$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa File: f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa (raw, json) Hash identifier: mMhj1Lxl6IoGe19tBEuoQYOhfb7AGu7JSGrDRAzFveA= Subject key identifier: 67:F4:CD:4A:57:54:AA:CE:E4:21:80:A6:7E:C0:15:E8:BD:EE:B6:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849FF758D3FB628BEA5227E7100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 36621 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:8d:3f:b6:28:be:a5:22:7e:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=0841765a-a95c-4989-bd82-519b190445a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:da:56:5a:2c:dd:8c:a8:c1:a9:0c:cc:46: f7:77:a2:62:c4:db:ce:8c:d9:16:07:d7:c8:5d:55: cb:61:ce:d3:91:f3:50:b9:24:65:dd:d2:1c:03:72: c8:62:82:35:0b:b7:ee:2b:e8:37:47:57:b7:67:fd: c8:ea:5f:e5:93:ce:f4:ea:51:48:e2:60:56:79:14: a7:dc:15:46:21:94:72:94:3d:ff:52:b2:7e:59:3f: b9:62:d3:e7:f1:49:34:1f:10:b1:3e:73:c2:2a:22: a6:78:d9:29:51:9e:6f:68:da:07:89:08:0d:77:63: d2:85:93:68:5c:22:a2:3f:50:4a:79:89:b8:ca:08: 65:e5:91:d9:d5:e5:80:13:a1:a1:38:20:23:6c:40: 70:eb:cd:05:61:f3:83:c7:83:fd:df:b5:d9:d7:c3: 0a:4f:88:66:07:18:ac:ac:46:1b:93:28:df:fa:d7: c2:3b:c7:74:83:d9:6f:f0:b5:07:38:52:b8:62:e5: ea:0a:8a:cb:87:82:bf:7f:01:7c:e2:80:2f:a3:5b: 24:ef:b6:d5:88:99:16:b1:86:f6:fc:fd:a8:e5:cb: 39:64:9f:cf:10:9b:de:74:1c:f8:03:46:5c:43:c8: ae:18:75:56:00:df:3b:a5:77:f0:18:7b:2d:19:d7: e3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F4:CD:4A:57:54:AA:CE:E4:21:80:A6:7E:C0:15:E8:BD:EE:B6:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ac:fc:07:59:14:87:73:b3:d9:5b:1d:a7:0a:67:7e:a4:5c: 69:16:50:51:3a:bc:3b:26:73:c1:5a:6f:a1:34:69:99:f2:d7: b0:7d:48:22:2d:3b:7d:07:ec:8e:80:4e:51:14:10:c6:5e:1d: 80:a1:81:fe:24:25:2f:c2:3d:f6:dc:19:b4:fe:2c:b8:29:40: de:ad:41:a3:e1:24:d0:70:cb:fc:53:e7:4c:6e:12:f9:28:aa: a8:42:3f:15:62:ee:80:49:8b:64:00:67:8a:df:52:86:8f:35: 1c:5f:8e:11:f3:9b:4c:5b:ea:85:66:b2:03:ae:4b:b3:c6:b3: f8:f4:97:1c:73:58:2c:ac:06:b0:09:98:d1:25:71:8c:82:59: 0c:c6:0b:50:64:aa:3b:36:e7:11:47:0e:ca:92:11:85:26:83: fc:0d:14:9d:d9:ef:0b:42:c2:8f:af:be:43:b3:a9:e5:68:46: 6c:8d:ab:14:46:ba:74:ad:ad:ad:71:68:6f:a3:3a:cd:d6:36: b7:35:0b:c0:2e:87:ad:65:41:73:85:70:ba:c0:38:79:df:b7: 51:f2:ca:3a:49:a7:96:65:18:15:db:48:50:fc:af:dd:96:9d: d6:6d:be:dc:49:55:e2:3d:7a:ce:a8:b3:6b:bc:45:3d:28:20: 8a:96:cf:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn/dY0/tii+pSJ+cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk MDg0MTc2NWEtYTk1Yy00OTg5LWJkODItNTE5YjE5MDQ0NWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0PaVlos3YyowakMzEb3d6JixNvOjNkWB9fI XVXLYc7TkfNQuSRl3dIcA3LIYoI1C7fuK+g3R1e3Z/3I6l/lk8706lFI4mBWeRSn 3BVGIZRylD3/UrJ+WT+5YtPn8Uk0HxCxPnPCKiKmeNkpUZ5vaNoHiQgNd2PShZNo XCKiP1BKeYm4yghl5ZHZ1eWAE6GhOCAjbEBw680FYfODx4P937XZ18MKT4hmBxis rEYbkyjf+tfCO8d0g9lv8LUHOFK4YuXqCorLh4K/fwF84oAvo1sk77bViJkWsYb2 /P2o5cs5ZJ/PEJvedBz4A0ZcQ8iuGHVWAN87pXfwGHstGdfjtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGf0zUpXVKrO5CGApn7AFei97rYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjA0ZjM5MzUtNTVhMS0z MGM4LWI2MWYtOWIyMWE1Y2ZhOTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCHrPwHWRSHc7PZWx2nCmd+pFxpFlBROrw7JnPBWm+hNGmZ8tewfUgi LTt9B+yOgE5RFBDGXh2AoYH+JCUvwj323Bm0/iy4KUDerUGj4STQcMv8U+dMbhL5 KKqoQj8VYu6ASYtkAGeK31KGjzUcX44R85tMW+qFZrIDrkuzxrP49Jccc1gsrAaw CZjRJXGMglkMxgtQZKo7NucRRw7KkhGFJoP8DRSd2e8LQsKPr75Ds6nlaEZsjasU Rrp0ra2tcWhvozrN1ja3NQvALoetZUFzhXC6wDh537dR8so6SaeWZRgV20hQ/K/d lp3Wbb7cSVXiPXrOqLNrvEU9KCCKls89 -----END CERTIFICATE-----Generated at Fri Jun 6 19:38:42 2025 by rpki-client