$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85a737da-8982-3150-88bc-1e5d12df26ee.roa File: 85a737da-8982-3150-88bc-1e5d12df26ee.roa (raw, json) Hash identifier: oQiLrK54ZvlUcyYwGFYKkCXhb+Uchl1++pCG5JB0Tvw= Subject key identifier: 64:12:F4:DD:62:33:1D:EA:79:EC:67:9B:68:30:95:54:ED:2B:4D:4D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A3F58E91984DD1A61E9F9F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85a737da-8982-3150-88bc-1e5d12df26ee.roa Signing time: Thu 23 Jan 2025 13:38:25 +0000 ROA not before: Thu 23 Jan 2025 13:38:25 +0000 ROA not after: Wed 23 Apr 2025 12:38:25 +0000 asID: 397195 IP address blocks: 192.12.94.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:f5:8e:91:98:4d:d1:a6:1e:9f:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 23 13:38:25 2025 GMT Not After : Apr 23 12:38:25 2025 GMT Subject: CN=51df1a6d-4d90-4a75-ad46-42daa079628d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:c1:b8:de:67:54:ee:9d:1c:9f:e8:2b:7d: bd:74:89:32:84:f9:f0:13:91:08:55:d4:a3:e1:55: 68:92:b1:74:4c:5b:ed:58:f9:3c:aa:62:40:46:8b: 39:8d:84:7d:4b:27:de:64:3d:15:11:e9:93:68:d5: 23:97:c7:2b:f6:94:f3:69:90:0a:ab:e1:88:91:7e: 5c:ab:a6:4e:3b:38:1c:ba:f9:72:66:c5:72:af:0f: 97:b2:c8:2c:19:b4:46:c0:a3:0b:9c:4d:b8:b5:f8: 3b:bf:5d:b4:91:2d:6a:6a:98:57:da:d8:6b:bc:14: 30:38:74:50:3c:c4:cf:aa:a8:49:d6:a2:46:41:55: 4e:46:1c:bd:f1:8f:64:ae:28:55:4d:7c:51:4b:93: cd:b5:70:98:0b:ed:90:a5:6b:23:8c:61:01:79:e2: 33:35:d4:4a:cd:02:fc:fa:23:3d:5d:0b:fa:d4:87: 13:5b:75:41:4b:fb:8a:59:ba:28:6a:b4:41:d6:01: 52:90:6c:0f:91:69:c4:c5:35:1f:64:fd:d9:3f:1b: 85:0c:fb:a6:22:18:44:27:0c:e9:72:2f:a6:a2:82: b6:d4:c0:83:41:f3:4c:57:f2:d6:98:cc:67:ac:c9: ac:94:90:a2:59:56:ac:3a:3a:46:e6:cf:9a:94:f1: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:12:F4:DD:62:33:1D:EA:79:EC:67:9B:68:30:95:54:ED:2B:4D:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85a737da-8982-3150-88bc-1e5d12df26ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:05:35:b9:e9:a6:64:b2:f4:7f:07:19:17:07:a9:c3:c7:c9: 4b:1a:8f:3e:7c:da:0d:fe:1f:83:2a:fe:8d:5c:f0:91:9a:b3: 4b:e9:c8:00:87:99:ed:b5:e4:51:8b:a1:3b:2b:a4:bc:64:ce: b5:d3:91:08:33:56:33:63:82:a5:6a:6d:5b:64:ef:fa:60:52: 50:7b:a0:27:91:f8:3f:ba:de:2c:49:c4:e2:92:78:80:86:59: e2:94:15:17:08:e1:ab:e7:ea:a9:b5:5a:34:36:74:a7:62:cd: 1c:dd:f5:c9:6d:e0:41:34:5c:40:8c:56:c4:aa:59:64:d6:fa: 9c:2b:a4:b7:81:41:72:63:5e:e7:1b:3c:de:84:3f:1d:19:fc: 9d:1a:8c:b8:38:56:a4:9d:2a:62:3f:8b:f8:f5:1d:41:a2:1e: aa:8d:2f:dc:bc:e4:d4:dd:3e:47:b8:65:21:86:4c:45:4c:39: 37:50:1a:a3:9c:42:1e:87:c6:6f:19:22:88:1c:75:89:4c:92: 54:27:45:fd:3d:2b:b7:78:8e:02:ad:06:4d:dc:f5:dd:e4:f4: cb:7b:12:2c:16:ea:94:95:ec:6a:0b:1d:92:ea:c0:63:ea:9c: 02:f3:16:2c:e0:64:83:67:77:b0:ad:70:68:93:10:79:aa:ec: b9:89:10:26 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEij9Y6RmE3Rph6fnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyMzEzMzgyNVoXDTI1MDQyMzEyMzgyNVowLzEtMCsGA1UEAxMk NTFkZjFhNmQtNGQ5MC00YTc1LWFkNDYtNDJkYWEwNzk2MjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2jBuN5nVO6dHJ/oK329dIkyhPnwE5EIVdSj 4VVokrF0TFvtWPk8qmJARos5jYR9SyfeZD0VEemTaNUjl8cr9pTzaZAKq+GIkX5c q6ZOOzgcuvlyZsVyrw+XssgsGbRGwKMLnE24tfg7v120kS1qaphX2thrvBQwOHRQ PMTPqqhJ1qJGQVVORhy98Y9krihVTXxRS5PNtXCYC+2QpWsjjGEBeeIzNdRKzQL8 +iM9XQv61IcTW3VBS/uKWbooarRB1gFSkGwPkWnExTUfZP3ZPxuFDPumIhhEJwzp ci+mooK21MCDQfNMV/LWmMxnrMmslJCiWVasOjpG5s+alPFY6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGQS9N1iMx3qeexnm2gwlVTtK01NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODVhNzM3ZGEtODk4Mi0z MTUwLTg4YmMtMWU1ZDEyZGYyNmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARBTW56aZksvR/BxkXB6nDx8lLGo8+fNoN/h+DKv6NXPCRmrNL6cgA h5ntteRRi6E7K6S8ZM6105EIM1YzY4Klam1bZO/6YFJQe6Ankfg/ut4sScTikniA hlnilBUXCOGr5+qptVo0NnSnYs0c3fXJbeBBNFxAjFbEqllk1vqcK6S3gUFyY17n GzzehD8dGfydGoy4OFaknSpiP4v49R1Boh6qjS/cvOTU3T5HuGUhhkxFTDk3UBqj nEIeh8ZvGSKIHHWJTJJUJ0X9PSu3eI4CrQZN3PXd5PTLexIsFuqUlexqCx2S6sBj 6pwC8xYs4GSDZ3ewrXBokxB5quy5iRAm -----END CERTIFICATE-----Generated at Fri Apr 11 22:58:41 2025 by rpki-client