$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e3bc4cb-f0ca-3458-9b22-6620f299f32b.roa File: 9e3bc4cb-f0ca-3458-9b22-6620f299f32b.roa (raw, json) Hash identifier: xCo4c+JaP9Fn4YF1HLTW2uzN7UUAd7sYRGONte4erkE= Subject key identifier: A5:6C:CF:C0:51:1D:17:6F:3A:65:1D:EF:8F:7B:C9:6D:6E:95:E5:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848B4C0F071063F3B2055794740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e3bc4cb-f0ca-3458-9b22-6620f299f32b.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 396615 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f0:71:06:3f:3b:20:55:79:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=a3105201-5b50-4f32-bf9a-d1397a67294e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:59:78:4d:76:d3:04:27:4f:82:58:3e:bd:4e: e6:3a:05:a2:8e:aa:c0:d1:f5:a5:87:69:53:1c:bb: 47:be:1c:87:09:d1:6b:91:8e:71:ff:d6:24:d9:ce: e5:46:52:5c:3c:97:37:c2:cc:fb:e4:b8:0a:97:83: 14:8c:ea:ac:66:41:ba:23:57:4f:48:4f:69:7d:cc: 03:3e:14:41:18:9d:45:25:de:58:06:c7:d0:06:4c: 38:48:80:11:f1:24:5f:51:4d:32:2b:3c:5c:fe:ae: b2:48:f7:bb:45:17:5f:73:c1:fb:08:ac:0a:2d:8a: 03:7b:29:a9:59:1b:ab:33:99:dd:bd:10:76:18:01: 2e:3b:7a:32:40:d1:61:fb:3f:3e:03:ce:bd:df:fb: 6d:bf:8d:35:c1:a9:34:8f:f3:ca:73:83:db:ee:85: f0:32:83:c5:1c:69:9f:c4:2b:d8:ec:7f:3a:b5:48: b3:0e:e2:d9:b4:81:6e:66:7b:07:37:64:a2:3d:00: d5:09:02:d2:a6:86:81:c2:db:c8:52:0d:73:76:64: 31:4e:9f:c7:7a:da:5e:74:dd:c9:0f:6e:11:3f:15: e1:b0:46:27:a5:cf:02:a6:51:fe:2c:b8:13:ff:d0: 06:48:1c:3e:ff:d2:aa:92:e1:87:07:01:1a:69:a4: 9d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6C:CF:C0:51:1D:17:6F:3A:65:1D:EF:8F:7B:C9:6D:6E:95:E5:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e3bc4cb-f0ca-3458-9b22-6620f299f32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:60:80:9e:81:fb:51:82:e7:67:45:a4:5b:1c:d4:6a:c7:be: 62:0e:51:5c:4f:42:5d:68:f4:06:71:1b:d5:d0:7b:40:9f:5a: 28:e1:ed:12:dc:a2:c2:37:2f:ad:67:eb:99:d0:8f:24:a6:8c: 1d:eb:98:2f:ab:dd:48:16:48:fc:94:c4:71:ec:df:c0:f0:96: ff:bf:df:0b:04:2b:9b:d9:31:9c:16:2e:24:0d:1f:cd:6b:1b: 47:56:41:89:da:b8:ee:a9:42:12:ca:5c:aa:61:61:3d:c0:9c: 6d:c8:23:c6:c3:72:da:e3:d4:92:00:55:23:2d:a8:dc:34:54: 58:87:e0:d5:70:03:d2:46:0e:85:18:a1:0f:1a:d1:3d:7f:ad: df:29:a0:5e:44:9e:92:f1:62:a5:7e:69:46:a5:7e:8a:7c:0c: 95:8a:fe:76:e5:64:58:b1:40:a6:2b:a9:67:28:12:0b:2d:e0: 51:7d:18:ee:89:b5:3e:65:7a:fc:8a:21:de:d9:93:c3:0c:94: 97:aa:f0:94:b7:c0:4a:ee:7f:73:86:c5:ca:f3:c9:1d:0a:8d: a5:c8:6b:0b:92:90:3c:63:06:20:82:fa:d9:49:11:d3:6d:0a: e7:71:e5:08:0b:46:75:01:8d:e0:80:1d:11:82:81:91:72:c4: b4:d2:dd:0f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi0wPBxBj87IFV5R0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YTMxMDUyMDEtNWI1MC00ZjMyLWJmOWEtZDEzOTdhNjcyOTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhll4TXbTBCdPglg+vU7mOgWijqrA0fWlh2lT HLtHvhyHCdFrkY5x/9Yk2c7lRlJcPJc3wsz75LgKl4MUjOqsZkG6I1dPSE9pfcwD PhRBGJ1FJd5YBsfQBkw4SIAR8SRfUU0yKzxc/q6ySPe7RRdfc8H7CKwKLYoDeymp WRurM5ndvRB2GAEuO3oyQNFh+z8+A8693/ttv401wak0j/PKc4Pb7oXwMoPFHGmf xCvY7H86tUizDuLZtIFuZnsHN2SiPQDVCQLSpoaBwtvIUg1zdmQxTp/HetpedN3J D24RPxXhsEYnpc8CplH+LLgT/9AGSBw+/9KqkuGHBwEaaaSdoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKVsz8BRHRdvOmUd7497yW1uleU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWUzYmM0Y2ItZjBjYS0z NDU4LTliMjItNjYyMGYyOTlmMzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKYICegftRgudnRaRbHNRqx75iDlFcT0JdaPQGcRvV0HtAn1oo4e0S 3KLCNy+tZ+uZ0I8kpowd65gvq91IFkj8lMRx7N/A8Jb/v98LBCub2TGcFi4kDR/N axtHVkGJ2rjuqUISylyqYWE9wJxtyCPGw3La49SSAFUjLajcNFRYh+DVcAPSRg6F GKEPGtE9f63fKaBeRJ6S8WKlfmlGpX6KfAyViv525WRYsUCmK6lnKBILLeBRfRju ibU+ZXr8iiHe2ZPDDJSXqvCUt8BK7n9zhsXK88kdCo2lyGsLkpA8YwYggvrZSRHT bQrnceUIC0Z1AY3ggB0RgoGRcsS00t0P -----END CERTIFICATE-----Generated at Fri Apr 11 23:08:02 2025 by rpki-client