$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bba7dd3d-c919-3738-b668-a50c0e821912.roa File: bba7dd3d-c919-3738-b668-a50c0e821912.roa (raw, json) Hash identifier: 88xLiDDpXgR4Z+4TbYwAP6NuxfVlgvQXrRNCqB0CMXo= Subject key identifier: B2:D2:BA:81:A5:E9:4C:F0:97:3A:A1:B2:0C:0C:8F:11:92:C9:81:71 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849FF758AF9FE958091AAD0C3E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bba7dd3d-c919-3738-b668-a50c0e821912.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 396608 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:8a:f9:fe:95:80:91:aa:d0:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=64bf55e5-91de-4a3d-9dc3-356869fc2fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b0:c6:db:a2:a0:11:5a:2e:66:e0:49:6f:f4: 68:48:3f:85:47:aa:a4:c5:ec:43:cf:c3:2b:6c:d1: d6:09:42:12:17:5b:47:4f:4c:37:87:ac:8f:bb:b4: 59:e7:75:7a:b3:27:d8:09:09:79:07:eb:c8:f5:8e: 4b:b7:69:48:6b:77:43:c3:f5:18:fa:26:a2:6a:8c: fd:20:bd:31:19:46:dc:68:86:20:dc:af:72:72:dd: de:35:45:49:06:44:1f:96:ef:b9:f6:fa:98:4c:73: 50:0e:78:dd:35:61:15:c7:6b:9c:96:aa:2b:94:bb: b1:ee:bd:3a:fe:65:0e:8a:44:a8:e1:7b:fb:e7:06: 95:12:86:e4:f8:5a:25:b4:34:db:17:9b:9f:5f:af: c1:19:18:bb:ac:f0:14:89:35:25:5f:e2:1c:85:1d: c6:49:3f:44:6c:86:e2:f6:a6:13:2e:35:5b:5a:d1: 2a:30:2c:74:9b:78:c4:f3:48:96:e5:ba:34:2d:1a: 20:92:e0:48:d0:ef:00:b9:8f:99:45:fc:cc:e4:b6: 78:cf:30:78:cf:ee:50:31:0f:23:76:8d:f6:db:ba: d0:81:a2:d6:46:4f:13:95:e4:92:bb:21:33:43:34: f9:ec:be:31:d0:e1:18:ec:50:ec:c0:f7:43:3e:f2: 74:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D2:BA:81:A5:E9:4C:F0:97:3A:A1:B2:0C:0C:8F:11:92:C9:81:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bba7dd3d-c919-3738-b668-a50c0e821912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:7c:a9:01:c9:bc:44:23:f3:85:27:bf:02:52:47:c6:15:58: b5:bf:62:16:b1:a6:06:5f:11:43:4d:3b:0b:c6:64:11:46:17: 44:78:1c:56:bd:32:b1:cc:4c:08:c7:e9:97:ce:43:32:36:76: 30:e4:f3:1d:b7:e5:ea:1e:2f:e3:88:b5:ea:ef:d8:c9:19:af: f7:99:ce:4c:8b:26:38:3f:b1:59:2f:09:4b:f8:e7:f4:a5:89: 78:5e:39:76:44:22:5e:aa:da:e4:68:1b:4d:34:e3:e0:16:3b: e6:5d:75:2c:e3:c7:17:36:b9:e4:e7:99:83:4a:d7:54:7e:70: f0:30:52:a3:ca:11:51:69:30:19:98:0f:50:92:4c:de:01:03: 85:fc:76:f9:d4:b4:a2:fe:40:98:ab:2a:ba:16:14:e6:8b:67: d4:4b:69:2f:a9:87:db:a5:6b:75:03:26:d3:b0:64:3f:19:ef: 3b:cf:9b:ea:ea:5b:d3:b1:25:60:c3:96:73:ec:c2:9c:db:24: 10:8a:3a:20:38:16:1a:12:e0:3e:30:e5:a6:9b:2d:0c:44:a0: f3:aa:4e:c7:50:1b:2c:16:fc:e5:42:7a:bb:bb:1a:9c:3b:b6: ad:75:0d:dd:59:f7:51:e5:54:55:0c:f6:6f:15:99:a7:94:c1: e0:a6:75:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn/dYr5/pWAkarQw+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk NjRiZjU1ZTUtOTFkZS00YTNkLTlkYzMtMzU2ODY5ZmMyZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirDG26KgEVouZuBJb/RoSD+FR6qkxexDz8Mr bNHWCUISF1tHT0w3h6yPu7RZ53V6syfYCQl5B+vI9Y5Lt2lIa3dDw/UY+iaiaoz9 IL0xGUbcaIYg3K9yct3eNUVJBkQflu+59vqYTHNQDnjdNWEVx2uclqorlLux7r06 /mUOikSo4Xv75waVEobk+FoltDTbF5ufX6/BGRi7rPAUiTUlX+IchR3GST9EbIbi 9qYTLjVbWtEqMCx0m3jE80iW5bo0LRogkuBI0O8AuY+ZRfzM5LZ4zzB4z+5QMQ8j do3227rQgaLWRk8TleSSuyEzQzT57L4x0OEY7FDswPdDPvJ0ywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLLSuoGl6UzwlzqhsgwMjxGSyYFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJhN2RkM2QtYzkxOS0z NzM4LWI2NjgtYTUwYzBlODIxOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByfKkBybxEI/OFJ78CUkfGFVi1v2IWsaYGXxFDTTsLxmQRRhdEeBxW vTKxzEwIx+mXzkMyNnYw5PMdt+XqHi/jiLXq79jJGa/3mc5MiyY4P7FZLwlL+Of0 pYl4Xjl2RCJeqtrkaBtNNOPgFjvmXXUs48cXNrnk55mDStdUfnDwMFKjyhFRaTAZ mA9QkkzeAQOF/Hb51LSi/kCYqyq6FhTmi2fUS2kvqYfbpWt1AybTsGQ/Ge87z5vq 6lvTsSVgw5Zz7MKc2yQQijogOBYaEuA+MOWmmy0MRKDzqk7HUBssFvzlQnq7uxqc O7atdQ3dWfdR5VRVDPZvFZmnlMHgpnXj -----END CERTIFICATE-----Generated at Fri Jun 6 19:40:37 2025 by rpki-client