$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b18c1b-4136-3074-a40c-b0c2d8b297ab.roa File: 21b18c1b-4136-3074-a40c-b0c2d8b297ab.roa (raw, json) Hash identifier: KJZxLzS+xmA+x9Xyt2nfagfovUTiSV8vB12o6NGKEsM= Subject key identifier: DE:47:C5:51:A5:4E:3F:BC:7A:C6:6B:D4:25:92:36:3F:52:19:9A:EB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584996C4A4260CA9E970E4D3C180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b18c1b-4136-3074-a40c-b0c2d8b297ab.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 396566 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:a4:26:0c:a9:e9:70:e4:d3:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=cddb68a3-9e16-4127-adf0-ad737ca0e783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:b0:f6:3d:8a:99:b8:7e:46:70:31:18:db: 6c:42:ef:2c:ba:b2:cb:d2:09:da:b9:27:de:07:e8: c1:1a:b8:83:8e:95:f6:88:22:ab:b1:08:35:27:d8: cb:ea:6e:98:e7:b8:c4:26:9f:73:89:6b:f6:a2:35: 7e:78:56:41:d0:82:af:69:40:2d:a9:75:fb:e3:ea: f1:da:0a:0d:b6:36:dc:e2:34:6f:2d:de:29:d8:7e: 97:7b:47:ef:e5:37:4c:5f:5e:4d:9a:9b:4e:30:8b: 3d:8c:e7:ad:7a:99:5a:11:fe:f3:03:28:cf:ab:61: 35:f1:f9:32:02:bf:29:07:ca:a5:b7:9c:47:d8:77: 6b:fc:9d:71:29:33:99:0a:38:09:ef:64:c9:43:52: 3a:ea:38:5b:14:06:db:04:d0:8b:98:b0:c3:a2:b2: 5e:54:9f:3f:35:64:a9:9f:9e:57:bf:07:c3:4a:cc: f8:9c:b5:10:7e:66:a5:74:d2:fd:ac:06:7c:2c:36: f1:0a:ea:d3:fe:b4:7e:ca:01:80:24:54:19:38:04: fc:c2:b4:17:9b:1f:79:e7:06:76:e5:38:9e:20:d1: 65:25:02:2d:1a:17:49:31:2a:ef:a4:f9:d5:a7:81: c9:2f:55:db:97:e4:4c:db:82:ff:be:64:63:d2:e0: 70:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:47:C5:51:A5:4E:3F:BC:7A:C6:6B:D4:25:92:36:3F:52:19:9A:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b18c1b-4136-3074-a40c-b0c2d8b297ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:77:05:d1:d0:92:f1:4c:3b:b7:78:61:15:23:7b:64:ee:03: 39:eb:65:5d:7e:b7:7c:18:eb:6a:ee:ad:7b:27:61:7d:18:9d: 56:54:1d:f5:c7:81:89:83:5a:1b:76:10:74:7a:51:07:53:29: 13:20:b5:6d:6f:57:04:ba:f7:70:66:dc:e9:f7:7f:06:18:9c: bd:cb:0a:54:ec:c6:01:56:0c:ef:b7:e5:68:7b:95:40:24:5f: e8:25:0f:49:ea:50:23:d3:95:5d:99:36:78:77:4a:23:ba:62: 19:e7:39:99:58:16:94:bb:dc:af:63:d3:2c:f2:b5:54:a9:73: f0:8c:61:f0:28:98:cc:1a:f0:76:92:76:7c:92:d4:54:af:56: b8:95:bc:7f:92:7e:bb:92:10:f5:e1:70:d2:29:cb:97:0e:b4: 36:ff:ca:85:4f:d8:a6:ca:db:a3:14:92:14:5a:4f:98:e1:1f: 0e:f7:d0:d8:d8:46:d6:38:3c:15:f0:b0:ed:3e:61:ee:2f:0a: 07:a9:3b:36:d6:62:ad:1a:f0:4a:b6:06:a8:a1:1b:4a:16:bd: 0b:8d:99:18:2a:2a:d8:1f:df:25:59:a3:df:4d:13:94:3e:d7: d1:5c:6f:47:2f:9f:32:0d:05:00:8d:d7:fa:3f:21:67:d7:cc: db:d4:3f:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmWxKQmDKnpcOTTwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk Y2RkYjY4YTMtOWUxNi00MTI3LWFkZjAtYWQ3MzdjYTBlNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb2w9j2Kmbh+RnAxGNtsQu8surLL0gnauSfe B+jBGriDjpX2iCKrsQg1J9jL6m6Y57jEJp9ziWv2ojV+eFZB0IKvaUAtqXX74+rx 2goNtjbc4jRvLd4p2H6Xe0fv5TdMX15NmptOMIs9jOeteplaEf7zAyjPq2E18fky Ar8pB8qlt5xH2Hdr/J1xKTOZCjgJ72TJQ1I66jhbFAbbBNCLmLDDorJeVJ8/NWSp n55XvwfDSsz4nLUQfmaldNL9rAZ8LDbxCurT/rR+ygGAJFQZOAT8wrQXmx955wZ2 5TieINFlJQItGhdJMSrvpPnVp4HJL1Xbl+RM24L/vmRj0uBwgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN5HxVGlTj+8esZr1CWSNj9SGZrrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFiMThjMWItNDEzNi0z MDc0LWE0MGMtYjBjMmQ4YjI5N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAKdwXR0JLxTDu3eGEVI3tk7gM562Vdfrd8GOtq7q17J2F9GJ1WVB31 x4GJg1obdhB0elEHUykTILVtb1cEuvdwZtzp938GGJy9ywpU7MYBVgzvt+Voe5VA JF/oJQ9J6lAj05VdmTZ4d0ojumIZ5zmZWBaUu9yvY9Ms8rVUqXPwjGHwKJjMGvB2 knZ8ktRUr1a4lbx/kn67khD14XDSKcuXDrQ2/8qFT9imytujFJIUWk+Y4R8O99DY 2EbWODwV8LDtPmHuLwoHqTs21mKtGvBKtgaooRtKFr0LjZkYKirYH98lWaPfTROU PtfRXG9HL58yDQUAjdf6PyFn18zb1D9D -----END CERTIFICATE-----Generated at Sun Apr 27 23:55:40 2025 by rpki-client