$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0b0aec-5a0c-3e78-b0c4-8122a14e492a.roa File: fa0b0aec-5a0c-3e78-b0c4-8122a14e492a.roa (raw, json) Hash identifier: E+jQqSnE66NlHKfmjMsISMlxHInBi8Jq6+TCc2NtVqw= Subject key identifier: 66:4C:FA:4F:FB:D4:E2:EC:B2:86:FC:F0:FC:71:62:2C:07:47:1B:74 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A0C09168B2FE1B7A1C08A5680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0b0aec-5a0c-3e78-b0c4-8122a14e492a.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 36623 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:09:16:8b:2f:e1:b7:a1:c0:8a:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=5ca5bd49-a12d-4458-899a-6c1ff855d300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:61:38:68:c4:f4:4b:c4:b2:a6:5c:87:a6:2c: 48:56:76:a9:e7:43:00:b6:db:4b:be:6f:67:17:69: 64:bb:e0:79:05:06:89:f7:9b:09:e6:54:92:3d:4a: f0:bc:3d:de:c1:48:87:cb:17:f9:3e:9f:74:a3:53: 97:31:91:71:68:41:e1:56:4b:2c:1b:da:2c:11:9a: 31:e6:de:b0:ab:8c:df:bc:3b:53:8f:a7:e2:b8:00: 6d:3f:11:86:a3:42:cd:09:87:e9:ac:33:e6:6b:5c: 83:a0:09:13:d0:74:64:a6:1d:64:29:5f:21:3e:d1: fd:ad:9d:c3:ea:62:cc:4a:7b:1c:f3:2f:d1:2e:e4: 4f:65:db:0b:48:13:1f:5c:b3:e4:df:f2:74:67:03: 37:72:8e:8a:a9:92:09:77:83:4e:1b:62:05:15:57: 3c:56:8e:14:8c:e0:9d:21:db:62:55:6a:96:b1:79: ea:85:32:7a:26:ec:47:1a:3e:ee:6d:c0:c2:be:7e: 23:79:fa:32:8c:61:fa:b1:ec:97:fc:60:ff:8e:a7: ed:a4:f0:04:bf:be:57:c1:ce:79:6a:f2:bc:02:eb: f4:2e:7d:ea:9a:6c:b7:a0:65:32:ba:da:62:e0:ff: f0:81:a0:38:dd:22:2d:93:52:36:f0:80:23:5b:cd: 69:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4C:FA:4F:FB:D4:E2:EC:B2:86:FC:F0:FC:71:62:2C:07:47:1B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0b0aec-5a0c-3e78-b0c4-8122a14e492a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d9:96:e7:da:13:58:fa:ac:cc:31:a3:3d:6d:d8:5e:7f:8a: 6c:a3:1e:8d:9b:99:98:24:32:08:ad:57:70:a7:26:da:13:90: 6a:82:f9:07:71:57:7e:aa:04:04:08:88:fa:51:7f:bb:fd:ad: 41:dc:4e:9b:d3:56:1d:06:a8:58:17:9b:5d:52:ac:ad:b0:45: e6:ca:1d:fd:c0:74:a5:4d:5e:29:5d:45:46:ff:60:4b:17:f6: 59:f5:60:ec:d2:81:a1:03:01:97:07:11:b2:5f:c7:fb:6d:7f: 54:9d:b3:c9:fd:46:4b:0e:62:b4:8c:19:3b:6a:7f:02:90:83: 11:37:34:fc:68:2d:17:60:1c:ef:7d:9e:f7:26:c6:a9:68:01: b0:c1:df:2f:11:56:cf:70:bf:aa:12:e9:24:f9:14:b2:c9:3d: 0b:c6:8a:d5:57:6a:52:b8:e5:bf:4e:7f:11:8a:58:d8:df:3e: cf:00:09:a3:0d:23:57:ed:7e:c4:66:91:c0:81:04:cf:f7:38: 01:37:09:e3:c4:bf:ca:75:cb:22:d4:68:d1:c4:f3:9a:75:23: f4:c3:97:96:ef:38:9d:2f:44:48:78:49:8d:26:d8:ab:65:30: 0e:39:e6:f8:d1:0c:03:79:55:12:2b:d3:2c:5b:e7:ee:a2:84: 5f:71:09:3a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoMCRaLL+G3ocCKVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NWNhNWJkNDktYTEyZC00NDU4LTg5OWEtNmMxZmY4NTVkMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGE4aMT0S8SyplyHpixIVnap50MAtttLvm9n F2lku+B5BQaJ95sJ5lSSPUrwvD3ewUiHyxf5Pp90o1OXMZFxaEHhVkssG9osEZox 5t6wq4zfvDtTj6fiuABtPxGGo0LNCYfprDPma1yDoAkT0HRkph1kKV8hPtH9rZ3D 6mLMSnsc8y/RLuRPZdsLSBMfXLPk3/J0ZwM3co6KqZIJd4NOG2IFFVc8Vo4UjOCd IdtiVWqWsXnqhTJ6JuxHGj7ubcDCvn4jefoyjGH6seyX/GD/jqftpPAEv75Xwc55 avK8Auv0Ln3qmmy3oGUyutpi4P/wgaA43SItk1I28IAjW81pAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGZM+k/71OLssob88PxxYiwHRxt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmEwYjBhZWMtNWEwYy0z ZTc4LWIwYzQtODEyMmExNGU0OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAp2Zbn2hNY+qzMMaM9bdhef4psox6Nm5mYJDIIrVdwpybaE5BqgvkH cVd+qgQECIj6UX+7/a1B3E6b01YdBqhYF5tdUqytsEXmyh39wHSlTV4pXUVG/2BL F/ZZ9WDs0oGhAwGXBxGyX8f7bX9UnbPJ/UZLDmK0jBk7an8CkIMRNzT8aC0XYBzv fZ73JsapaAGwwd8vEVbPcL+qEukk+RSyyT0LxorVV2pSuOW/Tn8RiljY3z7PAAmj DSNX7X7EZpHAgQTP9zgBNwnjxL/Kdcsi1GjRxPOadSP0w5eW7zidL0RIeEmNJtir ZTAOOeb40QwDeVUSK9MsW+fuooRfcQk6 -----END CERTIFICATE-----Generated at Fri Jun 6 19:33:23 2025 by rpki-client