$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8789756a-1ffa-3b88-a61b-5e2fa1153942.roa File: 8789756a-1ffa-3b88-a61b-5e2fa1153942.roa (raw, json) Hash identifier: agUNBeCNZBU0D8i3l1Gjhmf7WKAjTCT2gP/SYZWQQQo= Subject key identifier: 0D:3F:8B:88:E5:60:DC:89:E6:59:0A:D1:2C:F7:85:87:82:15:B1:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848CB089E754A99BA2544E4F0E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8789756a-1ffa-3b88-a61b-5e2fa1153942.roa Signing time: Thu 06 Feb 2025 13:33:21 +0000 ROA not before: Thu 06 Feb 2025 13:33:21 +0000 ROA not after: Wed 07 May 2025 12:33:21 +0000 asID: 397204 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:08:9e:75:4a:99:ba:25:44:e4:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 6 13:33:21 2025 GMT Not After : May 7 12:33:21 2025 GMT Subject: CN=27ad5777-dece-4c42-9e54-8c3ed1797c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:64:f0:de:08:6e:22:6f:c4:db:0e:b6:77: 46:19:4a:68:b4:15:ff:41:71:7b:5d:f4:69:c3:42: 06:54:96:33:a9:6b:3a:4b:2e:2a:19:81:d2:36:40: 07:21:fa:87:2b:84:43:a1:ca:4b:94:f5:39:64:ba: 53:6d:c7:23:04:24:82:bc:6e:f5:36:62:b4:c1:98: dd:a1:52:d4:ce:bd:ca:73:96:64:b2:fc:27:9f:44: 11:4d:5a:05:2c:b8:96:c7:75:4c:bd:44:cf:6c:d9: 2d:96:ae:e3:97:5e:dc:93:e5:c0:0c:c2:5f:b6:8c: 8c:32:37:60:a3:5e:14:ed:02:d7:ac:3b:71:f2:cf: 84:58:41:49:ea:2e:87:1a:7c:f6:f5:c7:df:84:03: 1e:e8:c9:9d:15:74:93:e9:83:e4:23:b5:bb:f6:cc: 24:49:36:a7:6c:da:ea:2d:f2:b8:c7:fe:70:64:40: 26:2a:25:9e:ad:e8:64:65:bc:a1:94:bd:c3:7f:ef: 3c:8a:71:7a:8f:78:0d:4a:5f:80:a2:8f:af:13:cd: 42:ee:09:64:b6:a8:be:52:9d:ee:8f:90:47:91:8a: fb:47:ec:81:dd:a4:eb:15:4b:a9:3d:2b:04:4d:c3: ee:39:62:d2:53:d1:8a:19:12:69:ad:96:2f:fd:1f: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3F:8B:88:E5:60:DC:89:E6:59:0A:D1:2C:F7:85:87:82:15:B1:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8789756a-1ffa-3b88-a61b-5e2fa1153942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:51:09:24:7c:d3:8c:8a:85:96:2a:1e:fd:b0:1a:fe:06:e5: 6e:d4:7e:20:cf:3d:1f:be:21:3d:8b:a4:30:5d:dc:a6:55:7f: 9b:38:f9:81:0f:57:1c:34:06:98:7e:28:e6:e6:a8:18:b3:85: cd:80:a5:12:f0:03:44:2b:29:09:d4:74:0c:3c:25:3d:3c:96: b6:49:bd:b9:31:d5:39:b4:68:3d:69:fa:6c:2d:56:03:e5:57: 13:7e:61:27:86:2f:1b:50:9f:42:57:c8:21:e4:55:b7:e5:4b: bd:8b:c8:b3:35:17:0c:a1:10:8d:e2:0d:77:11:57:77:5e:ca: 59:79:24:ac:24:b6:d6:d4:4a:24:09:cf:da:d8:30:10:ac:26: 08:77:c0:03:b8:4b:7f:e8:d5:6c:7a:83:90:cc:12:1a:dd:e1: ab:4c:90:8d:3c:ce:60:43:09:e6:b7:7e:a2:3d:0d:ad:3b:47: af:2c:64:04:25:ba:ef:bb:89:43:9f:23:f4:6a:9b:54:1c:39: 1a:1a:61:26:d1:8c:64:61:08:b1:68:b9:f9:3c:f4:bd:db:12: 26:7f:25:10:82:54:8a:82:f4:03:dd:3c:04:3a:5b:ad:ab:6a: ad:94:27:39:b7:66:d1:35:d3:9b:48:a5:28:ef:b7:a3:5d:21: 4e:07:30:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjLCJ51Spm6JUTk8OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDIwNjEzMzMyMVoXDTI1MDUwNzEyMzMyMVowLzEtMCsGA1UEAxMk MjdhZDU3NzctZGVjZS00YzQyLTllNTQtOGMzZWQxNzk3YzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudtk8N4IbiJvxNsOtndGGUpotBX/QXF7XfRp w0IGVJYzqWs6Sy4qGYHSNkAHIfqHK4RDocpLlPU5ZLpTbccjBCSCvG71NmK0wZjd oVLUzr3Kc5Zksvwnn0QRTVoFLLiWx3VMvUTPbNktlq7jl17ck+XADMJftoyMMjdg o14U7QLXrDtx8s+EWEFJ6i6HGnz29cffhAMe6MmdFXST6YPkI7W79swkSTanbNrq LfK4x/5wZEAmKiWerehkZbyhlL3Df+88inF6j3gNSl+Aoo+vE81C7glktqi+Up3u j5BHkYr7R+yB3aTrFUupPSsETcPuOWLSU9GKGRJprZYv/R//sQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA0/i4jlYNyJ5lkK0Sz3hYeCFbGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODc4OTc1NmEtMWZmYS0z Yjg4LWE2MWItNWUyZmExMTUzOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBIUQkkfNOMioWWKh79sBr+BuVu1H4gzz0fviE9i6QwXdymVX+bOPmB D1ccNAaYfijm5qgYs4XNgKUS8ANEKykJ1HQMPCU9PJa2Sb25MdU5tGg9afpsLVYD 5VcTfmEnhi8bUJ9CV8gh5FW35Uu9i8izNRcMoRCN4g13EVd3XspZeSSsJLbW1Eok Cc/a2DAQrCYId8ADuEt/6NVseoOQzBIa3eGrTJCNPM5gQwnmt36iPQ2tO0evLGQE Jbrvu4lDnyP0aptUHDkaGmEm0YxkYQixaLn5PPS92xImfyUQglSKgvQD3TwEOlut q2qtlCc5t2bRNdObSKUo77ejXSFOBzCH -----END CERTIFICATE-----Generated at Sun Apr 27 04:15:33 2025 by rpki-client