$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20910dc-99bf-3c10-915d-32e9a7db28f5.roa File: a20910dc-99bf-3c10-915d-32e9a7db28f5.roa (raw, json) Hash identifier: FzSbhJkB4/bPGebx7UZeNqs2tcufZZ2QsJZrapOqBec= Subject key identifier: A9:9D:A2:A1:AE:FB:47:D6:9E:E5:71:FB:5C:3E:88:29:7B:5C:73:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584953C4501D35C123266D27CF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20910dc-99bf-3c10-915d-32e9a7db28f5.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 20172 IP address blocks: 192.153.247.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:50:1d:35:c1:23:26:6d:27:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=2d40d9cf-68d5-4626-ad2b-cb8ad50d83ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:6e:62:08:e3:c0:7d:85:d8:dc:d9:fe:65: 8d:4c:e3:b9:e5:be:6b:3d:8f:7f:f1:d8:72:f4:48: 42:93:9a:e1:76:20:d9:43:73:ae:cc:de:3c:44:13: 09:64:13:37:bc:52:37:c9:64:15:f7:51:59:21:3f: a7:4a:d1:23:fe:47:ad:01:c3:bb:f1:58:c5:7e:e1: 05:50:7a:36:da:24:8a:e0:aa:c0:1f:38:1f:f2:e9: f3:c1:4c:66:1e:e6:1b:03:18:24:85:5c:4a:93:cc: 61:a5:44:4d:9d:e0:d6:d4:bf:84:c3:03:ad:8e:70: 17:52:df:2e:50:14:37:9b:99:49:84:fc:56:06:f7: e1:ae:1e:b9:80:49:b2:4e:fa:21:e7:21:b0:0d:11: df:b0:45:eb:6a:4b:ab:0c:88:85:12:71:e2:f2:e5: d0:e1:19:2b:41:58:4a:46:72:3d:5f:b0:b2:f9:46: 2b:8a:49:9a:a4:4e:97:aa:1c:fa:5e:07:71:57:94: 57:e9:ec:9c:c2:5b:b0:b7:db:c6:b0:82:c6:8b:1f: f8:6e:13:1d:a3:0d:b1:f5:7c:13:cc:04:91:e9:7f: 28:78:cc:27:1a:9b:cc:b5:a4:b4:a1:8b:76:f4:94: ca:7d:fb:3e:4e:fb:f6:9c:8d:01:6a:52:58:92:77: bd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9D:A2:A1:AE:FB:47:D6:9E:E5:71:FB:5C:3E:88:29:7B:5C:73:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20910dc-99bf-3c10-915d-32e9a7db28f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:ea:84:ab:5b:00:a2:18:35:4a:9e:32:f7:1f:c2:bf:84:52: e0:4d:0d:ad:b4:23:9f:67:0d:c3:90:ad:d6:29:3f:5d:4f:d7: eb:37:62:4a:b0:61:c0:18:87:32:c3:22:3e:a9:ab:16:fd:09: f4:07:0c:d4:5a:38:78:06:7f:88:a9:59:c7:9d:3a:60:fa:2a: 8a:1d:f4:e5:35:8e:30:34:e0:c5:d9:6d:7e:3a:31:53:c1:43: 46:52:c4:03:13:12:4d:4d:81:58:9a:1c:d6:db:cd:d7:44:17: bc:64:42:4a:58:62:8c:23:36:a5:dc:19:fd:76:7b:9d:e2:2a: 83:59:b5:13:6f:97:c8:12:24:57:28:e2:47:9d:0b:35:07:e3: 14:08:3f:3a:21:ac:f6:cf:a1:b0:54:47:fc:f2:4b:96:02:05: 83:07:36:56:0e:fe:04:74:d2:be:0d:c7:92:ec:4e:23:9d:ca: 7e:66:00:e7:81:68:a9:0e:60:24:12:81:d1:c1:2c:bd:90:5c: 00:0b:20:94:84:ad:45:61:9b:c2:bf:d2:16:79:28:95:3a:63: 5f:b7:b2:a8:c6:1e:b5:f8:d1:f4:dd:41:d3:6b:69:6c:53:a2: bf:92:e9:12:f5:91:9f:96:24:95:7d:cc:db:2e:f7:21:11:a1: c6:23:c4:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxFAdNcEjJm0nzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmQ0MGQ5Y2YtNjhkNS00NjI2LWFkMmItY2I4YWQ1MGQ4M2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrZuYgjjwH2F2NzZ/mWNTOO55b5rPY9/8dhy 9EhCk5rhdiDZQ3OuzN48RBMJZBM3vFI3yWQV91FZIT+nStEj/ketAcO78VjFfuEF UHo22iSK4KrAHzgf8unzwUxmHuYbAxgkhVxKk8xhpURNneDW1L+EwwOtjnAXUt8u UBQ3m5lJhPxWBvfhrh65gEmyTvoh5yGwDRHfsEXrakurDIiFEnHi8uXQ4RkrQVhK RnI9X7Cy+UYrikmapE6Xqhz6XgdxV5RX6eycwluwt9vGsILGix/4bhMdow2x9XwT zASR6X8oeMwnGpvMtaS0oYt29JTKffs+Tvv2nI0BalJYkne9vQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKmdoqGu+0fWnuVx+1w+iCl7XHPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTIwOTEwZGMtOTliZi0z YzEwLTkxNWQtMzJlOWE3ZGIyOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC+6oSrWwCiGDVKnjL3H8K/hFLgTQ2ttCOfZw3DkK3WKT9dT9frN2JK sGHAGIcywyI+qasW/Qn0BwzUWjh4Bn+IqVnHnTpg+iqKHfTlNY4wNODF2W1+OjFT wUNGUsQDExJNTYFYmhzW283XRBe8ZEJKWGKMIzal3Bn9dnud4iqDWbUTb5fIEiRX KOJHnQs1B+MUCD86Iaz2z6GwVEf88kuWAgWDBzZWDv4EdNK+DceS7E4jncp+ZgDn gWipDmAkEoHRwSy9kFwACyCUhK1FYZvCv9IWeSiVOmNft7Koxh61+NH03UHTa2ls U6K/kukS9ZGfliSVfczbLvchEaHGI8T0 -----END CERTIFICATE-----Generated at Fri Apr 11 22:34:49 2025 by rpki-client