$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa File: aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa (raw, json) Hash identifier: U/Cin1vZYr4RnE+R8KDzDps+9b5SP4jnZFh7K19yFwE= Subject key identifier: E0:B6:F0:C7:8C:41:A8:75:97:80:DF:FC:71:85:F2:E3:B9:23:0A:32 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584993FA00F91F0671763A8E9D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 396544 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:00:f9:1f:06:71:76:3a:8e:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=a139233d-61b8-4a22-8777-c71e0cdf3aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:5a:af:b2:2c:e2:5c:e2:af:5d:93:b0:2a: 73:0a:db:91:eb:10:0f:d5:ae:c2:0c:a4:d6:ec:6c: 61:62:de:da:69:4e:27:66:91:92:4e:c1:23:9e:f4: ab:3b:ea:6c:10:32:6b:77:9a:64:0e:05:c8:b6:9a: 84:d0:4b:f5:c3:db:a0:d0:8d:5e:1a:21:85:26:cb: 6e:0b:e6:2a:43:69:3c:2b:32:96:dc:48:af:d5:d1: 9b:a6:a2:7c:71:49:ba:02:30:0e:fd:9b:3c:59:55: c0:62:01:6d:c3:42:88:cb:18:15:ca:2f:2c:48:aa: e6:6a:f5:13:26:8a:48:8b:01:30:79:10:f7:b2:0a: d4:46:8a:5c:6a:ad:1f:d0:12:b3:71:31:e2:2d:cf: be:8e:19:7c:08:8e:87:89:17:50:ee:43:3c:b2:ab: fa:b9:36:7e:98:04:bf:ad:cc:48:7c:8e:08:6d:4e: 4f:87:65:eb:7d:3d:8c:4d:66:d2:58:2f:3f:6f:31: e7:e0:db:b8:01:41:d8:08:1b:da:22:d8:98:b2:37: 46:d2:66:d5:2e:d2:bf:24:b9:9d:8c:a3:ad:ed:93: b8:60:dc:f1:1b:97:8b:84:e6:95:da:c2:51:e1:a8: eb:74:3c:89:53:5f:18:78:fd:61:d4:f4:e5:f5:9d: 82:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B6:F0:C7:8C:41:A8:75:97:80:DF:FC:71:85:F2:E3:B9:23:0A:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:49:3a:80:0b:e5:7f:d6:c7:09:8b:7e:d6:02:38:8a:93:af: 6b:1f:d9:60:fd:72:47:79:ef:02:a4:5d:ce:11:29:f2:16:ee: c4:bb:78:27:3c:07:58:fc:ef:48:56:75:2a:0f:3f:2a:59:19: 2f:f7:e6:f1:c7:5b:d4:1a:20:bf:9e:6a:73:b2:54:6e:23:69: 3d:d4:56:89:9c:00:a5:9e:8a:9a:0d:02:24:99:8b:b9:eb:fb: 3f:0c:4d:51:7a:61:33:43:9c:e9:22:55:de:8d:26:56:0a:76: 8e:6f:b2:17:83:96:82:79:74:c4:51:19:b3:b6:00:a3:53:c4: 74:a6:04:b1:b6:a8:f6:77:e5:4b:a5:88:5d:c3:97:9a:03:aa: 99:fd:74:b7:be:82:e5:46:06:e4:47:cb:d9:1f:a4:94:f0:18: fa:4c:8f:d1:c3:83:bf:97:d2:7f:e6:a3:95:d6:24:f0:cc:34: 9c:4e:c7:b3:b9:56:b7:78:a5:c0:3c:27:8e:c8:0b:a6:d4:48: 86:2e:24:8b:73:21:d5:22:73:ff:e6:3f:94:13:98:1f:ed:75: 79:38:da:41:bc:ed:ca:3e:04:da:7d:03:3f:14:8a:be:08:23: e6:5e:80:3e:a9:e9:11:9d:1a:ac:aa:2a:ba:ab:a8:75:b4:f1: 85:2e:60:4e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+gD5HwZxdjqOnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YTEzOTIzM2QtNjFiOC00YTIyLTg3NzctYzcxZTBjZGYzYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlVar7Is4lzir12TsCpzCtuR6xAP1a7CDKTW 7GxhYt7aaU4nZpGSTsEjnvSrO+psEDJrd5pkDgXItpqE0Ev1w9ug0I1eGiGFJstu C+YqQ2k8KzKW3Eiv1dGbpqJ8cUm6AjAO/Zs8WVXAYgFtw0KIyxgVyi8sSKrmavUT JopIiwEweRD3sgrURopcaq0f0BKzcTHiLc++jhl8CI6HiRdQ7kM8sqv6uTZ+mAS/ rcxIfI4IbU5Ph2XrfT2MTWbSWC8/bzHn4Nu4AUHYCBvaItiYsjdG0mbVLtK/JLmd jKOt7ZO4YNzxG5eLhOaV2sJR4ajrdDyJU18YeP1h1PTl9Z2CPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOC28MeMQah1l4Df/HGF8uO5IwoyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE5ZmQyMmMtMTNmMi0z YjMyLWFlMmQtN2IxNjA0OTM2M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArSTqAC+V/1scJi37WAjiKk69rH9lg/XJHee8CpF3OESnyFu7Eu3gn PAdY/O9IVnUqDz8qWRkv9+bxx1vUGiC/nmpzslRuI2k91FaJnAClnoqaDQIkmYu5 6/s/DE1RemEzQ5zpIlXejSZWCnaOb7IXg5aCeXTEURmztgCjU8R0pgSxtqj2d+VL pYhdw5eaA6qZ/XS3voLlRgbkR8vZH6SU8Bj6TI/Rw4O/l9J/5qOV1iTwzDScTsez uVa3eKXAPCeOyAum1EiGLiSLcyHVInP/5j+UE5gf7XV5ONpBvO3KPgTafQM/FIq+ CCPmXoA+qekRnRqsqiq6q6h1tPGFLmBO -----END CERTIFICATE-----Generated at Sat Apr 26 22:16:20 2025 by rpki-client