$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f1d4d0f-a3fe-388d-b438-8737cf55e02a.roa File: 7f1d4d0f-a3fe-388d-b438-8737cf55e02a.roa (raw, json) Hash identifier: ByzppLb6+zwTpfe/CUm5VHiPWlbWXmoWLQOuQS0zuU0= Subject key identifier: CA:2C:24:6D:F0:A4:AE:DC:25:37:0F:18:2D:78:09:97:D8:5A:39:4D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848B78448BA9969FCA6304D5680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f1d4d0f-a3fe-388d-b438-8737cf55e02a.roa Signing time: Thu 30 Jan 2025 13:46:21 +0000 ROA not before: Thu 30 Jan 2025 13:46:21 +0000 ROA not after: Wed 30 Apr 2025 12:46:21 +0000 asID: 36624 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:84:48:ba:99:69:fc:a6:30:4d:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 30 13:46:21 2025 GMT Not After : Apr 30 12:46:21 2025 GMT Subject: CN=f1aa1f38-6f85-4d52-be67-890f8352a19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:b5:cb:c1:3d:f7:b5:7d:ae:89:e2:4b:8f: 25:84:35:51:59:cd:a5:13:c3:dc:c1:f8:48:a0:95: 19:f3:b1:9a:b5:95:9f:54:88:52:cb:79:66:3e:95: f7:48:97:6a:92:82:b0:df:37:b3:a4:21:50:d9:e2: 7b:41:cd:67:12:e0:49:b6:28:cf:b3:8a:9b:46:eb: fa:35:f3:b0:d2:61:97:6b:50:33:36:90:0c:8b:63: b2:49:79:06:da:67:f2:9c:a0:f1:92:3c:23:ba:80: ed:26:79:28:61:af:4f:40:9d:99:ff:1f:12:c6:aa: e4:99:63:c9:85:43:78:79:50:dc:b4:1b:4a:6a:8d: 98:e9:24:4d:ee:73:5c:9c:e5:0f:51:1e:81:6a:bd: 74:54:dd:b9:28:8f:ec:02:fb:eb:b7:00:2c:e4:d9: 35:e5:63:b4:9d:d2:d3:f3:37:b3:f3:a9:34:5a:51: d8:1f:95:df:60:91:49:6e:ba:48:84:2f:c1:68:bf: c3:ae:f7:b2:28:d2:5e:35:bf:f2:25:e1:94:90:43: c0:f8:5f:b6:2f:09:0d:f8:50:49:ea:49:b6:16:62: f1:90:e3:ad:7f:0f:81:1c:85:85:71:af:1e:65:f6: f8:f9:60:04:a6:71:cf:83:c8:6b:f5:90:e7:03:62: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2C:24:6D:F0:A4:AE:DC:25:37:0F:18:2D:78:09:97:D8:5A:39:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f1d4d0f-a3fe-388d-b438-8737cf55e02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:71:5c:8d:d3:8d:2a:12:7d:1d:e1:60:db:e5:fb:b4:8b:71: 6a:2a:6b:4b:6a:09:d8:ff:ab:48:97:2f:56:2e:4f:bf:50:87: 71:db:4e:03:69:10:67:15:e7:16:42:4a:6a:6d:03:ba:ac:47: b8:05:88:c6:79:99:05:23:9e:15:64:f5:3e:09:25:40:33:e5: 32:99:bd:3a:7c:00:c5:5e:e9:79:c8:36:2e:8e:af:37:98:d1: f7:cd:8e:ad:14:a8:6e:25:0f:88:42:d2:ac:33:bd:f6:ac:29: 7a:5b:f1:86:ce:f0:6d:b2:72:22:e4:86:2f:7c:ab:ef:36:c5: be:04:50:e0:fb:a5:87:55:99:0e:55:f8:ce:6a:b1:ce:e6:32: 83:ef:6d:96:af:9a:52:71:45:2f:9b:cc:1e:6c:aa:c3:06:ed: e9:8c:6e:ca:ac:b6:9b:c8:3b:bd:2f:e4:22:c2:72:79:16:c3: 54:82:0e:37:1f:08:dd:55:76:90:24:b8:39:3e:27:e6:ad:8e: 17:cf:46:2e:1c:4b:c4:8f:ab:56:58:d5:e1:62:22:c7:bb:2a: 98:37:40:c8:89:0c:10:7f:5f:e7:24:60:9a:c4:7a:ad:53:3e: db:c0:0d:17:b8:7b:fc:55:f3:91:a3:2a:1c:27:c4:e2:cd:57: 48:70:8e:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hEi6mWn8pjBNVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEzMDEzNDYyMVoXDTI1MDQzMDEyNDYyMVowLzEtMCsGA1UEAxMk ZjFhYTFmMzgtNmY4NS00ZDUyLWJlNjctODkwZjgzNTJhMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmu1y8E997V9roniS48lhDVRWc2lE8PcwfhI oJUZ87GatZWfVIhSy3lmPpX3SJdqkoKw3zezpCFQ2eJ7Qc1nEuBJtijPs4qbRuv6 NfOw0mGXa1AzNpAMi2OySXkG2mfynKDxkjwjuoDtJnkoYa9PQJ2Z/x8SxqrkmWPJ hUN4eVDctBtKao2Y6SRN7nNcnOUPUR6Bar10VN25KI/sAvvrtwAs5Nk15WO0ndLT 8zez86k0WlHYH5XfYJFJbrpIhC/BaL/DrveyKNJeNb/yJeGUkEPA+F+2LwkN+FBJ 6km2FmLxkOOtfw+BHIWFca8eZfb4+WAEpnHPg8hr9ZDnA2I+hwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMosJG3wpK7cJTcPGC14CZfYWjlNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2YxZDRkMGYtYTNmZS0z ODhkLWI0MzgtODczN2NmNTVlMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCfcVyN040qEn0d4WDb5fu0i3FqKmtLagnY/6tIly9WLk+/UIdx204D aRBnFecWQkpqbQO6rEe4BYjGeZkFI54VZPU+CSVAM+Uymb06fADFXul5yDYujq83 mNH3zY6tFKhuJQ+IQtKsM732rCl6W/GGzvBtsnIi5IYvfKvvNsW+BFDg+6WHVZkO VfjOarHO5jKD722Wr5pScUUvm8webKrDBu3pjG7KrLabyDu9L+QiwnJ5FsNUgg43 HwjdVXaQJLg5PifmrY4Xz0YuHEvEj6tWWNXhYiLHuyqYN0DIiQwQf1/nJGCaxHqt Uz7bwA0XuHv8VfORoyocJ8TizVdIcI64 -----END CERTIFICATE-----Generated at Fri Apr 11 23:58:32 2025 by rpki-client