$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c3e3eda-ee83-3a31-9bba-0f40c259e89d.roa File: 8c3e3eda-ee83-3a31-9bba-0f40c259e89d.roa (raw, json) Hash identifier: VAcBBSnIc2iHe9Esz+AD7u3PkxNlJbeBl59T0hXFX24= Subject key identifier: 17:B2:B0:E5:D2:DB:2E:DE:8F:3D:77:B8:63:9E:15:62:BC:C4:53:F6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848B4C0F363183EAFC3147B7E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c3e3eda-ee83-3a31-9bba-0f40c259e89d.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 397207 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f3:63:18:3e:af:c3:14:7b:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=22082d6f-05d5-4421-83e5-2eed9e448dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:84:0d:87:9d:ef:fe:a5:ba:4a:e9:4d:11:00: 84:0e:f1:dd:a9:9b:aa:27:7c:56:c2:d5:f4:4b:9c: 20:18:50:95:e4:6c:2c:4d:5f:27:6b:c6:14:34:63: 27:28:18:1e:ab:29:c4:09:78:ba:54:d0:fd:d9:6e: fb:eb:7d:49:e9:2d:26:3e:ec:e9:1a:18:dd:66:19: 60:13:31:d1:e3:2e:3d:a5:de:6b:2c:a8:cf:f2:17: f0:cd:28:65:fb:1d:a9:46:42:9c:7b:ce:6f:ae:ca: 91:01:2a:46:52:c1:ac:68:88:d2:e3:de:22:e2:fe: 60:62:79:27:cc:52:b2:e1:30:af:47:4d:b5:15:93: c9:6b:90:06:5e:79:8a:e2:6f:ae:f4:1e:ff:dd:e6: a2:f5:1d:0a:97:11:68:21:62:20:6e:e5:74:02:b6: a1:80:72:4b:2b:18:c4:dc:fd:3e:6e:fe:7b:bc:91: 5c:32:bd:88:62:bd:7c:7c:3c:dc:ee:b5:a8:31:9e: b9:ee:66:41:8d:d9:3e:c2:ff:cf:72:00:6f:02:56: 7e:b5:85:3d:e1:49:6e:68:ab:c2:14:4a:61:70:29: 69:07:06:ba:63:c5:f4:e0:86:71:e6:37:95:11:4c: 4f:0b:cf:d3:cf:d2:83:39:c1:df:d4:8a:5e:fc:bc: c9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B2:B0:E5:D2:DB:2E:DE:8F:3D:77:B8:63:9E:15:62:BC:C4:53:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c3e3eda-ee83-3a31-9bba-0f40c259e89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e7:7c:63:f3:51:7c:0f:07:86:8c:a3:4c:aa:df:4e:fe:34: 95:49:30:33:ec:12:32:f8:0b:f1:82:a5:3f:13:cb:50:15:1d: 2b:bc:62:1f:09:eb:0d:ab:a2:e7:b4:13:7e:31:d0:59:96:00: 0f:f5:e9:07:7a:0f:da:46:ba:e6:c4:c2:28:a9:36:6e:c3:3d: 4e:24:ed:80:4d:de:40:bf:ce:af:bd:72:2d:63:eb:5d:63:99: 43:78:b3:54:a5:90:29:7e:c9:78:a0:f0:dd:c4:7d:5c:bd:ad: fc:6d:36:f9:e1:44:e6:c7:77:fa:0d:1c:e7:4f:ba:4a:66:b2: 60:2c:78:e4:3b:34:88:2b:a3:24:2f:c8:32:2b:4b:b1:82:7b: 52:c7:96:d7:1b:dd:2e:89:22:cb:80:ad:38:ac:fd:5d:4b:49: ba:a2:6f:01:8d:22:fb:b1:d1:4b:50:2d:87:ad:31:a5:08:9c: 02:1c:f6:68:02:a1:cd:b8:d6:41:0a:2a:85:48:71:5b:b5:70: 0d:e2:c2:6d:cb:9c:6e:88:bf:46:a5:cb:43:ad:49:5e:10:53: 21:e8:01:21:a4:61:14:72:b9:6f:eb:3a:ab:f0:1b:17:01:86: 36:17:76:98:2b:e6:23:ef:81:18:20:00:df:bf:19:9b:f4:f6: 6d:2a:c2:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi0wPNjGD6vwxR7fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk MjIwODJkNmYtMDVkNS00NDIxLTgzZTUtMmVlZDllNDQ4ZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYQNh53v/qW6SulNEQCEDvHdqZuqJ3xWwtX0 S5wgGFCV5GwsTV8na8YUNGMnKBgeqynECXi6VND92W77631J6S0mPuzpGhjdZhlg EzHR4y49pd5rLKjP8hfwzShl+x2pRkKce85vrsqRASpGUsGsaIjS494i4v5gYnkn zFKy4TCvR021FZPJa5AGXnmK4m+u9B7/3eai9R0KlxFoIWIgbuV0ArahgHJLKxjE 3P0+bv57vJFcMr2IYr18fDzc7rWoMZ657mZBjdk+wv/PcgBvAlZ+tYU94UluaKvC FEphcClpBwa6Y8X04IZx5jeVEUxPC8/Tz9KDOcHf1Ipe/LzJzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBeysOXS2y7ejz13uGOeFWK8xFP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGMzZTNlZGEtZWU4My0z YTMxLTliYmEtMGY0MGMyNTllODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAc53xj81F8DweGjKNMqt9O/jSVSTAz7BIy+AvxgqU/E8tQFR0rvGIf CesNq6LntBN+MdBZlgAP9ekHeg/aRrrmxMIoqTZuwz1OJO2ATd5Av86vvXItY+td Y5lDeLNUpZApfsl4oPDdxH1cva38bTb54UTmx3f6DRznT7pKZrJgLHjkOzSIK6Mk L8gyK0uxgntSx5bXG90uiSLLgK04rP1dS0m6om8BjSL7sdFLUC2HrTGlCJwCHPZo AqHNuNZBCiqFSHFbtXAN4sJty5xuiL9GpctDrUleEFMh6AEhpGEUcrlv6zqr8BsX AYY2F3aYK+Yj74EYIADfvxmb9PZtKsKX -----END CERTIFICATE-----Generated at Fri Apr 11 23:52:15 2025 by rpki-client