$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7f9ac66-7efa-358e-9ea0-6478512f89f4.roa File: f7f9ac66-7efa-358e-9ea0-6478512f89f4.roa (raw, json) Hash identifier: VnruSBj11yD63oLaY46t8LR16AnH/qSmQKVi5jiMtLg= Subject key identifier: F0:B4:69:7E:A7:39:1F:FA:4C:27:4F:BD:42:71:30:AB:60:FF:C4:74 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584964845A63C9570CC351F13780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7f9ac66-7efa-358e-9ea0-6478512f89f4.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 397207 IP address blocks: 192.42.175.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:5a:63:c9:57:0c:c3:51:f1:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=72b72024-af6b-44f2-9300-cbeea3c818fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:15:b2:23:a0:32:85:41:ae:b9:5a:26:83:70: cf:aa:53:84:5b:a3:04:d7:29:f6:bf:dd:c8:63:15: 8d:d3:5c:e9:2e:1d:8a:09:b3:f6:6b:88:5c:f7:89: 39:fd:4b:3a:1f:00:d7:0f:67:53:3d:60:06:c8:94: d4:2c:86:51:02:77:34:aa:0d:0b:66:c8:38:4d:24: 18:eb:84:51:7a:23:12:0f:83:b0:f5:4b:4b:42:01: 54:02:a5:25:a6:fe:ba:46:2b:fc:d7:d1:a8:82:54: f7:a8:07:f7:1c:9f:16:61:f9:f4:1b:e8:19:c5:59: 94:38:cc:87:47:1e:7c:77:d7:8a:d4:65:29:4a:f8: 9b:42:ea:03:1e:3d:6d:44:82:56:51:cc:7e:d1:5b: f1:8b:d0:bc:1d:9e:1a:b5:f9:65:c2:11:a2:c5:68: 6d:d0:46:94:f7:bc:7c:74:4c:e7:b3:07:df:40:5a: a7:ff:64:71:b8:9a:78:14:85:28:a9:1e:11:5f:b3: 64:dd:12:22:6f:87:f0:8a:d3:17:80:5e:05:8d:19: 3a:3c:c6:a8:38:4c:d5:a3:00:18:e2:e2:36:df:3f: 19:09:cb:e9:2b:46:df:da:fd:2a:c8:e7:5e:41:e8: d8:ad:c4:22:71:05:02:8c:1d:05:a1:9a:71:9f:b0: 25:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B4:69:7E:A7:39:1F:FA:4C:27:4F:BD:42:71:30:AB:60:FF:C4:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7f9ac66-7efa-358e-9ea0-6478512f89f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:d1:96:66:70:5b:77:03:37:d6:5d:09:f1:70:af:e7:39:08: e9:bd:85:3f:39:0e:c3:08:dd:d2:c9:6c:c5:43:a9:ab:16:4c: e2:73:07:85:fb:02:81:51:59:64:04:0a:e7:23:80:e2:cc:c1: 76:ab:4b:5e:ab:fd:32:63:e7:bb:85:5f:12:59:31:9d:93:89: e6:fd:43:e7:c9:48:94:a9:f8:29:40:39:60:fe:df:1f:84:bf: ce:00:f6:3c:ab:a5:ba:06:ed:f3:c7:5d:08:76:33:f4:06:6b: 39:23:4a:7c:48:92:38:7b:0a:88:ab:c7:37:da:ca:5d:42:1e: f8:99:99:1d:cd:d6:57:9b:70:fe:f8:b6:38:7f:0b:44:81:45: 79:4c:27:05:4e:10:94:77:eb:7d:a4:24:7b:2e:13:50:98:00: bf:da:aa:76:e0:04:0f:67:87:7a:48:1f:95:1e:75:70:ad:bd: e9:c8:05:2e:b3:2d:83:de:a6:d6:64:91:04:e1:80:02:90:0a: 7c:4e:1e:e9:e4:70:ef:80:aa:cb:b1:3b:59:0a:cc:76:38:0d: 72:d0:d8:75:a8:3f:7e:1e:96:dd:3e:aa:76:d0:3b:9e:81:90: 81:59:05:99:16:96:04:34:86:aa:06:b8:da:09:69:37:06:fd: 00:9c:37:ab -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElkhFpjyVcMw1HxN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk NzJiNzIwMjQtYWY2Yi00NGYyLTkzMDAtY2JlZWEzYzgxOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhWyI6AyhUGuuVomg3DPqlOEW6ME1yn2v93I YxWN01zpLh2KCbP2a4hc94k5/Us6HwDXD2dTPWAGyJTULIZRAnc0qg0LZsg4TSQY 64RReiMSD4Ow9UtLQgFUAqUlpv66Riv819GoglT3qAf3HJ8WYfn0G+gZxVmUOMyH Rx58d9eK1GUpSvibQuoDHj1tRIJWUcx+0Vvxi9C8HZ4atfllwhGixWht0EaU97x8 dEznswffQFqn/2RxuJp4FIUoqR4RX7Nk3RIib4fwitMXgF4FjRk6PMaoOEzVowAY 4uI23z8ZCcvpK0bf2v0qyOdeQejYrcQicQUCjB0FoZpxn7AlIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPC0aX6nOR/6TCdPvUJxMKtg/8R0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjdmOWFjNjYtN2VmYS0z NThlLTllYTAtNjQ3ODUxMmY4OWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC70ZZmcFt3AzfWXQnxcK/nOQjpvYU/OQ7DCN3SyWzFQ6mrFkzicweF +wKBUVlkBArnI4DizMF2q0teq/0yY+e7hV8SWTGdk4nm/UPnyUiUqfgpQDlg/t8f hL/OAPY8q6W6Bu3zx10IdjP0Bms5I0p8SJI4ewqIq8c32spdQh74mZkdzdZXm3D+ +LY4fwtEgUV5TCcFThCUd+t9pCR7LhNQmAC/2qp24AQPZ4d6SB+VHnVwrb3pyAUu sy2D3qbWZJEE4YACkAp8Th7p5HDvgKrLsTtZCsx2OA1y0Nh1qD9+HpbdPqp20Due gZCBWQWZFpYENIaqBrjaCWk3Bv0AnDer -----END CERTIFICATE-----Generated at Fri Apr 11 23:18:51 2025 by rpki-client