$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b07d667-2b6e-388d-8129-f79cd99672da.roa File: 2b07d667-2b6e-388d-8129-f79cd99672da.roa (raw, json) Hash identifier: CxoG+ln8sS/5hjP2qpiEIJVJmNjND7aG8EOhia9GHao= Subject key identifier: EA:D9:6C:7F:53:7F:67:DC:4F:B0:EB:7D:B2:53:D4:90:6C:9C:DF:D4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584993F9FD0D208CEA10CD3DDD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b07d667-2b6e-388d-8129-f79cd99672da.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 396550 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:fd:0d:20:8c:ea:10:cd:3d:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=669ecda2-8784-4db8-88d9-bf6401b11232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:da:3a:4d:b4:af:e6:80:97:9d:2d:75:cc: 25:1d:a1:dd:09:a8:30:9e:50:df:b6:a2:b4:03:c9: 93:e8:6c:c6:e7:0c:82:e0:ff:a0:e1:a4:0e:1e:c7: 18:b2:08:4a:92:c2:9f:6b:f0:47:dd:22:69:d6:5a: 0b:63:45:4d:d2:52:a4:17:56:d5:e6:ec:cd:69:1a: 23:7d:8e:66:62:ab:4b:49:fd:fe:74:c3:ae:44:25: 5e:94:17:5f:4f:a6:8a:f5:4e:6e:17:67:1e:e8:b5: c7:9f:ea:a1:cb:41:df:35:14:32:fc:21:07:0d:7b: e9:ca:57:12:4b:e2:d1:5a:25:7c:9d:9c:68:2d:49: 11:a3:6a:56:40:84:c4:d8:f6:cc:ed:c9:cf:60:ec: d5:e2:49:00:b1:4b:52:44:64:14:7d:67:07:89:99: 8f:68:09:3c:3d:1f:00:2b:e1:61:a2:75:db:0e:f4: b5:28:89:5e:a4:38:68:79:0e:09:5b:ed:8c:90:2f: 2e:d5:4e:10:03:32:c2:a4:1d:87:13:e6:5e:1e:31: d3:23:ae:42:b1:87:55:5d:0e:de:bc:9d:95:82:31: e2:ce:3f:86:78:af:e7:da:67:41:16:bb:31:f5:db: 5a:4e:95:3b:b9:9a:7d:d0:1e:76:9d:99:5c:e5:58: 7e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D9:6C:7F:53:7F:67:DC:4F:B0:EB:7D:B2:53:D4:90:6C:9C:DF:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b07d667-2b6e-388d-8129-f79cd99672da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f4:8b:d6:23:f3:e6:4e:68:4a:e0:1f:fb:1c:79:7a:f4:4b: bb:f6:69:51:90:22:09:cc:e1:8e:89:30:67:cb:55:2e:68:f8: f9:d6:0e:19:0d:fe:29:0f:8e:44:e3:d3:78:ae:e9:3d:94:f5: 90:d3:53:b9:98:80:e2:38:c6:22:a0:7a:26:3e:7e:7a:59:88: 90:02:de:51:1e:4c:6b:50:1b:9c:6c:c5:8d:7e:a5:a8:9c:08: cc:b6:e5:cb:79:65:c7:6b:9c:ad:0a:d6:1e:fc:36:c8:6d:f4: b4:de:7a:00:88:b6:f8:e8:6d:d2:1e:6d:83:12:fc:91:2d:4b: bc:f1:9c:dd:ed:3d:59:45:dc:f5:de:15:21:02:16:3e:8b:99: e6:94:24:13:e1:a0:8c:fa:28:30:d7:06:47:5d:aa:cf:b4:e1: 37:22:dd:fa:73:49:3c:b3:94:8b:10:9e:dc:a3:be:85:d6:c8: 2d:92:42:f4:30:c8:1e:4a:76:7b:f5:19:3c:c3:42:1e:cb:6a: 82:e5:82:17:19:6c:6c:d2:cd:a5:f0:b6:d2:86:0a:f9:e4:b3: d5:6f:9d:6c:e9:0a:ab:f9:20:4c:88:45:a8:5d:7e:94:c4:33: 5f:77:a3:2b:2c:a6:26:ef:42:78:e4:62:48:32:c5:c7:83:c7: ac:b2:3b:bd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+f0NIIzqEM093QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NjY5ZWNkYTItODc4NC00ZGI4LTg4ZDktYmY2NDAxYjExMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvDaOk20r+aAl50tdcwlHaHdCagwnlDftqK0 A8mT6GzG5wyC4P+g4aQOHscYsghKksKfa/BH3SJp1loLY0VN0lKkF1bV5uzNaRoj fY5mYqtLSf3+dMOuRCVelBdfT6aK9U5uF2ce6LXHn+qhy0HfNRQy/CEHDXvpylcS S+LRWiV8nZxoLUkRo2pWQITE2PbM7cnPYOzV4kkAsUtSRGQUfWcHiZmPaAk8PR8A K+FhonXbDvS1KIlepDhoeQ4JW+2MkC8u1U4QAzLCpB2HE+ZeHjHTI65CsYdVXQ7e vJ2VgjHizj+GeK/n2mdBFrsx9dtaTpU7uZp90B52nZlc5Vh+cQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOrZbH9Tf2fcT7DrfbJT1JBsnN/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmIwN2Q2NjctMmI2ZS0z ODhkLTgxMjktZjc5Y2Q5OTY3MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCF9IvWI/PmTmhK4B/7HHl69Eu79mlRkCIJzOGOiTBny1UuaPj51g4Z Df4pD45E49N4ruk9lPWQ01O5mIDiOMYioHomPn56WYiQAt5RHkxrUBucbMWNfqWo nAjMtuXLeWXHa5ytCtYe/DbIbfS03noAiLb46G3SHm2DEvyRLUu88Zzd7T1ZRdz1 3hUhAhY+i5nmlCQT4aCM+igw1wZHXarPtOE3It36c0k8s5SLEJ7co76F1sgtkkL0 MMgeSnZ79Rk8w0Iey2qC5YIXGWxs0s2l8LbShgr55LPVb51s6Qqr+SBMiEWoXX6U xDNfd6MrLKYm70J45GJIMsXHg8essju9 -----END CERTIFICATE-----Generated at Sun Apr 27 16:53:30 2025 by rpki-client