$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8627cd74-ad2e-3e54-a0b1-7727f5da635d.roa File: 8627cd74-ad2e-3e54-a0b1-7727f5da635d.roa (raw, json) Hash identifier: bVj9dqtCbyDyOCTFvk1fgO2Tyg9T5L4in/WRkL01CbE= Subject key identifier: FE:CA:2A:B3:E4:89:37:D9:24:65:A1:3A:AA:94:9C:BD:E9:AD:12:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183F8F962939650089EB500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8627cd74-ad2e-3e54-a0b1-7727f5da635d.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397194 IP address blocks: 192.82.133.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:f8:f9:62:93:96:50:08:9e:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=b1a8042d-e43a-4d9e-8195-7f8fb43d0771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a0:50:41:db:cb:03:e5:82:9e:f9:d8:c8:23: 4a:ed:05:f7:17:1f:d9:a0:4c:06:f3:e3:37:00:1f: 95:56:82:3a:4d:8b:3c:5a:6d:cf:86:a1:54:32:1f: eb:4c:1d:e5:51:75:04:8d:43:1d:98:b0:f3:15:cf: 10:9d:ec:85:f2:39:28:04:0f:da:41:a7:bc:58:1a: a0:91:5f:8f:b1:a2:44:17:b8:c8:6c:24:9f:9b:05: 78:1d:d2:a7:88:23:c4:30:6b:07:4a:5d:c5:01:ee: 5b:c5:8c:eb:73:72:5f:56:6a:b4:4a:df:70:fd:e7: f5:12:08:ef:e4:ed:50:6f:78:11:c1:70:20:f1:c3: b9:c3:55:3a:2b:9e:5c:8f:2b:8c:0d:b5:50:9d:6c: b0:26:99:66:7b:72:22:76:63:75:a2:b2:ad:d1:99: 43:51:88:49:71:c9:c9:72:9d:4e:54:c4:92:1a:fb: 2e:78:46:f3:0a:1c:99:30:4b:db:59:31:a2:60:e8: d8:fd:52:ad:b5:b6:48:32:c2:0d:ea:f3:15:a9:dd: 7f:49:4e:12:df:10:b4:98:7d:11:c3:6b:ba:ac:11: 23:96:6d:07:e9:b1:a6:4e:e3:81:15:f5:31:2a:0e: 44:ff:e5:8c:fc:64:0d:1d:16:a4:c9:ef:73:fc:55: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CA:2A:B3:E4:89:37:D9:24:65:A1:3A:AA:94:9C:BD:E9:AD:12:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8627cd74-ad2e-3e54-a0b1-7727f5da635d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.133.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:92:0c:ca:74:0d:25:5f:21:d4:08:36:e3:c4:30:71:bf:98: bf:2d:28:84:89:19:34:98:15:94:df:7a:40:d6:fb:2c:30:0f: b8:90:ad:ef:e3:52:79:ea:73:c0:c3:8c:72:11:1f:19:90:51: 69:48:de:5a:b4:20:ae:1f:4b:25:d5:f9:d8:c0:51:92:85:01: 8c:dd:bb:5b:04:5b:c2:73:f3:7d:b8:1b:95:7f:2b:b4:b1:d7: a8:7d:ce:38:d9:32:34:87:6b:27:18:dc:c0:2a:94:9c:51:b5: d2:c5:55:07:07:94:56:df:21:d1:cb:91:50:3c:bf:8f:f9:2f: ea:22:83:95:8d:9d:e2:3b:fa:b5:f4:b1:7d:81:74:d8:a6:78: 98:4b:58:2c:69:7d:9d:55:76:33:fd:b3:d6:10:04:98:1f:04: 15:6d:1f:e1:08:21:77:a3:a2:89:2a:90:ab:9c:ab:e0:99:4a: 13:e4:b8:04:69:d0:31:52:47:5e:4f:5b:14:76:0e:67:6f:68: 37:bb:b7:88:e7:b9:da:c2:0a:6d:cd:18:a5:19:e6:f0:7f:dc: e7:05:8d:ae:ea:75:1a:82:c9:b1:28:dc:e3:65:b0:e7:8b:63: 41:f2:03:64:5b:f0:e9:44:69:75:3b:a5:8b:ac:b9:d9:a3:3f: 9c:df:ad:c0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg/j5YpOWUAietQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YjFhODA0MmQtZTQzYS00ZDllLTgxOTUtN2Y4ZmI0M2QwNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKBQQdvLA+WCnvnYyCNK7QX3Fx/ZoEwG8+M3 AB+VVoI6TYs8Wm3PhqFUMh/rTB3lUXUEjUMdmLDzFc8QneyF8jkoBA/aQae8WBqg kV+PsaJEF7jIbCSfmwV4HdKniCPEMGsHSl3FAe5bxYzrc3JfVmq0St9w/ef1Egjv 5O1Qb3gRwXAg8cO5w1U6K55cjyuMDbVQnWywJplme3IidmN1orKt0ZlDUYhJccnJ cp1OVMSSGvsueEbzChyZMEvbWTGiYOjY/VKttbZIMsIN6vMVqd1/SU4S3xC0mH0R w2u6rBEjlm0H6bGmTuOBFfUxKg5E/+WM/GQNHRakye9z/FXiPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP7KKrPkiTfZJGWhOqqUnL3prRIcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODYyN2NkNzQtYWQyZS0z ZTU0LWEwYjEtNzcyN2Y1ZGE2MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0kgzKdA0lXyHUCDbjxDBxv5i/LSiEiRk0mBWU33pA1vssMA+4kK3v 41J56nPAw4xyER8ZkFFpSN5atCCuH0sl1fnYwFGShQGM3btbBFvCc/N9uBuVfyu0 sdeofc442TI0h2snGNzAKpScUbXSxVUHB5RW3yHRy5FQPL+P+S/qIoOVjZ3iO/q1 9LF9gXTYpniYS1gsaX2dVXYz/bPWEASYHwQVbR/hCCF3o6KJKpCrnKvgmUoT5LgE adAxUkdeT1sUdg5nb2g3u7eI57nawgptzRilGebwf9znBY2u6nUagsmxKNzjZbDn i2NB8gNkW/DpRGl1O6WLrLnZoz+c363A -----END CERTIFICATE-----Generated at Fri Apr 11 22:42:25 2025 by rpki-client