$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2ec009-255c-3ee7-9e04-756afbad6161.roa File: aa2ec009-255c-3ee7-9e04-756afbad6161.roa (raw, json) Hash identifier: xkek7nN61rRHiK6FJUSN+o9HHIqYCz0TKETUoIekcqc= Subject key identifier: 9E:75:86:02:58:9D:A4:CC:DB:CA:75:C5:AD:55:F5:7F:D0:52:EF:22 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183BA2202FDBE3889EA7600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2ec009-255c-3ee7-9e04-756afbad6161.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 36616 IP address blocks: 192.82.133.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:ba:22:02:fd:be:38:89:ea:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=e40f104a-d08c-4a04-afa5-af18ae1eeafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c9:f9:87:87:02:ec:d9:d9:8a:ef:e7:8c:ed: bc:7e:e8:0f:b8:b3:09:73:68:be:fb:8c:45:b7:52: 4e:a4:af:ac:be:a1:ba:16:db:dc:38:ca:69:ad:f7: de:07:6a:9f:b1:da:0b:0d:41:24:c4:d2:0c:09:c7: 83:14:da:60:c7:bb:0e:3c:1a:2b:bc:7b:a9:f5:01: 3b:51:63:b7:17:c2:a6:1a:e5:0d:21:8f:da:da:70: 34:d2:00:9d:80:07:6e:7c:6a:fa:35:64:c0:78:20: f9:f4:7b:27:16:69:f5:37:a1:4b:38:5a:a7:ba:fb: 0e:89:96:d0:a7:77:23:a0:37:c1:4e:61:c6:0e:62: 2e:6b:79:64:e8:4a:e4:45:b5:7a:c4:8e:f5:25:d2: f8:84:9a:42:a8:b5:86:d1:f2:53:81:73:f9:2e:41: aa:f0:70:d5:8a:6d:ae:71:8e:50:a0:41:0c:b9:8e: 86:c1:02:a9:41:be:ab:76:96:72:13:e2:86:eb:48: a5:ae:a5:e0:ab:09:c6:7f:b8:f4:7e:0e:39:8f:c1: e2:22:42:a6:b3:27:2b:bc:5d:c5:bd:ca:38:10:61: 8f:2f:70:cf:63:62:4d:f1:96:12:73:2e:43:4a:04: ed:78:a7:54:e4:26:69:25:9f:06:3c:de:a5:99:17: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:75:86:02:58:9D:A4:CC:DB:CA:75:C5:AD:55:F5:7F:D0:52:EF:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2ec009-255c-3ee7-9e04-756afbad6161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.133.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:bf:e3:10:55:36:0c:78:b5:3d:b7:48:22:bc:66:c1:17:b0: 94:e9:72:37:dd:66:75:15:4d:72:00:2e:07:0f:06:2c:a3:25: 8b:fe:b2:ab:23:ec:a3:e5:25:51:81:ce:55:6d:b1:9a:26:29: 44:92:cd:2c:17:c0:76:b6:4e:60:32:d4:23:8a:df:ea:c5:12: 4b:9e:83:f2:8d:38:2a:3c:a4:01:2b:e3:6e:7b:a2:a7:da:4e: f5:df:55:9a:2e:d6:39:a3:ea:d5:e2:9c:4e:8d:3a:1e:be:92: e4:7d:fb:a2:fd:06:17:63:49:68:5a:c6:c1:6d:d1:0c:ea:66: eb:5a:24:af:49:ca:58:06:78:d6:4d:10:d4:f0:38:fe:24:8e: dc:2f:23:d8:d2:0c:db:53:d2:f3:d5:ef:98:20:92:ea:d5:63: 68:11:4e:c0:fd:bd:c4:57:ae:72:47:b5:2c:7f:3a:a3:20:e6: f0:db:d1:27:be:83:40:6c:ef:10:c0:99:a3:bf:f4:89:e8:b3: db:ce:6e:c1:c7:24:6b:35:f2:ce:1d:c4:27:f6:10:a5:86:f9: e0:d4:39:4b:76:7e:39:e0:bb:ca:ea:49:72:b3:a2:e8:49:f2: b2:59:4c:fe:e8:04:b5:12:cb:45:85:0b:2a:e8:86:c2:4c:36: b4:c4:6d:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg7oiAv2+OInqdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZTQwZjEwNGEtZDA4Yy00YTA0LWFmYTUtYWYxOGFlMWVlYWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8n5h4cC7NnZiu/njO28fugPuLMJc2i++4xF t1JOpK+svqG6FtvcOMpprffeB2qfsdoLDUEkxNIMCceDFNpgx7sOPBorvHup9QE7 UWO3F8KmGuUNIY/a2nA00gCdgAdufGr6NWTAeCD59HsnFmn1N6FLOFqnuvsOiZbQ p3cjoDfBTmHGDmIua3lk6ErkRbV6xI71JdL4hJpCqLWG0fJTgXP5LkGq8HDVim2u cY5QoEEMuY6GwQKpQb6rdpZyE+KG60ilrqXgqwnGf7j0fg45j8HiIkKmsycrvF3F vco4EGGPL3DPY2JN8ZYScy5DSgTteKdU5CZpJZ8GPN6lmRc2vQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ51hgJYnaTM28p1xa1V9X/QUu8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWEyZWMwMDktMjU1Yy0z ZWU3LTllMDQtNzU2YWZiYWQ2MTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8v+MQVTYMeLU9t0givGbBF7CU6XI33WZ1FU1yAC4HDwYsoyWL/rKr I+yj5SVRgc5VbbGaJilEks0sF8B2tk5gMtQjit/qxRJLnoPyjTgqPKQBK+Nue6Kn 2k7131WaLtY5o+rV4pxOjToevpLkffui/QYXY0loWsbBbdEM6mbrWiSvScpYBnjW TRDU8Dj+JI7cLyPY0gzbU9Lz1e+YIJLq1WNoEU7A/b3EV65yR7UsfzqjIObw29En voNAbO8QwJmjv/SJ6LPbzm7BxyRrNfLOHcQn9hClhvng1DlLdn454LvK6klys6Lo SfKyWUz+6AS1EstFhQsq6IbCTDa0xG0Y -----END CERTIFICATE-----Generated at Sun Apr 27 02:10:07 2025 by rpki-client