$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b23ea7f-4e90-393f-be13-bb683e21ab71.roa File: 4b23ea7f-4e90-393f-be13-bb683e21ab71.roa (raw, json) Hash identifier: M9sbeHjZnhgkFa+aOSWC3WNI18Uy0hc3oTBJwRB7tek= Subject key identifier: 1C:8D:48:20:93:7B:2E:FB:61:D1:BC:DC:F7:4E:0B:BC:5F:B5:72:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848CB089F55B5058B8CEFFFB777 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b23ea7f-4e90-393f-be13-bb683e21ab71.roa Signing time: Thu 06 Feb 2025 13:33:21 +0000 ROA not before: Thu 06 Feb 2025 13:33:21 +0000 ROA not after: Wed 07 May 2025 12:33:21 +0000 asID: 396827 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:08:9f:55:b5:05:8b:8c:ef:ff:b7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 6 13:33:21 2025 GMT Not After : May 7 12:33:21 2025 GMT Subject: CN=db24642a-ddc6-4e6f-96dd-1b73e71faa45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:67:b9:b0:6b:30:03:3a:cf:a9:f9:e9:c1:eb: d0:43:99:a1:07:2b:e2:24:9c:b1:73:bd:31:9d:91: 25:18:1f:7c:5c:63:37:15:35:99:aa:52:1a:5e:2a: 6f:98:69:d5:f4:96:15:b2:cd:ef:e7:39:f3:c3:eb: d8:64:d4:f8:08:e4:60:bd:98:20:01:22:94:2c:86: a7:ec:d2:f4:e7:ae:de:88:dc:6c:c4:50:34:35:fb: 7b:ae:49:9a:59:26:5d:49:bb:28:e8:38:35:c3:4b: e2:7a:77:60:0b:a7:19:12:b8:30:3a:af:de:95:fc: 91:67:0d:30:88:bf:19:73:e7:4e:14:a4:bd:71:e5: f0:73:ff:e0:43:1b:3b:0f:f7:12:f7:5d:ec:02:21: 0c:b7:ad:c7:dc:b6:38:dc:73:53:76:42:98:5d:d7: 6c:e5:c4:7a:bf:74:39:42:e7:f6:2e:c2:1d:bc:a5: 67:08:6d:5b:ad:b7:15:53:32:4b:d0:68:92:8d:47: 1c:34:6a:82:a5:43:fa:02:7c:1b:af:21:ca:0a:1b: a8:a4:fa:c2:d7:65:5d:c8:9b:ae:ad:9e:05:bf:ec: 81:de:4c:45:24:1f:03:d3:78:69:f0:b5:f0:f1:be: a4:c9:00:3c:ee:40:02:6b:d5:7b:0a:ef:e0:23:e3: fb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8D:48:20:93:7B:2E:FB:61:D1:BC:DC:F7:4E:0B:BC:5F:B5:72:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b23ea7f-4e90-393f-be13-bb683e21ab71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:be:f0:f3:10:3c:b4:e0:2a:68:25:96:9c:3a:a6:76:80:ee: 84:5d:5a:b3:68:84:4e:35:ef:89:8a:bb:fb:ae:9c:c9:00:24: 5e:71:d6:85:fb:3c:f0:9b:79:a1:9e:35:a6:60:9f:f6:86:0d: 89:f4:73:76:b0:be:98:7a:ad:e1:4c:80:29:d5:23:ed:70:07: b3:3f:27:76:d4:8a:e9:06:6a:ea:03:c4:d7:af:ad:1e:73:16: 24:a5:5b:43:fe:00:c5:38:3c:b5:53:2e:ea:b4:2b:15:fd:ed: b6:4f:f0:7b:6d:a4:46:e5:f0:c3:e3:f2:3e:90:52:ad:c1:b2: 84:2b:ad:e8:a0:9a:e9:5e:4a:27:cc:ea:95:5b:45:1f:d1:67: c7:47:53:5e:7b:05:5b:e0:96:2d:85:28:da:05:6c:66:ba:58: 23:74:10:16:ac:8d:e3:11:8a:f6:d3:58:61:d9:d2:d1:c6:4e: f9:52:70:fe:62:d8:ed:b7:93:f1:18:09:0c:23:b8:a8:86:d0: a4:0d:f2:21:22:68:21:55:72:ab:0d:7f:df:d9:e4:15:44:a5: 9f:60:db:9a:33:8a:c1:da:70:81:c4:e2:fc:8d:81:36:9b:a4: 77:c4:6d:fe:bf:b4:e3:04:84:6d:31:26:31:2e:a2:b1:9d:f4: e4:c0:70:94 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjLCJ9VtQWLjO//t3cwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDIwNjEzMzMyMVoXDTI1MDUwNzEyMzMyMVowLzEtMCsGA1UEAxMk ZGIyNDY0MmEtZGRjNi00ZTZmLTk2ZGQtMWI3M2U3MWZhYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmme5sGswAzrPqfnpwevQQ5mhByviJJyxc70x nZElGB98XGM3FTWZqlIaXipvmGnV9JYVss3v5znzw+vYZNT4CORgvZggASKULIan 7NL0567eiNxsxFA0Nft7rkmaWSZdSbso6Dg1w0viendgC6cZErgwOq/elfyRZw0w iL8Zc+dOFKS9ceXwc//gQxs7D/cS913sAiEMt63H3LY43HNTdkKYXdds5cR6v3Q5 Quf2LsIdvKVnCG1brbcVUzJL0GiSjUccNGqCpUP6AnwbryHKChuopPrC12VdyJuu rZ4Fv+yB3kxFJB8D03hp8LXw8b6kyQA87kACa9V7Cu/gI+P7bQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFByNSCCTey77YdG83PdOC7xftXJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGIyM2VhN2YtNGU5MC0z OTNmLWJlMTMtYmI2ODNlMjFhYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCbvvDzEDy04CpoJZacOqZ2gO6EXVqzaIRONe+Jirv7rpzJACRecdaF +zzwm3mhnjWmYJ/2hg2J9HN2sL6Yeq3hTIAp1SPtcAezPyd21IrpBmrqA8TXr60e cxYkpVtD/gDFODy1Uy7qtCsV/e22T/B7baRG5fDD4/I+kFKtwbKEK63ooJrpXkon zOqVW0Uf0WfHR1NeewVb4JYthSjaBWxmulgjdBAWrI3jEYr201hh2dLRxk75UnD+ Ytjtt5PxGAkMI7iohtCkDfIhImghVXKrDX/f2eQVRKWfYNuaM4rB2nCBxOL8jYE2 m6R3xG3+v7TjBIRtMSYxLqKxnfTkwHCU -----END CERTIFICATE-----Generated at Sun Apr 27 13:39:15 2025 by rpki-client