$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b6de8f6-a015-3146-b901-c80a9d1208c1.roa File: 5b6de8f6-a015-3146-b901-c80a9d1208c1.roa (raw, json) Hash identifier: JqCAmWn4WRUSlj4OB5h8Laypkk6Xbiyo4dPAiCzYt1U= Subject key identifier: 1A:C0:37:48:EE:39:32:11:B6:B6:97:5E:1D:0E:F0:3A:F2:25:C5:01 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584993F9FDA46525EE112F453280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b6de8f6-a015-3146-b901-c80a9d1208c1.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 32651 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:fd:a4:65:25:ee:11:2f:45:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=63cb4ac4-925a-4fef-8034-4f8a00712267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b9:3e:53:9d:24:db:3e:92:63:00:30:96:25: cd:0e:ef:1a:26:f2:43:9b:b8:43:ec:df:6b:79:2f: 4c:44:ec:cf:61:f4:c2:e6:be:10:7f:33:4a:2b:2d: a0:56:ba:c8:75:6d:53:b3:02:8c:07:50:3a:dc:9d: 34:63:8d:53:93:0b:6b:0a:25:20:42:10:6c:8e:a0: 0b:6e:5a:2f:87:90:4d:b1:36:80:06:7f:d4:99:cf: 11:9b:91:26:11:4f:64:eb:28:c3:ec:b1:1b:5e:d9: 9b:26:67:a1:98:46:8d:97:21:42:54:04:05:bc:36: 5e:70:ab:d3:09:11:14:e9:29:f8:e6:b2:23:06:ec: b0:9c:95:65:1b:52:0a:ee:62:4d:c8:7b:66:1c:18: 04:7b:5a:f6:12:03:5a:77:05:1e:f9:99:7d:18:40: 1b:70:8e:0e:32:9c:22:91:91:84:a4:5a:31:e6:02: 82:69:33:4e:6c:07:85:47:eb:54:95:5d:b7:d6:20: 7b:51:1c:f6:0f:54:da:1b:94:c0:d0:38:2e:b3:43: 77:ea:c0:45:e3:52:c4:dc:93:dd:0e:be:8d:65:21: 98:49:28:f3:3e:0a:4d:90:ea:9c:aa:1b:69:ac:d9: 68:9e:69:b7:42:57:5b:09:bd:5a:b2:49:ec:81:9c: 15:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C0:37:48:EE:39:32:11:B6:B6:97:5E:1D:0E:F0:3A:F2:25:C5:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b6de8f6-a015-3146-b901-c80a9d1208c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:63:21:96:3c:95:bd:f3:40:80:0b:b6:e1:1d:7e:f7:09:08: 19:c7:b9:5c:0e:c0:0b:f7:de:34:00:51:05:07:56:de:46:bc: 77:5e:ed:8e:a6:8a:e3:80:ac:5b:da:10:d6:bb:0b:ea:74:dd: 37:7a:87:d7:33:15:59:87:5c:19:b6:a7:bb:fe:9b:df:20:a6: 3c:5f:22:cc:92:fb:bc:46:66:a5:7c:be:42:bc:46:c2:e5:cd: 37:2b:72:56:04:11:2a:bf:b6:9e:51:f0:2b:8e:b8:ac:77:33: 19:78:fa:b1:32:12:b3:b5:d9:d9:4c:1e:71:86:f0:45:99:ad: cc:3c:d8:eb:81:61:e8:e8:d7:48:4f:ec:51:9a:49:05:37:9c: d3:c5:d0:76:b5:3d:83:e2:c7:66:12:e7:5d:b5:b3:95:e5:4b: ba:88:b0:f7:e6:84:5d:00:3f:80:04:45:ab:00:f9:23:2f:bb: 5b:d9:c7:7f:1e:b8:0a:61:19:ef:c8:76:03:36:4f:60:e8:b9: 67:ad:69:b6:da:2b:37:57:45:cb:70:99:19:96:40:52:55:51: 63:3d:99:2e:10:a6:8d:92:17:56:d9:05:ce:7e:03:9f:cc:1c: 9b:05:aa:d0:79:9a:76:93:f6:af:9e:70:74:e7:50:ef:16:d8: f7:c7:eb:76 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+f2kZSXuES9FMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NjNjYjRhYzQtOTI1YS00ZmVmLTgwMzQtNGY4YTAwNzEyMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7k+U50k2z6SYwAwliXNDu8aJvJDm7hD7N9r eS9MROzPYfTC5r4QfzNKKy2gVrrIdW1TswKMB1A63J00Y41TkwtrCiUgQhBsjqAL blovh5BNsTaABn/Umc8Rm5EmEU9k6yjD7LEbXtmbJmehmEaNlyFCVAQFvDZecKvT CREU6Sn45rIjBuywnJVlG1IK7mJNyHtmHBgEe1r2EgNadwUe+Zl9GEAbcI4OMpwi kZGEpFox5gKCaTNObAeFR+tUlV231iB7URz2D1TaG5TA0Dgus0N36sBF41LE3JPd Dr6NZSGYSSjzPgpNkOqcqhtprNlonmm3QldbCb1asknsgZwVlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBrAN0juOTIRtraXXh0O8DryJcUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWI2ZGU4ZjYtYTAxNS0z MTQ2LWI5MDEtYzgwYTlkMTIwOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCwYyGWPJW980CAC7bhHX73CQgZx7lcDsAL9940AFEFB1beRrx3Xu2O porjgKxb2hDWuwvqdN03eofXMxVZh1wZtqe7/pvfIKY8XyLMkvu8RmalfL5CvEbC 5c03K3JWBBEqv7aeUfArjrisdzMZePqxMhKztdnZTB5xhvBFma3MPNjrgWHo6NdI T+xRmkkFN5zTxdB2tT2D4sdmEuddtbOV5Uu6iLD35oRdAD+ABEWrAPkjL7tb2cd/ HrgKYRnvyHYDNk9g6LlnrWm22is3V0XLcJkZlkBSVVFjPZkuEKaNkhdW2QXOfgOf zBybBarQeZp2k/avnnB051DvFtj3x+t2 -----END CERTIFICATE-----Generated at Sun Apr 27 15:58:55 2025 by rpki-client