$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c358bafc-dd64-36da-99f4-9718f68a72a3.roa File: c358bafc-dd64-36da-99f4-9718f68a72a3.roa (raw, json) Hash identifier: 6v/mu3LD8OoDHT1Mu6v0ldKfKOGu/awT1NOqFeVH27U= Subject key identifier: 67:1A:BA:F6:0D:55:7B:97:C8:40:BB:98:0C:B3:14:46:CA:68:42:73 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849FF758CFD05A1545EBE20B480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c358bafc-dd64-36da-99f4-9718f68a72a3.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 396595 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:8c:fd:05:a1:54:5e:be:20:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=a5da7e14-a75e-4f9d-9b57-b736df3e73c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:af:8e:72:31:18:d0:33:d7:14:d7:4f:48:25: 31:5f:77:a6:20:d1:fa:e6:be:58:86:68:43:86:7f: bc:6d:2b:d9:28:ce:0a:2c:d2:fe:c7:96:f5:d7:11: 0d:8a:2a:04:13:1a:49:54:3a:4c:d6:50:5e:38:af: 8b:67:33:33:04:f9:13:86:25:07:a8:7f:11:dd:d9: 12:47:58:7e:04:47:de:9f:47:1c:fc:7c:4e:c8:b6: 95:2f:95:ab:da:3c:b5:c7:23:54:f0:e5:15:ce:9f: 46:a4:b9:25:7b:1d:3d:f1:90:2a:80:e7:25:e4:15: 0f:e3:0b:3b:10:20:9e:d6:ab:c8:89:f2:cf:38:eb: 17:a9:b4:b7:5c:30:9a:ac:88:38:81:0d:59:74:c4: d7:d4:62:62:d9:06:18:92:6c:19:c7:d3:b9:01:02: 51:47:b5:e6:fa:e9:9c:8c:7d:d0:40:4e:0f:6b:f7: c3:4f:1e:d7:a5:e5:7d:9d:18:fd:6b:1b:de:b3:b0: 82:63:83:4c:5d:28:34:c5:00:67:ff:0b:57:c8:0f: d1:e2:e5:c0:41:45:a7:30:46:78:0a:ce:4b:44:6a: 05:32:40:7c:88:ee:b5:f7:70:02:e5:4e:cb:f3:0e: 18:ee:62:5f:20:42:76:cd:53:df:b3:8b:48:a8:6f: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1A:BA:F6:0D:55:7B:97:C8:40:BB:98:0C:B3:14:46:CA:68:42:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c358bafc-dd64-36da-99f4-9718f68a72a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:64:f3:20:bb:a5:d5:05:4a:ae:85:ce:02:82:68:8f:f2:f6: c1:d0:89:e2:d4:8c:ec:e9:3b:a2:96:38:f5:fa:de:02:b2:b8: 18:aa:67:ca:61:66:66:86:4a:29:56:fd:ed:fe:d0:f8:8e:11: 8d:86:fd:7b:af:83:9a:99:26:16:c5:37:41:39:df:18:c6:2b: 16:bc:77:bf:b9:47:4b:51:02:cc:95:17:3b:96:fd:65:a9:48: 1e:74:cc:f8:5b:ba:4b:b4:cf:1a:0b:3c:af:ab:56:8e:d5:98: 63:fb:3d:e0:3e:13:ef:7d:5d:71:68:cf:7e:0b:9f:59:ca:42: fa:6c:19:4d:02:56:af:ac:fb:be:17:e6:70:f0:81:9e:42:ea: f3:76:97:a4:5e:6c:41:e5:7d:10:a1:14:ee:ed:41:8a:cd:76: 80:3e:60:54:22:ea:95:3f:55:ac:60:a9:db:b6:06:25:70:dc: 0c:d5:87:48:8a:16:35:6b:13:d8:20:0b:a7:27:b6:4e:ca:20: 56:d1:b1:a2:1f:32:5c:dd:fe:86:a4:98:c6:97:c3:6c:a1:e5: 8b:36:e9:b2:cf:42:ac:59:0c:cd:a6:15:bd:3f:b8:95:29:13: de:4d:36:4a:50:6b:db:b8:62:84:b9:3c:49:57:da:ce:5e:45: a8:34:97:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn/dYz9BaFUXr4gtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk YTVkYTdlMTQtYTc1ZS00ZjlkLTliNTctYjczNmRmM2U3M2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha+OcjEY0DPXFNdPSCUxX3emINH65r5YhmhD hn+8bSvZKM4KLNL+x5b11xENiioEExpJVDpM1lBeOK+LZzMzBPkThiUHqH8R3dkS R1h+BEfen0cc/HxOyLaVL5Wr2jy1xyNU8OUVzp9GpLklex098ZAqgOcl5BUP4ws7 ECCe1qvIifLPOOsXqbS3XDCarIg4gQ1ZdMTX1GJi2QYYkmwZx9O5AQJRR7Xm+umc jH3QQE4Pa/fDTx7XpeV9nRj9axves7CCY4NMXSg0xQBn/wtXyA/R4uXAQUWnMEZ4 Cs5LRGoFMkB8iO6193AC5U7L8w4Y7mJfIEJ2zVPfs4tIqG9NRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGcauvYNVXuXyEC7mAyzFEbKaEJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzM1OGJhZmMtZGQ2NC0z NmRhLTk5ZjQtOTcxOGY2OGE3MmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFZPMgu6XVBUquhc4CgmiP8vbB0Ini1Izs6Tuiljj1+t4CsrgYqmfK YWZmhkopVv3t/tD4jhGNhv17r4OamSYWxTdBOd8YxisWvHe/uUdLUQLMlRc7lv1l qUgedMz4W7pLtM8aCzyvq1aO1Zhj+z3gPhPvfV1xaM9+C59ZykL6bBlNAlavrPu+ F+Zw8IGeQurzdpekXmxB5X0QoRTu7UGKzXaAPmBUIuqVP1WsYKnbtgYlcNwM1YdI ihY1axPYIAunJ7ZOyiBW0bGiHzJc3f6GpJjGl8NsoeWLNumyz0KsWQzNphW9P7iV KRPeTTZKUGvbuGKEuTxJV9rOXkWoNJdK -----END CERTIFICATE-----Generated at Mon Jun 16 12:28:43 2025 by rpki-client