$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0445ba-264f-3e95-8963-7b44e2dea9ed.roa File: fd0445ba-264f-3e95-8963-7b44e2dea9ed.roa (raw, json) Hash identifier: kGErpdWEcV+UfPyFTqlUd+KzBdvxesi8KVkkDxfzuYY= Subject key identifier: 5D:2B:1B:30:76:FE:1A:D4:09:D3:E7:1C:D3:2B:B0:94:40:11:9C:2F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848B7844966F76F52746C223510 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0445ba-264f-3e95-8963-7b44e2dea9ed.roa Signing time: Thu 30 Jan 2025 13:46:21 +0000 ROA not before: Thu 30 Jan 2025 13:46:21 +0000 ROA not after: Wed 30 Apr 2025 12:46:21 +0000 asID: 396564 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:84:49:66:f7:6f:52:74:6c:22:35:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 30 13:46:21 2025 GMT Not After : Apr 30 12:46:21 2025 GMT Subject: CN=521056f9-66b0-4155-bf04-838a72a1af1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:33:36:fd:3c:e3:32:56:04:c8:a3:2e:b9:8f: 5f:18:e5:dd:01:fb:47:9c:3f:8f:63:d1:9d:b4:95: 02:7e:4c:ad:44:0e:cd:16:47:b2:32:4e:ad:7c:5c: a7:42:bf:de:dd:7a:9e:ef:fd:a8:27:30:05:72:8c: 85:54:2d:fe:a9:b9:2b:42:7f:2a:b3:ee:5c:b4:67: 63:59:25:3f:69:74:d1:f2:0b:3c:b6:2e:ab:d0:3c: 98:f8:49:80:ea:d5:b1:78:ab:f8:89:e4:32:9d:3f: f1:fe:9d:34:cc:51:8a:47:a0:e5:d5:00:6b:a9:77: 70:94:49:06:14:bf:a9:64:75:4f:ce:fc:55:ed:20: bb:78:26:a8:02:f6:39:76:b5:c7:b9:fd:b7:75:cc: 71:84:b5:fc:cf:9b:0e:8b:60:0b:85:00:6b:b4:65: cb:8b:7d:10:b2:81:fd:28:98:18:ea:67:2d:60:b8: b5:2b:90:00:f6:30:bb:f6:97:08:bf:4e:eb:ad:b9: b3:d3:a7:82:7d:17:18:4a:c3:7e:5a:54:43:80:b0: 8a:72:bb:00:0f:ca:01:06:26:c5:e9:fb:34:7f:d5: 40:f4:59:06:37:89:b7:9f:14:1c:25:0e:95:62:71: a2:0f:dc:6c:d0:ec:11:9d:ba:fd:3c:a7:d7:56:7f: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2B:1B:30:76:FE:1A:D4:09:D3:E7:1C:D3:2B:B0:94:40:11:9C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0445ba-264f-3e95-8963-7b44e2dea9ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fc:e3:b3:96:86:80:df:bd:36:ba:fe:1b:ed:36:7e:62:9a: 63:b4:99:0e:d7:3e:9b:c2:1d:bc:a4:e8:4b:d8:cb:76:c7:7d: bf:78:aa:e1:b0:a5:5b:8a:d9:1a:ac:5d:f9:ff:8a:17:51:46: e8:7a:d1:3c:9d:1b:e9:18:50:3b:a0:30:1a:2b:a5:a2:dd:46: 41:46:80:ea:56:93:4a:fe:34:3f:c3:ba:21:e6:f3:4e:cf:76: de:c6:59:77:7b:6e:9d:79:6a:46:f4:cb:c9:36:c5:45:c6:45: 65:67:04:de:c2:9e:9b:15:9d:66:4b:b0:73:e4:8f:84:ac:0b: 6f:46:a4:07:4d:f8:86:16:ea:ef:8f:53:a4:75:e9:ec:87:39: 0f:f4:cf:a9:47:36:00:33:7d:c1:94:48:c0:c1:86:bb:6c:16: 63:cd:79:98:24:18:75:ff:8d:1c:70:40:c9:ac:ca:fa:1b:05: f2:b8:38:4a:ad:c7:90:4d:1f:2c:9a:f8:cd:19:8a:2e:a4:2d: 86:ed:9e:6a:b5:bf:4d:e0:b5:b7:65:41:55:03:9a:73:a0:2b: cf:3b:09:a1:32:be:6a:0f:69:03:5e:3f:54:61:3a:dd:9a:74: b5:6d:da:4b:5d:79:7e:70:1a:65:06:5a:a4:94:1b:b2:21:01: be:3f:b8:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hElm929SdGwiNRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEzMDEzNDYyMVoXDTI1MDQzMDEyNDYyMVowLzEtMCsGA1UEAxMk NTIxMDU2ZjktNjZiMC00MTU1LWJmMDQtODM4YTcyYTFhZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDM2/TzjMlYEyKMuuY9fGOXdAftHnD+PY9Gd tJUCfkytRA7NFkeyMk6tfFynQr/e3Xqe7/2oJzAFcoyFVC3+qbkrQn8qs+5ctGdj WSU/aXTR8gs8ti6r0DyY+EmA6tWxeKv4ieQynT/x/p00zFGKR6Dl1QBrqXdwlEkG FL+pZHVPzvxV7SC7eCaoAvY5drXHuf23dcxxhLX8z5sOi2ALhQBrtGXLi30QsoH9 KJgY6mctYLi1K5AA9jC79pcIv07rrbmz06eCfRcYSsN+WlRDgLCKcrsAD8oBBibF 6fs0f9VA9FkGN4m3nxQcJQ6VYnGiD9xs0OwRnbr9PKfXVn+nJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF0rGzB2/hrUCdPnHNMrsJRAEZwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmQwNDQ1YmEtMjY0Zi0z ZTk1LTg5NjMtN2I0NGUyZGVhOWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAH/OOzloaA3702uv4b7TZ+YppjtJkO1z6bwh28pOhL2Mt2x32/eKrh sKVbitkarF35/4oXUUboetE8nRvpGFA7oDAaK6Wi3UZBRoDqVpNK/jQ/w7oh5vNO z3bexll3e26deWpG9MvJNsVFxkVlZwTewp6bFZ1mS7Bz5I+ErAtvRqQHTfiGFurv j1OkdenshzkP9M+pRzYAM33BlEjAwYa7bBZjzXmYJBh1/40ccEDJrMr6GwXyuDhK rceQTR8smvjNGYoupC2G7Z5qtb9N4LW3ZUFVA5pzoCvPOwmhMr5qD2kDXj9UYTrd mnS1bdpLXXl+cBplBlqklBuyIQG+P7j/ -----END CERTIFICATE-----Generated at Sat Apr 12 01:17:17 2025 by rpki-client