$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcb7912b-a3b7-3838-88c8-0be85e2d4066.roa File: bcb7912b-a3b7-3838-88c8-0be85e2d4066.roa (raw, json) Hash identifier: ORXQ5usE1e8Opt2nxyshsvvKCgetDsNYgrkcQgyuNlM= Subject key identifier: A7:53:1B:0C:F0:7D:2E:02:E8:3C:92:1D:49:AA:AD:06:B9:D4:40:10 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584996C4A845822218A7082C71C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcb7912b-a3b7-3838-88c8-0be85e2d4066.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 396578 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:a8:45:82:22:18:a7:08:2c:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=ce354bcb-7047-4ab2-ae9e-65462a7380ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:96:af:e1:58:7f:04:24:bc:87:84:1e:e6:89: 97:5f:bc:b5:1d:d0:bc:5b:9e:fa:90:f8:d6:8c:2c: 54:d9:35:27:d6:eb:66:69:26:66:01:59:71:4e:b1: 0d:97:75:8a:a5:1d:17:3f:8e:28:13:ea:cb:26:4b: 78:10:06:03:69:fc:60:6a:03:28:41:5a:96:c4:c9: 45:30:c3:c1:b2:12:3f:52:f2:4e:12:75:70:db:fb: 9c:d0:dc:cb:cc:fe:34:ad:50:78:99:2a:6f:30:52: 7a:d8:4b:93:4e:e3:b1:c0:df:c1:b2:16:49:a9:b7: 43:cf:b3:22:ed:0a:f0:91:9a:df:bc:ec:3b:de:a3: 7c:d1:99:dc:e5:9f:a1:ad:ae:d3:d3:8d:32:d7:c3: b8:3a:93:8d:71:65:43:4b:d3:f1:ad:de:c7:ae:91: aa:b4:e0:ae:b3:15:5f:3b:7e:0e:b4:20:13:b9:e0: bb:c6:55:39:35:85:fa:a3:59:bf:68:3c:98:73:de: c5:d2:d8:0f:23:60:84:40:df:26:48:41:4f:33:bf: 54:78:67:71:55:42:a5:6d:ac:9f:67:60:6b:84:61: 59:da:48:ef:8e:26:6f:5c:5b:bc:e5:98:98:24:79: 4d:4c:0c:2a:4f:be:5a:2f:b0:4b:54:a4:89:00:3d: 17:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:53:1B:0C:F0:7D:2E:02:E8:3C:92:1D:49:AA:AD:06:B9:D4:40:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcb7912b-a3b7-3838-88c8-0be85e2d4066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1a:08:58:4f:6c:79:35:af:93:f2:24:a1:e3:97:11:ba:a4: 72:b4:5c:e7:a1:d6:c1:8c:06:2f:b2:39:06:d1:f6:ce:3a:83: 79:87:87:08:27:c9:85:a8:b3:dd:c6:fb:2e:ff:96:46:71:dc: cf:d9:f5:c0:b9:34:34:1d:b5:a3:31:66:a8:1b:77:dd:27:2e: 50:c1:06:37:75:5a:f2:f6:e3:71:96:48:4b:c2:14:42:27:09: 39:38:06:0b:28:49:3f:99:1e:d3:70:05:f7:af:e5:97:d8:17: 40:39:73:4d:95:4d:06:29:eb:1b:37:d3:96:0a:32:15:bd:7f: df:5e:b7:62:c1:76:55:2b:03:b5:23:15:c3:0c:39:4d:a9:ec: 83:0b:ce:00:57:07:24:0f:c0:c1:f6:1f:a5:39:ac:61:e5:6c: e8:04:43:28:58:51:e6:65:b4:a5:2c:97:d5:dc:af:a4:cb:81: 89:dd:55:b1:dd:4a:d2:ea:d6:8f:24:84:f4:4b:35:98:61:db: b5:23:26:39:7d:8b:87:66:79:77:0c:d4:9c:6e:64:05:7e:8a: 79:dd:cd:b1:83:57:b3:1d:a4:97:db:7e:60:20:e2:65:a8:0e: a2:e9:f7:af:03:20:98:be:66:af:73:5e:bf:b0:e4:da:73:cb: 80:08:59:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmWxKhFgiIYpwgsccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk Y2UzNTRiY2ItNzA0Ny00YWIyLWFlOWUtNjU0NjJhNzM4MGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZav4Vh/BCS8h4Qe5omXX7y1HdC8W576kPjW jCxU2TUn1utmaSZmAVlxTrENl3WKpR0XP44oE+rLJkt4EAYDafxgagMoQVqWxMlF MMPBshI/UvJOEnVw2/uc0NzLzP40rVB4mSpvMFJ62EuTTuOxwN/BshZJqbdDz7Mi 7QrwkZrfvOw73qN80Znc5Z+hra7T040y18O4OpONcWVDS9Pxrd7HrpGqtOCusxVf O34OtCATueC7xlU5NYX6o1m/aDyYc97F0tgPI2CEQN8mSEFPM79UeGdxVUKlbayf Z2BrhGFZ2kjvjiZvXFu85ZiYJHlNTAwqT75aL7BLVKSJAD0XEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKdTGwzwfS4C6DySHUmqrQa51EAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmNiNzkxMmItYTNiNy0z ODM4LTg4YzgtMGJlODVlMmQ0MDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAzGghYT2x5Na+T8iSh45cRuqRytFznodbBjAYvsjkG0fbOOoN5h4cI J8mFqLPdxvsu/5ZGcdzP2fXAuTQ0HbWjMWaoG3fdJy5QwQY3dVry9uNxlkhLwhRC Jwk5OAYLKEk/mR7TcAX3r+WX2BdAOXNNlU0GKesbN9OWCjIVvX/fXrdiwXZVKwO1 IxXDDDlNqeyDC84AVwckD8DB9h+lOaxh5WzoBEMoWFHmZbSlLJfV3K+ky4GJ3VWx 3UrS6taPJIT0SzWYYdu1IyY5fYuHZnl3DNScbmQFfop53c2xg1ezHaSX235gIOJl qA6i6fevAyCYvmavc16/sOTac8uACFlZ -----END CERTIFICATE-----Generated at Sat Apr 26 21:24:49 2025 by rpki-client