$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9930f0-49cd-3f71-9a61-e919e09c67b9.roa File: 8b9930f0-49cd-3f71-9a61-e919e09c67b9.roa (raw, json) Hash identifier: F0ENI3mLdWym+JuLfJdLSMMLcgGVmhkhdA0HOEsso8I= Subject key identifier: B9:5F:0D:2A:3B:88:20:DD:5E:CD:2A:6F:1A:52:1B:9E:97:12:51:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584979744D43223AAFA87A583B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9930f0-49cd-3f71-9a61-e919e09c67b9.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 397200 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:4d:43:22:3a:af:a8:7a:58:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=d7e86ff6-bd05-4457-83e2-0c3968bf77f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:12:99:ce:fb:13:1f:0b:b6:b8:88:1c:5f: 8a:5b:b7:98:90:d1:03:b9:f0:96:82:aa:6d:b2:ce: 6f:1b:a4:1c:24:b9:c6:53:42:36:c6:94:8f:a4:95: 7a:ab:39:52:e5:39:94:5b:0b:ff:2a:b7:7e:e4:a3: c6:80:e1:57:e7:a0:61:46:82:2d:b3:e2:13:fb:05: 26:00:8d:17:25:8d:e8:51:48:52:ab:cf:23:fd:85: 60:ae:a7:7f:50:75:cd:62:b5:09:ca:0a:1d:8c:36: c4:40:75:70:95:7a:01:a7:ac:a4:d7:7f:20:de:60: b6:36:19:6e:ee:cb:68:96:ed:e3:30:4d:6c:cd:d5: b3:30:b7:60:66:f4:04:b4:7b:65:51:3f:32:2e:24: be:e1:b8:12:1d:23:af:fa:7d:f0:18:39:6b:d5:d7: cd:07:c0:ba:58:5b:1c:dc:25:32:fe:31:da:15:b6: b4:b4:64:36:a3:55:86:56:a7:d1:cc:54:3e:14:c3: 40:33:b2:59:1f:5f:d3:13:7e:18:db:7f:53:7b:c2: fa:bd:f0:1c:e0:1f:06:12:4a:7c:ef:55:d8:3d:74: c9:46:c4:77:80:72:24:4a:22:c2:f1:b6:82:c3:ea: ae:29:95:91:ea:8c:1b:95:57:b3:71:ba:c7:41:76: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5F:0D:2A:3B:88:20:DD:5E:CD:2A:6F:1A:52:1B:9E:97:12:51:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9930f0-49cd-3f71-9a61-e919e09c67b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:89:5a:b4:e1:50:2d:14:10:6e:2f:d6:b5:4e:b3:1c:6d:d4: fb:1f:b0:5e:e7:fd:1c:15:5f:d2:3b:e4:5a:3b:3b:d3:f0:4c: d3:55:fe:60:e1:a9:dc:c3:19:7f:57:99:ef:1a:54:89:a3:0d: 09:cf:74:2a:43:92:1c:7f:a2:9e:52:15:79:d8:34:22:7f:55: ff:27:10:6d:7d:86:c5:ba:d0:2e:96:ec:0e:52:96:75:fe:6d: d4:7a:74:7b:2e:b6:89:74:1c:cf:53:c9:d4:e1:3d:df:4b:45: 96:b3:1e:76:75:cf:9a:b7:b5:a5:cc:db:8c:fa:50:9b:cf:c6: fb:9c:18:db:01:54:86:c5:f1:9a:b6:a7:dd:84:c9:9a:d9:dd: c2:37:06:cd:61:70:bd:cb:5d:cc:5e:09:fd:ae:d3:1b:cc:28: 86:83:77:ab:eb:fb:28:b6:92:d9:87:f8:17:49:7b:37:be:a2: 8c:00:2b:1e:8f:c3:29:89:65:49:31:a8:d2:e6:01:73:ae:32: 30:24:ca:67:b4:45:69:1b:f2:a0:fd:29:0d:fc:8a:e5:bb:46: 9c:4d:d2:fc:79:0d:65:f8:83:69:3e:6b:80:e7:e7:4c:cd:86: 82:5a:02:84:3c:42:35:89:02:f9:27:65:9e:53:f5:d5:1e:a0: bd:17:be:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl5dE1DIjqvqHpYO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk ZDdlODZmZjYtYmQwNS00NDU3LTgzZTItMGMzOTY4YmY3N2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYgSmc77Ex8LtriIHF+KW7eYkNEDufCWgqpt ss5vG6QcJLnGU0I2xpSPpJV6qzlS5TmUWwv/Krd+5KPGgOFX56BhRoIts+IT+wUm AI0XJY3oUUhSq88j/YVgrqd/UHXNYrUJygodjDbEQHVwlXoBp6yk138g3mC2Nhlu 7stolu3jME1szdWzMLdgZvQEtHtlUT8yLiS+4bgSHSOv+n3wGDlr1dfNB8C6WFsc 3CUy/jHaFba0tGQ2o1WGVqfRzFQ+FMNAM7JZH1/TE34Y239Te8L6vfAc4B8GEkp8 71XYPXTJRsR3gHIkSiLC8baCw+quKZWR6owblVezcbrHQXZzvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLlfDSo7iCDdXs0qbxpSG56XElGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGI5OTMwZjAtNDljZC0z ZjcxLTlhNjEtZTkxOWUwOWM2N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBliVq04VAtFBBuL9a1TrMcbdT7H7Be5/0cFV/SO+RaOzvT8EzTVf5g 4ancwxl/V5nvGlSJow0Jz3QqQ5Icf6KeUhV52DQif1X/JxBtfYbFutAuluwOUpZ1 /m3UenR7LraJdBzPU8nU4T3fS0WWsx52dc+at7WlzNuM+lCbz8b7nBjbAVSGxfGa tqfdhMma2d3CNwbNYXC9y13MXgn9rtMbzCiGg3er6/sotpLZh/gXSXs3vqKMACse j8MpiWVJMajS5gFzrjIwJMpntEVpG/Kg/SkN/Irlu0acTdL8eQ1l+INpPmuA5+dM zYaCWgKEPEI1iQL5J2WeU/XVHqC9F77s -----END CERTIFICATE-----Generated at Sat Apr 12 00:09:48 2025 by rpki-client