$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4ce2a3c-a022-34eb-b45f-ed5be67f497d.roa File: b4ce2a3c-a022-34eb-b45f-ed5be67f497d.roa (raw, json) Hash identifier: Lh+hgGb28V2hFENWibxCrllrOxA2baG7k0s2yuj/db8= Subject key identifier: D4:76:23:EC:67:17:A1:12:17:61:2E:F0:4F:1F:BE:8A:E5:81:3E:FF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584953C4553F3FCBB6939551DE40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4ce2a3c-a022-34eb-b45f-ed5be67f497d.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 396599 IP address blocks: 192.153.247.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:55:3f:3f:cb:b6:93:95:51:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=40f11516-9708-47a4-93b6-40608c05303d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:56:02:3b:fe:01:fb:75:a3:40:a6:24:3a:3f: 11:93:1f:9f:32:54:08:04:d8:5b:2a:1f:36:75:31: 64:b0:9d:b0:41:e6:93:dd:4d:d9:db:c7:28:e2:03: 76:19:21:9c:98:7a:81:b0:61:34:64:23:d5:07:92: b8:ac:5c:ba:97:04:ea:ef:6b:be:fe:cc:9d:87:7b: c4:9d:77:55:52:42:cd:f9:a9:48:d9:15:74:16:2c: ba:02:88:34:21:3c:74:6a:b1:ea:2f:b8:aa:45:af: 33:d9:53:cf:32:d6:84:40:66:e1:d5:c2:9a:49:08: 77:fc:88:54:5c:0b:bc:97:59:d5:5d:5f:5c:2f:79: dc:c7:e6:0c:cd:7f:b6:11:31:55:12:34:4c:c0:6b: ca:70:9a:72:07:14:a6:39:76:b7:dd:f4:71:6a:9e: 06:ff:52:14:ae:bf:66:c2:14:83:bc:32:24:0e:89: 87:97:30:fa:3f:66:9e:e4:44:18:ea:91:24:9d:a3: c1:5c:58:dd:27:8a:d2:8d:47:2b:d4:85:bb:d0:14: 98:5c:02:4b:da:c0:b0:2b:ed:02:9d:ad:e1:66:cd: 5b:a6:38:10:17:bb:36:a6:96:d9:73:fe:33:ed:fe: ff:b5:60:5e:6d:fd:a7:84:90:74:18:f1:0d:56:ee: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:76:23:EC:67:17:A1:12:17:61:2E:F0:4F:1F:BE:8A:E5:81:3E:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4ce2a3c-a022-34eb-b45f-ed5be67f497d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:87:c8:b4:81:b6:4f:6a:51:0e:81:ed:6e:ab:3e:ed:8a:36: c6:7a:3b:b3:80:9d:7d:2a:0c:d6:b6:6a:3e:c9:97:74:23:fc: f0:01:fe:0d:9c:89:63:ce:98:ac:9d:0e:75:95:28:45:ed:5d: b6:b7:ef:00:56:6f:eb:01:8b:a4:95:69:14:91:a9:ad:9a:76: 22:01:a3:18:89:62:c4:c2:13:28:93:4a:c3:c6:0d:39:93:f7: 5d:6a:d2:44:dc:cd:04:05:6b:49:a9:a7:2a:4e:65:25:0b:1a: 23:ea:24:52:2c:cc:00:cd:82:bc:de:25:bf:c0:13:ea:5c:2f: cd:79:e6:15:d8:00:74:36:cd:e2:74:3d:b4:8f:c9:de:93:44: 96:be:13:80:aa:44:23:2f:b8:0d:c7:93:96:f6:46:67:bb:54: 29:17:1b:d4:cc:6a:30:54:b6:2e:56:0f:cf:19:7c:0e:91:f6: 70:a1:9c:b8:7f:b1:4b:3f:8d:54:e6:da:c0:b8:fc:e0:0d:af: f5:94:b0:21:05:75:7d:bd:66:d0:b9:0d:0c:31:43:b9:f6:b5: 63:29:49:0a:ca:64:8e:68:6c:17:b6:84:42:96:da:2d:f4:56: aa:f9:15:04:78:c4:de:a1:be:9b:0d:07:81:4e:a5:dd:2d:1b: eb:dd:06:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxFU/P8u2k5VR3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NDBmMTE1MTYtOTcwOC00N2E0LTkzYjYtNDA2MDhjMDUzMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1YCO/4B+3WjQKYkOj8Rkx+fMlQIBNhbKh82 dTFksJ2wQeaT3U3Z28co4gN2GSGcmHqBsGE0ZCPVB5K4rFy6lwTq72u+/sydh3vE nXdVUkLN+alI2RV0Fiy6Aog0ITx0arHqL7iqRa8z2VPPMtaEQGbh1cKaSQh3/IhU XAu8l1nVXV9cL3ncx+YMzX+2ETFVEjRMwGvKcJpyBxSmOXa33fRxap4G/1IUrr9m whSDvDIkDomHlzD6P2ae5EQY6pEknaPBXFjdJ4rSjUcr1IW70BSYXAJL2sCwK+0C na3hZs1bpjgQF7s2ppbZc/4z7f7/tWBebf2nhJB0GPENVu4SrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNR2I+xnF6ESF2Eu8E8fvorlgT7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjRjZTJhM2MtYTAyMi0z NGViLWI0NWYtZWQ1YmU2N2Y0OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCgh8i0gbZPalEOge1uqz7tijbGejuzgJ19KgzWtmo+yZd0I/zwAf4N nIljzpisnQ51lShF7V22t+8AVm/rAYuklWkUkamtmnYiAaMYiWLEwhMok0rDxg05 k/ddatJE3M0EBWtJqacqTmUlCxoj6iRSLMwAzYK83iW/wBPqXC/NeeYV2AB0Ns3i dD20j8nek0SWvhOAqkQjL7gNx5OW9kZnu1QpFxvUzGowVLYuVg/PGXwOkfZwoZy4 f7FLP41U5trAuPzgDa/1lLAhBXV9vWbQuQ0MMUO59rVjKUkKymSOaGwXtoRCltot 9Faq+RUEeMTeob6bDQeBTqXdLRvr3QbB -----END CERTIFICATE-----Generated at Sat Apr 12 02:01:55 2025 by rpki-client