$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/790c5caf-63b9-3c57-8abe-eda73b75e62e.roa File: 790c5caf-63b9-3c57-8abe-eda73b75e62e.roa (raw, json) Hash identifier: XeooLoPWciTxRbOBhLfmuKDqeJcJIJYtTbkG8s8LJck= Subject key identifier: 4D:B3:EE:3D:B1:77:D7:A6:A0:85:01:7B:C9:83:3E:01:DB:10:E2:FF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849203C7C7D9311E5B7EA846158 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/790c5caf-63b9-3c57-8abe-eda73b75e62e.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 396606 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:7c:7d:93:11:e5:b7:ea:84:61:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=fcead962-881c-49e3-890d-fc61e2551af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d5:68:c1:77:f1:e4:ea:87:8e:bf:7b:a4:ed: 84:39:92:c0:e5:2b:38:71:bb:a6:27:88:26:2f:30: 3f:e2:41:53:de:b3:d9:ad:c6:a8:8f:2f:80:b4:9c: e3:a5:d6:12:9f:65:37:8c:e7:f8:76:a9:b2:bb:13: e1:01:b8:09:a3:17:87:64:6e:19:9c:8f:16:71:e0: 80:9e:4b:57:a0:19:af:7a:bb:77:23:a6:e3:ac:b5: fa:82:51:77:41:8e:73:c2:8a:72:dd:c2:0b:30:e6: 7e:e5:61:87:da:0b:51:de:76:ac:df:3f:5b:7a:6c: 8e:25:08:00:f6:17:94:38:db:46:6c:b7:c4:78:76: 2d:8b:e9:eb:54:ae:ce:fd:a0:2b:ca:ca:37:f5:10: b9:89:79:2c:02:5a:64:9f:90:1f:86:96:9f:76:78: b3:7b:b0:b1:70:b9:c7:be:3e:8b:8f:01:d3:41:d4: 62:11:90:ef:a6:0b:3b:1d:84:04:40:e2:b6:d3:aa: 34:71:1a:37:b3:1f:44:99:f8:ab:c5:10:7c:25:97: 50:14:e0:5a:43:f4:90:73:86:55:ea:f9:e9:7b:d8: 76:02:ed:f2:24:64:ce:68:6e:1c:41:2e:a3:01:ec: 60:cd:88:1a:01:61:c1:cd:ec:61:1d:cf:b7:ff:94: 1a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B3:EE:3D:B1:77:D7:A6:A0:85:01:7B:C9:83:3E:01:DB:10:E2:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/790c5caf-63b9-3c57-8abe-eda73b75e62e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:46:1e:87:49:f5:58:26:85:38:af:13:d8:7a:fa:35:0d:8b: 14:25:8d:fd:e0:7f:8a:36:b2:d0:46:ec:1d:1d:ec:ae:b9:bf: 5c:c2:0c:d4:26:f7:0d:3a:67:16:1d:a4:e3:e6:ec:c6:f4:7c: bd:63:b9:67:15:f1:54:1d:07:a0:f1:b6:0c:ed:da:9b:02:09: d3:50:ad:87:a8:a3:02:9c:a9:11:8a:34:69:28:4e:67:c4:3b: 9a:ca:f5:48:15:32:1a:e0:30:ef:5e:27:6e:d3:e7:5a:5a:c3: 24:3f:9c:08:ba:11:a7:66:e1:13:4d:5f:92:e4:88:fc:3c:89: 7b:2b:e4:b4:f7:ef:6c:a9:c4:7e:f8:e3:db:ab:26:c6:a9:3b: 05:09:e8:b1:95:45:d4:4f:f9:66:8a:94:c5:7c:38:f8:73:a7: e8:46:39:f2:31:de:56:e5:d3:46:63:32:af:0d:06:7d:f6:05: 74:a7:00:5d:c8:cd:4a:66:2f:b4:56:53:00:bd:3f:4f:fe:82: 8a:d0:26:ad:ae:30:13:ec:69:f2:7d:64:5c:fd:89:15:e5:b2: 24:2f:06:95:2b:9a:3d:23:d7:e7:9d:dd:d5:89:5b:f3:97:c4: 54:68:6f:c6:b8:8b:65:e9:f6:45:4a:17:f9:8f:5f:4e:e7:9e: 56:26:68:81 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkgPHx9kxHlt+qEYVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk ZmNlYWQ5NjItODgxYy00OWUzLTg5MGQtZmM2MWUyNTUxYWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdVowXfx5OqHjr97pO2EOZLA5Ss4cbumJ4gm LzA/4kFT3rPZrcaojy+AtJzjpdYSn2U3jOf4dqmyuxPhAbgJoxeHZG4ZnI8WceCA nktXoBmvert3I6bjrLX6glF3QY5zwopy3cILMOZ+5WGH2gtR3nas3z9bemyOJQgA 9heUONtGbLfEeHYti+nrVK7O/aAryso39RC5iXksAlpkn5Afhpafdnize7CxcLnH vj6LjwHTQdRiEZDvpgs7HYQEQOK206o0cRo3sx9EmfirxRB8JZdQFOBaQ/SQc4ZV 6vnpe9h2Au3yJGTOaG4cQS6jAexgzYgaAWHBzexhHc+3/5QaFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE2z7j2xd9emoIUBe8mDPgHbEOL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzkwYzVjYWYtNjNiOS0z YzU3LThhYmUtZWRhNzNiNzVlNjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApRh6HSfVYJoU4rxPYevo1DYsUJY394H+KNrLQRuwdHeyuub9cwgzU JvcNOmcWHaTj5uzG9Hy9Y7lnFfFUHQeg8bYM7dqbAgnTUK2HqKMCnKkRijRpKE5n xDuayvVIFTIa4DDvXidu0+daWsMkP5wIuhGnZuETTV+S5Ij8PIl7K+S09+9sqcR+ +OPbqybGqTsFCeixlUXUT/lmipTFfDj4c6foRjnyMd5W5dNGYzKvDQZ99gV0pwBd yM1KZi+0VlMAvT9P/oKK0CatrjAT7GnyfWRc/YkV5bIkLwaVK5o9I9fnnd3ViVvz l8RUaG/GuItl6fZFShf5j19O555WJmiB -----END CERTIFICATE-----Generated at Sun Apr 27 04:02:08 2025 by rpki-client