$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5c89966-6c81-3e65-9a9d-3dfd582ffca1.roa File: b5c89966-6c81-3e65-9a9d-3dfd582ffca1.roa (raw, json) Hash identifier: 4JEeI7bQsnsbVvNLtUln6RU3pgCriJibOwf9Gz0g+2M= Subject key identifier: E2:1A:2E:AD:98:21:C1:D5:99:6D:B1:12:4E:55:CF:9D:10:D6:E7:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A0C0918C08EDA5D14DEECEAA0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5c89966-6c81-3e65-9a9d-3dfd582ffca1.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 396606 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:09:18:c0:8e:da:5d:14:de:ec:ea:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=895e90fb-fa00-4fdd-a4f9-c17c82ce0786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6f:68:17:42:f6:f9:50:65:bd:38:cd:8f:7a: 3f:55:5d:21:fd:6c:d5:d6:e5:91:e7:b1:e8:ec:e8: 06:4b:ff:42:f3:4b:c2:87:ca:e9:33:9d:38:52:f1: 0d:30:35:65:52:65:76:2c:7b:62:f1:08:b3:1f:e8: f2:48:80:b8:ef:71:8d:db:08:b4:a4:b4:4b:db:15: 8f:9c:4c:25:8e:56:69:1a:85:06:cf:fc:5a:1e:66: 3c:b4:a7:67:02:af:6f:05:78:26:ad:74:59:35:d0: 86:a5:a9:58:0e:36:65:fa:b7:d1:9c:c2:f1:26:0e: 13:c8:4d:7c:7c:e3:40:8b:94:ad:a5:2a:a8:e8:8e: 50:3c:f6:c2:1c:a4:a3:9c:d6:8f:30:c4:70:0b:39: 0b:a5:ca:bf:b1:43:4c:ef:ee:e5:89:10:ad:18:80: d1:a9:73:c4:e4:31:95:7e:5c:1d:3f:61:59:29:69: 13:b1:cd:16:64:d7:5f:8f:cd:b0:4d:e4:0e:be:68: 24:42:05:96:bc:02:81:e1:3b:93:e0:23:c7:98:91: a6:30:10:93:07:13:70:b3:9b:1e:56:90:5e:a8:c6: 3a:03:63:30:b3:9c:2a:fa:d5:5d:ca:72:16:12:69: 5f:d9:36:8c:fe:58:f5:55:a4:93:90:95:13:38:71: c8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1A:2E:AD:98:21:C1:D5:99:6D:B1:12:4E:55:CF:9D:10:D6:E7:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5c89966-6c81-3e65-9a9d-3dfd582ffca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fe:af:82:9a:f4:59:c8:22:20:f3:0b:1f:14:08:9f:cc:ad: ed:0b:3b:d2:9d:85:eb:24:77:90:61:fb:2e:17:a1:9a:ac:ff: 51:5f:d9:d6:e1:91:83:cf:f0:0d:53:a7:2c:cb:69:bf:82:3c: 4c:25:03:0c:88:62:68:7c:fe:11:c6:ec:d9:0c:eb:b8:06:24: 3b:ca:ab:58:70:34:05:38:e7:fc:ec:33:09:4c:a8:5f:4f:8f: 6f:bf:3f:3d:ac:8c:31:2b:15:d3:63:2a:d1:35:c2:3d:fe:0b: 8f:60:54:db:70:b5:d9:cc:ec:61:cf:ba:8d:cd:a4:8d:8e:43: c6:12:04:25:d3:71:37:04:ef:81:e5:76:1a:f9:56:ce:e4:7a: 8b:cd:54:8b:48:82:22:bb:b4:a0:5a:85:45:1e:f2:ca:87:bf: c8:1b:29:99:e1:47:41:6b:bf:43:ff:55:f2:56:7d:7a:75:fa: 47:fa:db:a4:89:07:88:b4:67:29:d6:5a:c8:8e:9e:f6:51:80: 45:dd:43:43:35:0f:03:dd:e4:0f:73:1e:42:8f:63:c0:68:b5: b9:9d:19:20:34:7e:86:bd:87:a0:ea:9e:cf:20:d8:7b:d6:b0: 86:e4:61:2a:23:1f:32:87:05:31:f0:0c:b7:a2:0e:22:70:95: 37:de:3e:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoMCRjAjtpdFN7s6qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ODk1ZTkwZmItZmEwMC00ZmRkLWE0ZjktYzE3YzgyY2UwNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm9oF0L2+VBlvTjNj3o/VV0h/WzV1uWR57Ho 7OgGS/9C80vCh8rpM504UvENMDVlUmV2LHti8QizH+jySIC473GN2wi0pLRL2xWP nEwljlZpGoUGz/xaHmY8tKdnAq9vBXgmrXRZNdCGpalYDjZl+rfRnMLxJg4TyE18 fONAi5StpSqo6I5QPPbCHKSjnNaPMMRwCzkLpcq/sUNM7+7liRCtGIDRqXPE5DGV flwdP2FZKWkTsc0WZNdfj82wTeQOvmgkQgWWvAKB4TuT4CPHmJGmMBCTBxNws5se VpBeqMY6A2Mws5wq+tVdynIWEmlf2TaM/lj1VaSTkJUTOHHIfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOIaLq2YIcHVmW2xEk5Vz50Q1udpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjVjODk5NjYtNmM4MS0z ZTY1LTlhOWQtM2RmZDU4MmZmY2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAW/q+CmvRZyCIg8wsfFAifzK3tCzvSnYXrJHeQYfsuF6GarP9RX9nW 4ZGDz/ANU6csy2m/gjxMJQMMiGJofP4RxuzZDOu4BiQ7yqtYcDQFOOf87DMJTKhf T49vvz89rIwxKxXTYyrRNcI9/guPYFTbcLXZzOxhz7qNzaSNjkPGEgQl03E3BO+B 5XYa+VbO5HqLzVSLSIIiu7SgWoVFHvLKh7/IGymZ4UdBa79D/1XyVn16dfpH+tuk iQeItGcp1lrIjp72UYBF3UNDNQ8D3eQPcx5Cj2PAaLW5nRkgNH6GvYeg6p7PINh7 1rCG5GEqIx8yhwUx8Ay3og4icJU33j5D -----END CERTIFICATE-----Generated at Fri Jun 6 19:31:49 2025 by rpki-client