$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f2a8003-4538-332d-ab47-9b6c9d473df2.roa File: 7f2a8003-4538-332d-ab47-9b6c9d473df2.roa (raw, json) Hash identifier: RmcJ2c7gnXLEKKxEFt2iFXVsodBoCj3IpA8qIVgORdk= Subject key identifier: 2C:D3:DC:68:FD:BC:9E:66:9E:34:35:2D:85:55:79:C3:C0:4F:C8:72 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584993FA005108A1F36624526590 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f2a8003-4538-332d-ab47-9b6c9d473df2.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 20431 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:00:51:08:a1:f3:66:24:52:65:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=e301727c-aa84-46be-bc89-0433c9a15462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e4:26:f5:a2:a0:cc:12:0a:08:0b:f6:d7:13: fe:dd:be:d9:88:67:15:bd:97:ff:b4:16:14:47:6d: ee:1f:9a:3e:68:1a:6b:a9:3e:82:62:55:b3:0e:5d: 01:35:3d:13:83:34:7f:e7:cf:d6:a9:9c:58:bf:d7: da:6c:2f:bd:4f:f7:e1:89:b8:d6:85:0e:d1:8c:d2: ff:2a:71:be:04:ee:b3:b2:5a:85:4f:d7:7e:6d:f0: fd:82:42:5b:37:9d:79:65:60:93:c8:08:3c:b3:c3: 06:15:a2:5a:57:85:9e:a8:7a:27:14:a6:f5:39:86: 15:07:cc:8b:4c:d1:15:82:3b:06:ab:43:b8:78:dc: ea:47:b8:cd:4a:1e:04:e8:fe:a1:51:c6:d6:2f:71: 8d:d5:d7:34:e4:5e:1e:aa:94:34:d1:4a:80:e4:c5: 8d:b0:c3:70:c6:51:a9:97:df:f4:20:08:42:73:33: 50:eb:e4:5d:54:83:22:69:17:a4:85:dd:0b:45:7b: 3b:c8:cd:bd:bc:e0:62:f0:8f:fb:79:f7:4f:13:b9: d1:0f:df:e3:2b:32:a6:e3:36:f9:f0:e7:02:1e:4a: c1:ff:f8:03:22:b9:02:d0:e4:1d:31:c9:fc:d5:1e: 84:78:a7:20:f7:85:d2:09:d5:0d:80:97:e7:b5:4b: f5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D3:DC:68:FD:BC:9E:66:9E:34:35:2D:85:55:79:C3:C0:4F:C8:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f2a8003-4538-332d-ab47-9b6c9d473df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1f:69:2b:c4:ee:58:cf:4f:a3:7a:31:2c:0e:e6:87:c0:f1: 10:1b:89:b1:b7:52:71:84:d9:4b:67:0e:e2:cd:fa:e8:48:92: c3:da:20:80:88:97:65:9e:13:ad:81:1b:76:c3:48:87:fc:aa: e2:c5:1f:2d:76:0f:d6:bf:92:e0:e7:dc:64:4e:88:4f:a2:b1: 0a:23:83:b6:f7:07:f4:7c:d7:ef:23:72:34:06:2f:dc:af:db: af:a0:ca:9e:ca:df:35:cf:e6:ee:f4:36:51:bd:26:55:f5:f0: 11:6d:e1:48:e6:b8:59:34:26:e6:85:2a:6d:78:af:51:11:e5: 23:7f:5d:b7:b8:a8:c7:fd:bc:f0:c8:47:87:ed:56:83:d9:a3: 51:ca:f5:18:1c:2f:f9:0e:18:7a:f7:b8:28:73:2b:23:aa:91: 75:ae:a8:45:cd:32:23:6d:27:63:ab:f5:f6:f9:62:c1:53:ba: 95:32:6f:bc:63:c4:92:72:57:78:d3:39:95:fc:13:9d:b0:2e: 92:56:a9:8e:f8:9c:36:94:f6:c8:10:f2:3c:5b:a5:6c:85:93: 54:2f:c7:e1:e2:83:8e:04:27:7d:07:62:50:a1:21:b0:02:fa: 68:1f:2c:dc:8b:fa:8a:d6:48:02:27:03:cd:b4:10:59:89:22: d9:ff:04:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+gBRCKHzZiRSZZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZTMwMTcyN2MtYWE4NC00NmJlLWJjODktMDQzM2M5YTE1NDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Qm9aKgzBIKCAv21xP+3b7ZiGcVvZf/tBYU R23uH5o+aBprqT6CYlWzDl0BNT0TgzR/58/WqZxYv9fabC+9T/fhibjWhQ7RjNL/ KnG+BO6zslqFT9d+bfD9gkJbN515ZWCTyAg8s8MGFaJaV4WeqHonFKb1OYYVB8yL TNEVgjsGq0O4eNzqR7jNSh4E6P6hUcbWL3GN1dc05F4eqpQ00UqA5MWNsMNwxlGp l9/0IAhCczNQ6+RdVIMiaRekhd0LRXs7yM29vOBi8I/7efdPE7nRD9/jKzKm4zb5 8OcCHkrB//gDIrkC0OQdMcn81R6EeKcg94XSCdUNgJfntUv1swIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCzT3Gj9vJ5mnjQ1LYVVecPAT8hyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2YyYTgwMDMtNDUzOC0z MzJkLWFiNDctOWI2YzlkNDczZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtH2krxO5Yz0+jejEsDuaHwPEQG4mxt1JxhNlLZw7izfroSJLD2iCA iJdlnhOtgRt2w0iH/KrixR8tdg/Wv5Lg59xkTohPorEKI4O29wf0fNfvI3I0Bi/c r9uvoMqeyt81z+bu9DZRvSZV9fARbeFI5rhZNCbmhSpteK9REeUjf123uKjH/bzw yEeH7VaD2aNRyvUYHC/5Dhh697gocysjqpF1rqhFzTIjbSdjq/X2+WLBU7qVMm+8 Y8SScld40zmV/BOdsC6SVqmO+Jw2lPbIEPI8W6VshZNUL8fh4oOOBCd9B2JQoSGw AvpoHyzci/qK1kgCJwPNtBBZiSLZ/wSb -----END CERTIFICATE-----Generated at Sun Apr 27 00:24:05 2025 by rpki-client