$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa File: f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa (raw, json) Hash identifier: hfYuUEKgt7Qi4n7fhVJTwJoPS8JUbZWLucVTl//270E= Subject key identifier: 3E:0A:75:8E:FF:87:33:A8:C1:BF:DD:93:56:C7:90:D0:95:84:2A:C3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849FF7589040277453E5E2AD520 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 396603 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:89:04:02:77:45:3e:5e:2a:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=eb8f086d-dff9-48e7-9a05-88732b26c9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:2d:4b:95:dd:90:dd:96:e1:4b:4a:4d:99: 85:6c:fa:7f:d8:ca:0c:63:1e:83:5d:ab:86:76:0d: fc:aa:96:86:71:12:37:7f:10:c9:ea:0c:83:3a:d8: 76:d3:aa:99:9b:07:a1:2f:71:9a:80:6e:60:f5:91: 2c:ab:1b:9a:c2:bd:e1:f0:68:21:6e:65:9a:ce:56: 3c:fb:5d:8e:64:3b:bd:d9:e8:b9:71:9d:94:19:f9: f7:28:d8:1a:89:88:a7:99:e2:d3:3b:1a:c9:23:1b: 46:d2:da:4d:7e:9c:89:13:c8:9a:5c:39:39:76:0c: 92:73:d2:e7:50:2d:06:d0:0e:4d:98:f4:bd:3c:e1: dd:ee:5f:36:88:a9:93:2a:2e:52:d5:91:85:9f:59: d9:b6:26:b9:46:6a:00:3c:ad:19:48:a6:64:2d:10: 1f:39:81:77:39:18:4c:27:e9:f2:1e:f1:30:b2:3d: 06:80:45:40:e2:e3:21:90:d4:c0:91:42:d2:2a:85: fa:0e:26:92:fe:e3:ec:14:e4:b9:88:40:09:73:5c: b7:25:17:4a:31:6d:96:8a:bc:78:9f:bc:1e:f7:38: c7:9d:da:b7:74:67:62:50:be:ea:d3:22:1f:37:d1: 3c:f4:73:fb:8c:03:34:a5:c3:76:f1:44:3d:fd:f3: 95:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0A:75:8E:FF:87:33:A8:C1:BF:DD:93:56:C7:90:D0:95:84:2A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:10:16:7c:d7:1f:1f:fd:cc:ba:37:42:65:53:1b:e0:36:2b: c8:20:56:6d:42:8b:af:fe:c7:cf:0a:c4:c3:d0:40:63:81:7e: 87:53:31:23:d9:6f:7a:24:f9:d0:40:6c:fb:7b:b4:14:4a:3c: a5:94:5f:b4:39:85:71:ec:ce:ca:28:ab:25:92:86:bc:26:91: b3:77:37:f5:b5:cc:fe:c4:84:7a:4f:79:2f:a3:26:fc:69:a2: ae:3e:42:46:f8:d9:46:81:0c:3c:de:90:23:02:96:a4:84:08: 3d:4f:fd:8a:ee:60:4b:66:7d:72:df:df:bc:ca:7c:6d:ed:27: 54:92:38:83:77:93:b2:a5:c1:1e:aa:20:96:1a:87:f6:ae:92: 0c:9e:e6:b7:a9:8e:7a:30:90:d5:e6:b2:a4:24:f9:09:49:69: 68:87:cb:a0:08:b4:36:a0:db:0b:20:1d:a0:83:c9:9b:47:08: bf:9c:9e:d3:bf:79:6a:89:3e:4e:db:73:67:39:a8:ff:dd:46: b7:fa:ad:14:57:ee:3c:0b:b4:48:10:5f:68:2c:a8:16:b9:40: f5:fc:4b:c7:6e:28:bf:55:48:dd:b9:fe:71:d7:30:f9:c4:0b: 59:71:d1:a8:66:73:4c:73:06:eb:6c:1f:40:5a:2c:ad:d5:1d: ca:3f:ff:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn/dYkEAndFPl4q1SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk ZWI4ZjA4NmQtZGZmOS00OGU3LTlhMDUtODg3MzJiMjZjOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTctS5XdkN2W4UtKTZmFbPp/2MoMYx6DXauG dg38qpaGcRI3fxDJ6gyDOth206qZmwehL3GagG5g9ZEsqxuawr3h8GghbmWazlY8 +12OZDu92ei5cZ2UGfn3KNgaiYinmeLTOxrJIxtG0tpNfpyJE8iaXDk5dgySc9Ln UC0G0A5NmPS9POHd7l82iKmTKi5S1ZGFn1nZtia5RmoAPK0ZSKZkLRAfOYF3ORhM J+nyHvEwsj0GgEVA4uMhkNTAkULSKoX6DiaS/uPsFOS5iEAJc1y3JRdKMW2Wirx4 n7we9zjHndq3dGdiUL7q0yIfN9E89HP7jAM0pcN28UQ9/fOVIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD4KdY7/hzOowb/dk1bHkNCVhCrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjJiZWNiZGEtMDMxYi0z MTZjLTlkNzUtYmQ4YzRmNmE1N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC3EBZ81x8f/cy6N0JlUxvgNivIIFZtQouv/sfPCsTD0EBjgX6HUzEj 2W96JPnQQGz7e7QUSjyllF+0OYVx7M7KKKslkoa8JpGzdzf1tcz+xIR6T3kvoyb8 aaKuPkJG+NlGgQw83pAjApakhAg9T/2K7mBLZn1y39+8ynxt7SdUkjiDd5OypcEe qiCWGof2rpIMnua3qY56MJDV5rKkJPkJSWloh8ugCLQ2oNsLIB2gg8mbRwi/nJ7T v3lqiT5O23NnOaj/3Ua3+q0UV+48C7RIEF9oLKgWuUD1/EvHbii/VUjduf5x1zD5 xAtZcdGoZnNMcwbrbB9AWiyt1R3KP/+X -----END CERTIFICATE-----Generated at Fri Jun 6 19:29:22 2025 by rpki-client