$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba097dde-442b-3ae4-95b0-305919764851.roa File: ba097dde-442b-3ae4-95b0-305919764851.roa (raw, json) Hash identifier: v2Ug581ioJQ5x4795ahx+zBGWBhuWDnF8/XDE72yWsc= Subject key identifier: 66:AF:A3:10:22:97:2D:F3:EC:58:18:5D:21:78:81:BE:5C:54:D6:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848CB08A0E20946C6C835808300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba097dde-442b-3ae4-95b0-305919764851.roa Signing time: Thu 06 Feb 2025 13:33:22 +0000 ROA not before: Thu 06 Feb 2025 13:33:22 +0000 ROA not after: Wed 07 May 2025 12:33:22 +0000 asID: 397209 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:08:a0:e2:09:46:c6:c8:35:80:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 6 13:33:22 2025 GMT Not After : May 7 12:33:22 2025 GMT Subject: CN=7e77a765-c3c6-4079-8a40-594b651dbf5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6b:70:9f:de:5b:e6:ca:26:a8:14:3d:a5:e9: c7:6f:5a:e8:89:9d:af:9d:f6:5a:07:b4:88:2c:27: 90:31:74:51:22:2e:3a:1d:b1:50:fd:43:9a:83:24: 2f:4b:20:60:df:52:20:74:58:16:7b:a9:82:52:7e: 4c:84:6c:eb:25:7c:12:80:29:cb:07:8b:b3:db:db: f7:f8:c8:0b:3e:64:1c:56:dc:f3:ec:6d:45:02:07: fb:79:e5:f8:88:5d:b2:cd:6b:34:23:7d:a7:c6:50: a1:6d:7f:06:4b:e6:31:e2:ef:88:41:99:2a:e2:9b: 48:84:2a:19:ef:d9:ba:0a:1f:0a:c8:1b:82:50:67: 50:86:fa:bd:7c:7c:77:45:82:b1:58:22:04:05:78: 78:a9:1f:3d:03:c1:ae:85:d3:a3:f4:91:88:8d:45: 24:c0:19:17:99:68:77:8b:74:4c:fc:56:0e:30:80: 91:c8:26:c5:42:87:46:50:a5:d1:78:70:1f:01:a4: 64:ae:9b:83:52:7e:ca:86:31:5c:c2:2d:4a:a2:99: 83:29:93:2c:1e:d6:06:ef:ad:cf:d2:5a:fd:42:4a: 47:f2:b2:b0:93:90:85:c8:18:6f:f7:a2:cd:4e:46: 4a:b6:3f:92:59:ce:83:37:a3:6d:90:ba:00:5c:b7: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AF:A3:10:22:97:2D:F3:EC:58:18:5D:21:78:81:BE:5C:54:D6:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba097dde-442b-3ae4-95b0-305919764851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d3:2b:90:fc:55:e4:7c:4d:14:99:78:4a:88:9e:0d:a7:25: 15:ee:43:9d:b7:d0:b5:4d:1d:7a:01:a5:cb:ad:df:91:71:d6: c6:27:57:b4:46:ad:3b:9c:0c:cb:66:f8:ff:a1:ac:ac:b8:1d: 8b:ce:4b:c6:a8:8c:01:e6:93:ac:54:c3:ea:5b:09:9e:c8:e1: 8c:4c:a9:2f:30:2e:fa:60:db:bc:a9:39:72:34:a0:89:9e:bb: 75:5b:30:40:e1:d4:25:0d:59:12:ae:10:64:a3:48:3d:1a:7e: 72:16:aa:03:65:c5:66:44:19:20:7e:44:74:33:f2:63:36:48: c6:92:ba:d0:d3:76:f2:a4:ba:e0:c0:45:3b:83:94:88:2f:ac: b8:74:fe:d4:6d:69:ce:8f:1c:5e:6e:ea:02:1d:a5:5b:e9:da: b1:2e:c7:8b:fb:7a:96:a2:cf:26:c0:87:81:7c:4e:90:c2:84: b2:c3:44:fd:4f:9c:ca:85:f2:c6:95:a0:9d:cd:c4:cc:81:8d: 38:5a:31:41:21:8e:5a:72:4f:d8:bd:51:9f:a9:c3:c7:07:fb: 9b:9b:aa:f6:b2:f8:d2:7f:59:f6:8b:ac:93:dc:4b:4f:2b:7f: 62:62:e8:4e:1e:cb:78:a5:ee:09:53:d8:eb:1c:2e:44:b8:4e: 2b:47:7b:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjLCKDiCUbGyDWAgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDIwNjEzMzMyMloXDTI1MDUwNzEyMzMyMlowLzEtMCsGA1UEAxMk N2U3N2E3NjUtYzNjNi00MDc5LThhNDAtNTk0YjY1MWRiZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWtwn95b5somqBQ9penHb1roiZ2vnfZaB7SI LCeQMXRRIi46HbFQ/UOagyQvSyBg31IgdFgWe6mCUn5MhGzrJXwSgCnLB4uz29v3 +MgLPmQcVtzz7G1FAgf7eeX4iF2yzWs0I32nxlChbX8GS+Yx4u+IQZkq4ptIhCoZ 79m6Ch8KyBuCUGdQhvq9fHx3RYKxWCIEBXh4qR89A8GuhdOj9JGIjUUkwBkXmWh3 i3RM/FYOMICRyCbFQodGUKXReHAfAaRkrpuDUn7KhjFcwi1KopmDKZMsHtYG763P 0lr9QkpH8rKwk5CFyBhv96LNTkZKtj+SWc6DN6NtkLoAXLelMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGavoxAily3z7FgYXSF4gb5cVNaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEwOTdkZGUtNDQyYi0z YWU0LTk1YjAtMzA1OTE5NzY0ODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAI0yuQ/FXkfE0UmXhKiJ4NpyUV7kOdt9C1TR16AaXLrd+RcdbGJ1e0 Rq07nAzLZvj/oaysuB2LzkvGqIwB5pOsVMPqWwmeyOGMTKkvMC76YNu8qTlyNKCJ nrt1WzBA4dQlDVkSrhBko0g9Gn5yFqoDZcVmRBkgfkR0M/JjNkjGkrrQ03bypLrg wEU7g5SIL6y4dP7UbWnOjxxebuoCHaVb6dqxLseL+3qWos8mwIeBfE6QwoSyw0T9 T5zKhfLGlaCdzcTMgY04WjFBIY5ack/YvVGfqcPHB/ubm6r2svjSf1n2i6yT3EtP K39iYuhOHst4pe4JU9jrHC5EuE4rR3vk -----END CERTIFICATE-----Generated at Fri Apr 11 22:42:01 2025 by rpki-client