$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889e3dbd-e927-39dd-aa9a-08263834c34c.roa File: 889e3dbd-e927-39dd-aa9a-08263834c34c.roa (raw, json) Hash identifier: WYl4Z+ZsIWD4751D3xiYZtflOuKbWbmeYpyEp6A1YUg= Subject key identifier: AB:AA:19:F4:17:FA:EC:EC:C7:28:A4:09:FC:81:BF:E3:6E:41:9F:DB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584973DEF0DE8303A2FE5FE36100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889e3dbd-e927-39dd-aa9a-08263834c34c.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 397204 IP address blocks: 192.42.174.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:f0:de:83:03:a2:fe:5f:e3:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=ee07e868-4a7e-4b2d-a22f-c5818a26c5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:c7:69:c0:4e:5a:1b:49:ca:ad:12:85:f0: be:a5:58:9e:5f:f2:54:5d:ab:37:c3:8b:75:c0:b0: de:34:0d:6e:5f:79:77:12:c5:af:fb:ea:41:d5:80: b2:78:73:a1:35:ca:b5:29:78:a1:d0:c8:2d:a7:b2: e3:84:51:f6:ec:65:66:14:c1:f4:d5:09:aa:c0:7b: ea:10:17:88:92:35:93:cd:6e:94:65:c4:0c:af:db: eb:1e:6d:0c:5c:4b:25:63:28:81:f5:45:7b:f8:0c: 2b:c0:c7:31:1c:d0:60:36:4e:84:94:ff:c6:68:8f: 6c:07:96:91:4a:34:b4:ea:1a:34:19:65:6d:2d:dd: 41:7c:96:59:c5:8c:e2:ba:81:5c:a7:32:a5:f3:05: 78:7e:59:16:c9:e4:ad:1d:f1:8f:af:02:ab:52:3e: 26:ba:cd:1b:72:53:cd:71:e1:cb:f8:52:ba:cc:4e: cb:54:18:dd:37:0f:23:50:e6:08:90:d9:e6:84:bb: 62:0d:0e:2a:63:96:3e:4a:46:c6:44:c0:fc:fe:c3: 8a:e1:99:93:df:f3:b7:36:8d:b6:2b:6d:db:6c:78: e1:89:6a:fc:c2:03:5f:01:ac:03:78:dd:15:12:92: b2:cd:d0:0c:32:8a:d1:31:d9:b1:f7:6c:1b:e7:42: de:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AA:19:F4:17:FA:EC:EC:C7:28:A4:09:FC:81:BF:E3:6E:41:9F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889e3dbd-e927-39dd-aa9a-08263834c34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:02:5a:32:6b:4d:74:12:cc:23:35:9d:fb:ed:61:05:3f:4d: 27:2c:4d:c3:d2:f8:02:2b:92:2f:d5:df:54:32:44:d0:a4:88: 10:00:0e:57:1f:40:91:db:2a:27:e7:56:4b:37:ed:62:98:91: 56:e8:ae:9d:91:4f:fe:24:72:91:5f:ff:f2:5a:69:7a:1c:88: cf:cf:a7:a1:0a:32:bf:72:4f:3f:08:bd:dd:ea:7b:e6:92:95: 18:20:33:9d:ae:45:5b:bd:02:87:9b:33:04:2a:b2:25:ac:0a: 8d:01:23:db:a8:7a:a5:8e:09:e5:e9:d4:e8:db:af:be:59:ad: 5b:d0:93:f8:4c:d7:6c:9f:9b:18:69:ef:cd:86:bd:94:c9:a0: 66:57:e3:88:a9:da:08:68:60:b4:f5:d5:0f:c3:ad:37:46:2f: 52:68:ef:8a:fa:6d:a6:37:71:b1:93:12:61:77:16:cd:43:17: 4c:5b:36:c2:fc:6d:24:a9:fa:1c:76:c1:5f:e1:74:d7:86:61: 38:85:fb:5f:f5:36:60:bb:3a:ed:73:42:20:6b:a4:db:a4:69: ec:a5:0b:f4:43:d1:cd:78:b2:53:d4:e5:3c:fd:ae:66:25:6c: bc:f6:fa:e5:0d:c4:1e:94:d3:0a:97:56:73:4b:57:92:ca:9b: 9e:59:60:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElz3vDegwOi/l/jYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk ZWUwN2U4NjgtNGE3ZS00YjJkLWEyMmYtYzU4MThhMjZjNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5zHacBOWhtJyq0ShfC+pVieX/JUXas3w4t1 wLDeNA1uX3l3EsWv++pB1YCyeHOhNcq1KXih0Mgtp7LjhFH27GVmFMH01QmqwHvq EBeIkjWTzW6UZcQMr9vrHm0MXEslYyiB9UV7+AwrwMcxHNBgNk6ElP/GaI9sB5aR SjS06ho0GWVtLd1BfJZZxYziuoFcpzKl8wV4flkWyeStHfGPrwKrUj4mus0bclPN ceHL+FK6zE7LVBjdNw8jUOYIkNnmhLtiDQ4qY5Y+SkbGRMD8/sOK4ZmT3/O3No22 K23bbHjhiWr8wgNfAawDeN0VEpKyzdAMMorRMdmx92wb50LeMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKuqGfQX+uzsxyikCfyBv+NuQZ/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODg5ZTNkYmQtZTkyNy0z OWRkLWFhOWEtMDgyNjM4MzRjMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1Aloya010EswjNZ377WEFP00nLE3D0vgCK5Iv1d9UMkTQpIgQAA5X H0CR2yon51ZLN+1imJFW6K6dkU/+JHKRX//yWml6HIjPz6ehCjK/ck8/CL3d6nvm kpUYIDOdrkVbvQKHmzMEKrIlrAqNASPbqHqljgnl6dTo26++Wa1b0JP4TNdsn5sY ae/Nhr2UyaBmV+OIqdoIaGC09dUPw603Ri9SaO+K+m2mN3GxkxJhdxbNQxdMWzbC /G0kqfocdsFf4XTXhmE4hftf9TZguzrtc0Iga6TbpGnspQv0Q9HNeLJT1OU8/a5m JWy89vrlDcQelNMKl1ZzS1eSypueWWDV -----END CERTIFICATE-----Generated at Sat Apr 12 00:01:28 2025 by rpki-client