$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ed56608-1f2b-34e4-8fd6-db1830498557.roa File: 4ed56608-1f2b-34e4-8fd6-db1830498557.roa (raw, json) Hash identifier: 0kJDpA4f6qZ7+Zo8tuEONrz8a+jmtYDPu4Eiy7t9V+w= Subject key identifier: 7D:81:14:0F:F7:B4:D8:C9:4A:99:E4:E0:3B:68:9C:35:1D:8D:13:D5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AA4F5C309F70B953972AE780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ed56608-1f2b-34e4-8fd6-db1830498557.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 36625 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:5c:30:9f:70:b9:53:97:2a:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=85c7816a-3dee-4c2c-a2ce-6dc11419893e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:31:63:66:de:c3:ff:85:1e:02:a0:2f:25: 3c:c4:76:1c:0b:20:48:b2:b7:62:0a:70:23:ab:46: 98:0d:6b:b6:85:c0:42:19:68:8d:45:cc:4f:c0:3a: 5e:ee:e8:30:ed:f3:23:4e:2e:78:5d:43:78:71:2b: 9b:f8:62:1d:78:59:32:2d:c4:97:17:e6:36:e6:86: 08:c3:12:cb:c9:6c:6f:88:33:6d:b1:53:b0:67:45: c6:90:8d:47:71:16:36:c0:e2:be:4d:66:9b:5d:0b: 1b:16:0f:fa:72:6a:88:3e:d5:5f:84:1b:16:6e:53: af:81:9e:29:9f:33:da:85:a8:70:86:3c:de:87:03: 64:91:1c:d3:7e:e1:41:d1:b9:9e:6e:13:fd:24:9b: 4a:aa:f8:b1:87:d7:24:fe:60:df:de:dd:1b:ca:93: 14:59:1d:c1:9b:ef:7d:82:5e:28:4c:61:40:08:ed: db:b4:50:de:91:e7:05:d6:b5:60:9b:5c:7e:b4:c3: d0:fc:2c:b7:08:f2:91:34:52:34:04:f5:d2:a5:8e: 70:c2:bd:64:e0:b4:71:69:d4:a2:99:cb:27:50:41: aa:18:10:b0:aa:2d:f2:9d:c0:4c:44:b7:3a:3f:de: 25:61:87:d3:45:cf:1e:c9:c8:6b:39:62:2d:74:69: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:81:14:0F:F7:B4:D8:C9:4A:99:E4:E0:3B:68:9C:35:1D:8D:13:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ed56608-1f2b-34e4-8fd6-db1830498557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:19:51:4a:26:5f:53:f0:69:a8:7b:3c:16:01:d9:e1:73:dc: f4:d0:71:c4:de:9a:99:22:48:61:5a:cc:43:7e:06:67:48:a9: 11:62:f4:82:13:5a:cd:3c:4b:6e:5d:9b:26:36:40:37:8f:84: b5:8f:3e:5c:85:19:50:c0:17:19:2d:4f:97:09:f1:b0:b0:dc: d0:32:22:1f:4a:c4:a7:ea:ab:97:62:30:27:c5:b9:9f:5a:9f: 0b:7c:ed:f6:d7:53:64:7b:30:66:82:e1:1d:39:5b:bf:6f:e1: 16:cc:ab:2b:ef:e7:4e:93:b4:a3:70:00:93:eb:23:f2:bb:7b: 59:e7:19:7a:f4:24:06:a2:47:63:52:c9:55:91:45:bb:69:2f: 5f:71:ab:c1:d4:58:49:ef:69:55:30:8e:08:32:cc:2d:91:30: c8:de:df:91:ad:2d:a2:e6:e7:1d:98:4e:4a:14:e0:69:ac:22: 48:37:32:77:f9:8e:eb:ef:37:ca:52:46:b9:65:90:19:cc:1e: 1f:c8:1b:70:04:ab:fc:50:0d:f0:a6:32:3a:92:5a:df:07:36: 75:57:4a:41:54:a4:b5:ec:19:c0:98:8c:67:d5:37:f8:8e:b8: 23:23:1b:fd:fe:f2:75:51:37:29:d0:06:26:4e:9f:cd:b6:bd: 15:1c:af:d2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmqT1wwn3C5U5cq54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk ODVjNzgxNmEtM2RlZS00YzJjLWEyY2UtNmRjMTE0MTk4OTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyQxY2bew/+FHgKgLyU8xHYcCyBIsrdiCnAj q0aYDWu2hcBCGWiNRcxPwDpe7ugw7fMjTi54XUN4cSub+GIdeFkyLcSXF+Y25oYI wxLLyWxviDNtsVOwZ0XGkI1HcRY2wOK+TWabXQsbFg/6cmqIPtVfhBsWblOvgZ4p nzPahahwhjzehwNkkRzTfuFB0bmebhP9JJtKqvixh9ck/mDf3t0bypMUWR3Bm+99 gl4oTGFACO3btFDekecF1rVgm1x+tMPQ/Cy3CPKRNFI0BPXSpY5wwr1k4LRxadSi mcsnUEGqGBCwqi3yncBMRLc6P94lYYfTRc8eychrOWItdGlytwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH2BFA/3tNjJSpnk4DtonDUdjRPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGVkNTY2MDgtMWYyYi0z NGU0LThmZDYtZGIxODMwNDk4NTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBMGVFKJl9T8GmoezwWAdnhc9z00HHE3pqZIkhhWsxDfgZnSKkRYvSC E1rNPEtuXZsmNkA3j4S1jz5chRlQwBcZLU+XCfGwsNzQMiIfSsSn6quXYjAnxbmf Wp8LfO3211NkezBmguEdOVu/b+EWzKsr7+dOk7SjcACT6yPyu3tZ5xl69CQGokdj UslVkUW7aS9fcavB1FhJ72lVMI4IMswtkTDI3t+RrS2i5ucdmE5KFOBprCJINzJ3 +Y7r7zfKUka5ZZAZzB4fyBtwBKv8UA3wpjI6klrfBzZ1V0pBVKS17BnAmIxn1Tf4 jrgjIxv9/vJ1UTcp0AYmTp/Ntr0VHK/S -----END CERTIFICATE-----Generated at Sun Apr 27 17:54:14 2025 by rpki-client