 91:b2:65:bd:22:3a:47:4d:92:90:fa:a2:29:23:fa: 86:4b:76:91:3b:ec:1c:bf:84:df:fc:37:87:bb:c9: 15:a1:a8:46:1d:b3:1d:f5:49:61:47:0f:28:11:ea: d6:c6:fa:79:78:43:f1:7d:03:1d:fe:96:4e:f9:19: 8c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CF:AC:CD:9B:C7:B3:C5:3D:B6:E3:12:68:37:B8:42:5A:EB:28:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/787b9e41-419e-36c0-bc51-a5b982496b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.134.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:1d:9f:70:a9:80:f4:f1:df:1b:74:e0:0b:44:e9:78:77:4c: 3b:e9:30:f8:52:09:b4:80:f6:29:32:ef:30:8a:8d:c2:4a:03: 10:64:cc:32:2d:a7:40:95:d2:67:06:11:5e:89:e3:e2:da:d5: bb:30:1a:d9:7e:af:82:35:7a:64:a9:88:92:0a:04:0e:ed:bd: d8:24:f6:50:0e:04:62:61:d6:ea:9e:70:25:27:3a:57:3d:c6: 3b:a9:84:7f:86:fb:55:a2:ae:ee:fe:3e:7d:83:58:b7:8c:c5: e6:cf:e3:e9:fb:11:19:85:0a:47:b2:67:d6:fa:63:a6:dc:8f: e6:1b:14:00:d2:d6:53:3c:8c:52:32:f5:96:73:7b:48:bf:76: 88:64:79:a0:c4:0b:09:ba:a1:97:b9:db:79:91:e6:69:4a:b1: ec:11:54:7c:5c:04:e6:03:c0:06:0a:ef:70:bb:c0:47:30:aa: 83:84:4c:07:6e:e1:12:87:3d:0a:f3:74:f2:bc:0b:55:03:3e: 33:c7:91:1a:c2:9e:a5:d0:d7:89:59:15:91:ca:bb:ea:03:db: c3:fa:2d:86:9c:03:3c:6d:44:88:80:44:87:37:70:9f:f4:6a: 02:24:b0:d8:79:96:b7:f1:5c:63:c2:ad:86:14:c3:09:a0:79: 58:2f:fc:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg+/IIJqQ+OubCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk Njg2ZDMzZjctMjljZS00MjVlLWJjNDYtODZlZGVhNmFiMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QNfSWz1rJyrMeC7UFLxbVjodApeIRFeaMPL gJMMhyOJiWeEVYMGHgsvp9ts/f/fHdPSWzPgU858uP6/JW1GG/NOMhhYNUk9xclw QyBHV96i80BRTV7+iSGy9gh13XLGiaPP7IU09Hk3Ljs3WNEkoXCsGdVYznqAlSrM 5IRxC/8gpRGL29FI3mMBQOR6DakCjlgsE45xvWBEwfHcDQcQ1ittbCYUz4z1Sehy vjGrg+YPaLXx6U/0ZeZLLPVNKkJejzuRsmW9IjpHTZKQ+qIpI/qGS3aRO+wcv4Tf /DeHu8kVoahGHbMd9UlhRw8oEerWxvp5eEPxfQMd/pZO+RmMaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFADPrM2bx7PFPbbjEmg3uEJa6yiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzg3YjllNDEtNDE5ZS0z NmMwLWJjNTEtYTViOTgyNDk2YjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8HZ9wqYD08d8bdOALROl4d0w76TD4Ugm0gPYpMu8wio3CSgMQZMwy LadAldJnBhFeiePi2tW7MBrZfq+CNXpkqYiSCgQO7b3YJPZQDgRiYdbqnnAlJzpX PcY7qYR/hvtVoq7u/j59g1i3jMXmz+Pp+xEZhQpHsmfW+mOm3I/mGxQA0tZTPIxS MvWWc3tIv3aIZHmgxAsJuqGXudt5keZpSrHsEVR8XATmA8AGCu9wu8BHMKqDhEwH buEShz0K83TyvAtVAz4zx5Eawp6l0NeJWRWRyrvqA9vD+i2GnAM8bUSIgESHN3Cf 9GoCJLDYeZa38Vxjwq2GFMMJoHlYL/w1 -----END CERTIFICATE-----Generated at Sat Apr 12 00:13:05 2025 by rpki-client