$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1a93a92-9fd4-365f-9994-8b5379204739.roa File: f1a93a92-9fd4-365f-9994-8b5379204739.roa (raw, json) Hash identifier: dFov9zt3U+Qj0KIf5zp9t5mlr+2DMUMjyNP9a8Q4p2g= Subject key identifier: 85:1E:3B:4D:78:A0:87:E6:AE:28:63:18:20:6F:36:5D:05:FC:FB:7C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183CC589D8B7A1073B1C980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1a93a92-9fd4-365f-9994-8b5379204739.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397195 IP address blocks: 192.42.178.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:cc:58:9d:8b:7a:10:73:b1:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=decc818c-0d57-4078-b018-2861a1d5de7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:7c:5c:32:87:81:3e:29:2b:71:6c:2b:de: 72:e8:fe:ca:2c:a5:c3:21:bb:52:71:7c:01:41:1f: 58:b4:87:f2:3a:2c:d0:1c:49:06:83:45:16:72:b4: bc:ba:29:46:b5:7a:10:d7:86:2d:6e:46:62:35:19: bd:91:62:93:a0:88:45:2d:9c:06:98:6d:c6:ed:eb: cb:78:de:37:71:fc:6d:25:2d:c9:c4:a6:34:b1:45: 1e:72:17:17:ec:bc:06:41:9d:41:bb:31:89:e7:13: 7a:a3:08:d7:ff:ff:3e:ce:15:ba:dc:06:b4:91:59: b1:c1:d4:d4:27:32:21:ca:ed:0f:bf:6f:fc:2e:2c: b8:f4:01:5b:35:91:d8:29:8b:2e:3b:65:60:5a:2c: f5:ba:b8:b6:3a:a7:35:bd:d0:4f:83:01:f2:4b:c3: 57:18:96:6d:41:3f:a7:d6:a7:cf:84:d5:88:07:df: c4:93:9a:61:f4:d0:27:b8:d3:25:10:7c:d0:4c:6a: cd:0c:04:5d:bd:78:e1:ca:cc:95:2b:da:61:03:7c: 30:5e:35:f4:62:19:04:3f:a7:5f:f5:d5:aa:e3:f4: 65:23:3c:1b:46:13:13:c7:52:dd:30:dc:7f:ba:57: 58:d5:40:ee:79:0c:a1:3a:5d:ec:d6:71:09:3c:77: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1E:3B:4D:78:A0:87:E6:AE:28:63:18:20:6F:36:5D:05:FC:FB:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1a93a92-9fd4-365f-9994-8b5379204739.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.178.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:53:7c:05:f7:2e:f6:ae:3a:60:d4:cc:f6:48:a9:ae:21:1e: f7:80:4e:4b:52:a5:07:31:38:de:85:c3:fc:34:23:d1:1b:1b: 87:33:33:c7:95:c9:84:56:45:ad:a4:f1:c7:21:4d:3b:80:87: dd:e2:c6:3e:0b:55:98:a5:6e:bd:bb:31:2c:47:52:80:ca:75: dd:92:b7:54:52:ee:46:02:9a:7d:16:4b:f9:d2:9d:14:4d:95: c2:bd:75:06:95:4b:f1:d0:bb:ef:e6:94:85:81:be:31:8a:aa: d5:d5:99:ce:c8:14:d5:8d:34:7e:b7:4b:53:04:5f:24:11:6f: d9:db:1b:c9:6a:b5:09:94:2b:b2:44:ac:1b:2f:7f:96:56:0d: 92:25:3b:97:c4:9f:16:e0:00:df:8f:68:a3:04:30:4c:32:cf: cc:38:2e:99:8b:68:98:90:7b:df:fa:3f:9b:54:73:a0:26:36: b2:77:0a:3a:a2:5c:04:5e:c5:6c:89:83:82:57:7a:f0:8e:e8: a3:0d:0b:62:a7:6f:f1:97:fc:0a:2c:39:59:6d:6e:8a:e4:35: 60:34:6c:b6:1d:76:53:90:f4:6b:bc:f0:c1:df:2f:e9:72:09: fb:6a:06:55:1d:11:cb:d3:3f:39:3b:0c:f0:33:34:f8:7e:6d: f9:f5:ee:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg8xYnYt6EHOxyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZGVjYzgxOGMtMGQ1Ny00MDc4LWIwMTgtMjg2MWExZDVkZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsJ8XDKHgT4pK3FsK95y6P7KLKXDIbtScXwB QR9YtIfyOizQHEkGg0UWcrS8uilGtXoQ14YtbkZiNRm9kWKToIhFLZwGmG3G7evL eN43cfxtJS3JxKY0sUUechcX7LwGQZ1BuzGJ5xN6owjX//8+zhW63Aa0kVmxwdTU JzIhyu0Pv2/8Liy49AFbNZHYKYsuO2VgWiz1uri2Oqc1vdBPgwHyS8NXGJZtQT+n 1qfPhNWIB9/Ek5ph9NAnuNMlEHzQTGrNDARdvXjhysyVK9phA3wwXjX0YhkEP6df 9dWq4/RlIzwbRhMTx1LdMNx/uldY1UDueQyhOl3s1nEJPHcIEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIUeO014oIfmrihjGCBvNl0F/Pt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjFhOTNhOTItOWZkNC0z NjVmLTk5OTQtOGI1Mzc5MjA0NzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqyHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCaU3wF9y72rjpg1Mz2SKmuIR73gE5LUqUHMTjehcP8NCPRGxuHMzPH lcmEVkWtpPHHIU07gIfd4sY+C1WYpW69uzEsR1KAynXdkrdUUu5GApp9Fkv50p0U TZXCvXUGlUvx0Lvv5pSFgb4xiqrV1ZnOyBTVjTR+t0tTBF8kEW/Z2xvJarUJlCuy RKwbL3+WVg2SJTuXxJ8W4ADfj2ijBDBMMs/MOC6Zi2iYkHvf+j+bVHOgJjaydwo6 olwEXsVsiYOCV3rwjuijDQtip2/xl/wKLDlZbW6K5DVgNGy2HXZTkPRrvPDB3y/p cgn7agZVHRHL0z85OwzwMzT4fm359e6H -----END CERTIFICATE-----Generated at Fri Apr 11 23:20:48 2025 by rpki-client