$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc7a9908-f092-3c01-a8a5-53d0b5959127.roa File: cc7a9908-f092-3c01-a8a5-53d0b5959127.roa (raw, json) Hash identifier: CWxHsw+BPl2YYEfHZKJST8O67t25P5bvvuLXRk6CI4g= Subject key identifier: 0A:70:2F:9A:9A:A0:3C:E3:8E:ED:48:44:A6:BC:C1:6F:BF:21:4C:DD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848B4C0F07E9A08594183F60480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc7a9908-f092-3c01-a8a5-53d0b5959127.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 40717 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f0:7e:9a:08:59:41:83:f6:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=79787231-4ca1-462c-bb85-2b7be8dc9862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ff:44:d0:0b:32:cf:96:f1:c5:a9:ad:6e:a5: 2f:86:af:87:28:44:d5:9c:da:33:4c:a5:45:aa:c8: 49:e2:58:1e:eb:c7:06:bf:d6:d2:6e:d9:44:eb:1c: a8:82:8c:1c:0c:51:54:93:76:9c:ff:cd:42:ca:0d: d7:11:1d:7c:f6:e1:7e:a9:09:fb:94:bb:50:b4:5e: e6:08:40:44:60:87:e4:59:68:65:e8:03:ec:d3:d5: a7:ea:83:34:87:47:da:4a:12:02:a4:a1:e1:0b:7a: 75:07:5a:6e:8d:c1:ca:23:f9:c7:c3:b6:9b:4e:7f: 17:1b:49:d7:7d:8d:ef:54:be:1b:b6:ad:59:da:15: ed:e3:47:db:af:cd:69:fe:cf:3f:19:b1:4b:63:7f: 76:62:8a:c8:55:7a:7e:92:f6:25:52:da:9c:93:35: 2d:80:67:8b:9f:32:58:28:05:f0:60:f2:96:d2:3b: 22:83:c2:e2:59:04:d3:c3:d6:5d:af:50:96:0a:b9: 8b:c8:da:03:3c:7c:83:ec:d6:7a:25:8f:2c:92:c6: b5:9e:3b:db:89:32:d4:44:43:63:26:b9:30:be:a0: b4:5d:3a:09:e0:56:df:96:06:5d:f0:82:83:46:db: 8b:29:6a:50:66:ff:ce:6f:69:f6:b2:b0:42:d8:e3: 67:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:70:2F:9A:9A:A0:3C:E3:8E:ED:48:44:A6:BC:C1:6F:BF:21:4C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc7a9908-f092-3c01-a8a5-53d0b5959127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e3:ce:a1:12:3f:03:47:86:b9:be:95:76:28:4b:d4:4c:bc: 18:8e:b5:37:12:b8:09:9d:04:6e:6a:ec:ea:88:9d:ee:0e:5e: bf:b7:8a:78:a5:ee:ad:9d:db:65:bf:af:2b:ae:64:07:75:2b: ac:74:ff:ee:44:b6:11:64:2e:63:71:42:cf:1c:46:1c:da:05: 42:46:60:15:d0:9d:9e:aa:66:47:2a:04:57:d2:84:1c:27:f0: a5:77:91:9d:0d:79:cc:e2:aa:a4:70:d6:af:68:c6:7e:79:07: 51:df:a2:c7:b8:aa:92:cb:90:b7:27:4b:55:83:73:cc:f1:4e: 96:69:2c:0f:e8:11:56:50:5d:33:c2:3b:ff:c1:a4:af:44:20: 39:05:13:c1:c3:17:44:d2:0d:05:44:dd:69:2a:7e:27:96:7b: 00:5b:85:77:df:d3:3e:e7:e7:8f:87:58:a7:10:46:6d:2f:89: 14:c5:df:19:6e:9f:70:6d:c6:4b:f3:18:0d:76:8c:6d:9b:c3: 0c:ed:39:a8:50:cf:72:d3:d8:e2:20:cc:0c:2c:7b:a3:7f:d6: e9:3e:89:b0:fc:bc:13:e1:1e:3a:54:27:2d:9c:c4:ea:76:ea: fe:20:6b:84:ae:1e:74:dd:b6:4b:11:d9:8a:e6:1e:77:14:2c: fb:34:5b:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi0wPB+mghZQYP2BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk Nzk3ODcyMzEtNGNhMS00NjJjLWJiODUtMmI3YmU4ZGM5ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f9E0Asyz5bxxamtbqUvhq+HKETVnNozTKVF qshJ4lge68cGv9bSbtlE6xyogowcDFFUk3ac/81Cyg3XER189uF+qQn7lLtQtF7m CEBEYIfkWWhl6APs09Wn6oM0h0faShICpKHhC3p1B1pujcHKI/nHw7abTn8XG0nX fY3vVL4btq1Z2hXt40fbr81p/s8/GbFLY392YorIVXp+kvYlUtqckzUtgGeLnzJY KAXwYPKW0jsig8LiWQTTw9Zdr1CWCrmLyNoDPHyD7NZ6JY8sksa1njvbiTLURENj JrkwvqC0XToJ4FbflgZd8IKDRtuLKWpQZv/Ob2n2srBC2ONnjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFApwL5qaoDzjju1IRKa8wW+/IUzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2M3YTk5MDgtZjA5Mi0z YzAxLWE4YTUtNTNkMGI1OTU5MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJ486hEj8DR4a5vpV2KEvUTLwYjrU3ErgJnQRuauzqiJ3uDl6/t4p4 pe6tndtlv68rrmQHdSusdP/uRLYRZC5jcULPHEYc2gVCRmAV0J2eqmZHKgRX0oQc J/Cld5GdDXnM4qqkcNavaMZ+eQdR36LHuKqSy5C3J0tVg3PM8U6WaSwP6BFWUF0z wjv/waSvRCA5BRPBwxdE0g0FRN1pKn4nlnsAW4V339M+5+ePh1inEEZtL4kUxd8Z bp9wbcZL8xgNdoxtm8MM7TmoUM9y09jiIMwMLHujf9bpPomw/LwT4R46VCctnMTq dur+IGuErh503bZLEdmK5h53FCz7NFu/ -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:00 2025 by rpki-client