$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d06aeca5-d1b7-3294-9009-61b0a4ae8e1f.roa File: d06aeca5-d1b7-3294-9009-61b0a4ae8e1f.roa (raw, json) Hash identifier: 1CEvyh2LK/dGrY3N86VM2JQsmG7S63US17RWrZ31eHo= Subject key identifier: 7A:CB:EF:11:F6:A7:C6:17:9D:91:1A:56:EF:75:C2:93:8E:93:43:B8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849797447DE61AFCEB48D6240C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d06aeca5-d1b7-3294-9009-61b0a4ae8e1f.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 36626 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:47:de:61:af:ce:b4:8d:62:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=0aa84b91-45da-4da5-bea7-2d7294187dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7e:1a:a6:fb:85:e2:3a:cb:7c:f7:06:ee:87: f0:d0:12:24:c7:6f:41:54:48:43:e0:07:e9:f9:1b: a3:35:55:55:8f:77:76:9d:b9:2b:88:c0:97:9a:cb: 6d:11:ac:f3:a8:b3:0b:a5:f7:f6:2c:b3:a4:79:fd: 45:a6:15:c1:52:f4:91:7c:3c:a1:35:2d:ae:87:67: e4:73:69:52:8e:bc:a9:c2:e3:0b:2d:01:a1:95:16: e9:f4:d8:85:b2:75:0f:ff:12:d1:b8:c7:74:ae:ef: 76:1d:fc:bb:86:e2:7c:53:33:16:d2:fe:59:95:54: c4:39:d2:fb:b4:d9:c9:91:9c:87:dc:b9:5e:0d:ee: ad:e7:00:d8:58:e2:5b:ad:95:e4:3f:c9:f3:85:17: f7:cb:64:cb:df:6a:0c:d2:a4:80:c9:0d:9b:17:93: 09:2e:aa:53:89:e4:3a:b7:69:ff:ac:e9:cb:e5:e4: d0:1c:68:a8:ba:d7:d8:2e:08:7f:5d:46:ee:3d:9e: 07:e2:8d:7d:a1:ec:e8:1d:12:66:97:7b:c8:3c:2e: f7:a6:ab:bd:43:a3:03:91:a2:89:06:88:97:48:e6: b7:f8:5f:9e:89:46:85:8e:37:7d:fb:9c:76:a8:f0: b3:42:30:aa:d0:a7:61:0c:e7:8f:25:aa:4e:69:23: 1c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CB:EF:11:F6:A7:C6:17:9D:91:1A:56:EF:75:C2:93:8E:93:43:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d06aeca5-d1b7-3294-9009-61b0a4ae8e1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:fa:dc:da:57:06:37:25:4b:5e:c5:ae:08:bb:21:58:c3:b7: 51:f7:f5:68:02:4e:5b:cd:85:97:fc:db:ae:aa:f2:af:83:c0: e6:e9:c2:d4:8f:ff:b6:97:c3:39:e5:52:5d:88:14:d0:ca:f3: 54:87:5b:10:c3:10:88:ff:5b:2b:ae:1f:e4:25:54:32:08:94: 11:da:b3:3b:0f:03:b9:b8:e1:b1:d1:d5:dd:02:74:38:cb:ed: 45:1c:cf:f0:3e:a8:a8:d9:ad:47:8d:5f:3a:95:c2:95:33:71: be:36:06:72:62:6c:1b:d5:db:e9:19:e1:b6:64:4d:ea:9f:54: df:eb:c5:6a:35:ff:b1:f3:fa:0b:f8:4c:f9:dd:7e:dd:e0:db: 13:6e:1b:36:c8:70:8e:c2:38:57:c2:55:7f:e0:a1:5e:3c:8b: 03:9e:06:53:5c:b4:4e:2d:ca:cd:e4:33:ff:58:df:66:38:99: 57:c3:80:99:79:48:00:17:68:6b:62:52:e5:57:5f:8b:e6:4c: 95:67:ed:78:b7:a7:5d:5f:a3:80:f2:30:2c:b2:08:0e:96:44: f5:bf:25:93:65:29:4e:31:68:0a:fb:38:fe:d6:52:59:a7:1f: 73:83:05:7a:d2:00:0c:7f:e0:0b:9c:3c:9a:0a:57:db:bf:56: f0:58:61:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl5dEfeYa/OtI1iQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk MGFhODRiOTEtNDVkYS00ZGE1LWJlYTctMmQ3Mjk0MTg3ZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n4apvuF4jrLfPcG7ofw0BIkx29BVEhD4Afp +RujNVVVj3d2nbkriMCXmsttEazzqLMLpff2LLOkef1FphXBUvSRfDyhNS2uh2fk c2lSjrypwuMLLQGhlRbp9NiFsnUP/xLRuMd0ru92Hfy7huJ8UzMW0v5ZlVTEOdL7 tNnJkZyH3LleDe6t5wDYWOJbrZXkP8nzhRf3y2TL32oM0qSAyQ2bF5MJLqpTieQ6 t2n/rOnL5eTQHGioutfYLgh/XUbuPZ4H4o19oezoHRJml3vIPC73pqu9Q6MDkaKJ BoiXSOa3+F+eiUaFjjd9+5x2qPCzQjCq0KdhDOePJapOaSMcbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHrL7xH2p8YXnZEaVu91wpOOk0O4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDA2YWVjYTUtZDFiNy0z Mjk0LTkwMDktNjFiMGE0YWU4ZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC4+tzaVwY3JUtexa4IuyFYw7dR9/VoAk5bzYWX/NuuqvKvg8Dm6cLU j/+2l8M55VJdiBTQyvNUh1sQwxCI/1srrh/kJVQyCJQR2rM7DwO5uOGx0dXdAnQ4 y+1FHM/wPqio2a1HjV86lcKVM3G+NgZyYmwb1dvpGeG2ZE3qn1Tf68VqNf+x8/oL +Ez53X7d4NsTbhs2yHCOwjhXwlV/4KFePIsDngZTXLROLcrN5DP/WN9mOJlXw4CZ eUgAF2hrYlLlV1+L5kyVZ+14t6ddX6OA8jAssggOlkT1vyWTZSlOMWgK+zj+1lJZ px9zgwV60gAMf+ALnDyaClfbv1bwWGE5 -----END CERTIFICATE-----Generated at Fri Apr 11 23:55:22 2025 by rpki-client