$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8b734ec-b7d8-3b41-a3bf-97929716e649.roa File: a8b734ec-b7d8-3b41-a3bf-97929716e649.roa (raw, json) Hash identifier: /dDZJQ838945HgtIISElnEv3uPjk6SLjiMH3tJLoTDs= Subject key identifier: 92:2B:8D:D4:B0:D9:F5:99:61:F5:F7:CF:F9:EA:CD:A4:54:EF:48:16 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183D90F5F08A71D7D732F40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8b734ec-b7d8-3b41-a3bf-97929716e649.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 396590 IP address blocks: 192.42.177.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:d9:0f:5f:08:a7:1d:7d:73:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=1d7bc260-ad4d-4fbf-b286-ff371dc54e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:e1:da:d7:11:4d:de:ee:47:3c:44:44:c4: d7:24:5a:a4:ce:f5:db:82:42:76:67:57:65:cd:89: 25:9a:00:2b:32:66:5b:51:54:4a:f3:10:7a:58:cd: ca:02:e5:f8:6e:c8:5a:54:f4:b9:ba:a0:07:d5:a1: a5:9c:0d:bb:50:5c:cb:db:47:7f:f8:d0:06:59:0c: 89:bb:d9:1c:4e:00:ad:f4:5b:85:5c:96:fd:9d:66: 5f:4e:83:71:cc:f2:04:20:eb:9f:fa:30:be:d7:12: df:82:1b:91:0b:40:4b:46:25:63:45:19:2c:9a:0b: 89:6f:e4:a7:4b:5e:8f:6e:dc:65:0c:b1:c3:71:96: ee:62:93:8e:a0:97:60:74:9f:e5:73:96:2a:79:22: 6b:ef:2c:b8:55:fa:c1:71:97:c9:e2:e9:52:46:42: 48:f9:29:4a:ee:3b:c0:76:bc:67:03:d7:f3:23:b2: 88:1c:69:6e:ee:2e:10:45:bc:b1:5b:5f:7f:c9:27: 30:e1:47:8c:1b:ac:fe:1a:a6:02:25:d3:47:b2:a8: e3:0d:75:cb:9f:57:0d:3d:2f:ff:f2:54:8d:00:75: 35:9d:73:1b:74:0f:0c:e9:fc:d3:3d:d4:44:be:3d: d3:b6:ff:2b:93:5d:7e:ea:d5:7d:11:01:79:61:f3: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2B:8D:D4:B0:D9:F5:99:61:F5:F7:CF:F9:EA:CD:A4:54:EF:48:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8b734ec-b7d8-3b41-a3bf-97929716e649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.177.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:d1:ed:71:d8:f4:e4:d1:8a:9e:29:02:de:a0:dd:da:57:2d: cc:ae:89:f6:0e:68:a4:22:4d:5b:dd:c5:32:26:c7:4e:25:9b: 72:63:c9:e6:cf:f7:52:1f:4c:e6:2f:20:4a:a9:04:a5:3e:91: c8:2c:42:73:1b:cd:ac:57:fd:8e:ee:f2:16:de:5e:88:6c:24: 0b:69:74:01:95:8c:bb:3a:ee:50:7e:c9:ac:3c:a2:0e:62:1c: c0:d7:6f:da:b5:16:fc:86:25:91:51:7a:04:6d:44:0d:93:a2: f0:f4:ec:65:8e:9f:de:6b:d2:6d:24:e0:5e:9d:a7:10:1c:b8: d0:4e:93:5a:aa:46:5c:ab:17:6b:15:50:b2:5c:e7:ba:e7:96: 32:aa:53:88:ca:ba:f6:c7:53:8b:a5:11:79:1a:b0:09:99:ef: de:06:e5:47:06:85:5e:3c:6c:83:ab:92:eb:26:46:97:46:17: a5:a0:b2:26:1c:c8:f5:17:9c:c6:eb:d2:d7:07:a8:84:8a:f0: e1:0a:86:5b:42:92:9a:a2:97:ac:b2:36:13:8e:95:15:fc:f8: 21:fa:57:32:de:ad:69:e8:8f:20:89:39:c5:f5:14:81:93:75: 63:82:05:cd:59:ed:92:46:56:63:6b:c8:66:d4:ea:79:a6:63: 39:4b:d3:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg9kPXwinHX1zL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MWQ3YmMyNjAtYWQ0ZC00ZmJmLWIyODYtZmYzNzFkYzU0ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDrh2tcRTd7uRzxERMTXJFqkzvXbgkJ2Z1dl zYklmgArMmZbUVRK8xB6WM3KAuX4bshaVPS5uqAH1aGlnA27UFzL20d/+NAGWQyJ u9kcTgCt9FuFXJb9nWZfToNxzPIEIOuf+jC+1xLfghuRC0BLRiVjRRksmguJb+Sn S16PbtxlDLHDcZbuYpOOoJdgdJ/lc5YqeSJr7yy4VfrBcZfJ4ulSRkJI+SlK7jvA drxnA9fzI7KIHGlu7i4QRbyxW19/yScw4UeMG6z+GqYCJdNHsqjjDXXLn1cNPS// 8lSNAHU1nXMbdA8M6fzTPdREvj3Ttv8rk11+6tV9EQF5YfOYzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJIrjdSw2fWZYfX3z/nqzaRU70gWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYThiNzM0ZWMtYjdkOC0z YjQxLWEzYmYtOTc5Mjk3MTZlNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC30e1x2PTk0YqeKQLeoN3aVy3Mron2DmikIk1b3cUyJsdOJZtyY8nm z/dSH0zmLyBKqQSlPpHILEJzG82sV/2O7vIW3l6IbCQLaXQBlYy7Ou5QfsmsPKIO YhzA12/atRb8hiWRUXoEbUQNk6Lw9Oxljp/ea9JtJOBenacQHLjQTpNaqkZcqxdr FVCyXOe655YyqlOIyrr2x1OLpRF5GrAJme/eBuVHBoVePGyDq5LrJkaXRheloLIm HMj1F5zG69LXB6iEivDhCoZbQpKaopessjYTjpUV/Pgh+lcy3q1p6I8giTnF9RSB k3VjggXNWe2SRlZja8hm1Op5pmM5S9Pn -----END CERTIFICATE-----Generated at Sun Apr 27 04:03:36 2025 by rpki-client