$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4b7804e-bcbc-31b1-b2e3-9a3a102f4bd6.roa File: c4b7804e-bcbc-31b1-b2e3-9a3a102f4bd6.roa (raw, json) Hash identifier: oBqynmPpGrQAzQJB8J401ostwKofQw32+FywfYhMi54= Subject key identifier: E8:02:E6:AF:00:79:48:AA:DB:F3:EE:58:DA:D5:7F:EC:5A:93:4E:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584993F9FE9B91C607853FCB2780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4b7804e-bcbc-31b1-b2e3-9a3a102f4bd6.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 397201 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:fe:9b:91:c6:07:85:3f:cb:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=14bcace9-8ad6-4a0c-b98c-69c78d94b82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:61:01:d6:70:03:21:bb:65:96:8e:0f:a1:12: 30:e4:17:b6:32:66:6c:4d:c7:bd:32:7f:83:b7:9e: b1:c7:ef:1c:e2:aa:b9:66:be:f1:64:94:16:cd:c8: b4:bb:41:eb:4d:b5:58:22:65:fe:20:59:fe:94:6f: 37:cd:13:3a:39:b5:e9:a6:55:3c:06:7d:bf:94:8a: 8a:36:c4:bf:f3:73:52:24:19:1c:b7:f9:4e:aa:4a: 3c:3c:2f:9c:2b:38:fe:65:95:a7:11:00:79:0e:4a: f4:46:c3:d8:b8:ac:32:7f:e4:49:fa:af:16:a1:e3: 51:a0:d1:34:62:64:0d:e4:19:cd:2c:55:39:ad:37: 0e:91:4b:0f:13:87:f8:77:c0:2d:de:15:1f:57:37: 8a:af:0d:7f:ad:62:d2:d3:5e:09:a4:3d:fe:b7:45: be:15:d1:f7:76:82:ba:57:53:e4:21:3a:ab:a6:5d: 74:8d:d2:a3:1a:c5:19:d7:5f:d8:f6:04:b3:17:6d: 75:b5:9e:fc:35:72:99:ea:69:e4:13:c7:5e:45:1d: 9f:41:ac:cb:23:c0:9b:c2:7b:11:0a:90:2c:aa:0b: 87:03:88:e2:ea:0d:c4:07:91:60:5c:3b:42:9e:71: d2:99:be:02:a0:0e:bc:18:2b:21:6e:ca:e9:29:fd: 92:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:02:E6:AF:00:79:48:AA:DB:F3:EE:58:DA:D5:7F:EC:5A:93:4E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4b7804e-bcbc-31b1-b2e3-9a3a102f4bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9b:6a:6c:2a:16:df:69:83:71:12:36:ad:d8:59:0a:b4:18: d2:24:ba:76:95:51:9d:bc:ff:da:22:c8:bd:52:18:87:01:83: 5e:ce:10:59:b1:42:fe:1b:0d:d5:08:10:96:a3:51:7c:ee:a0: 53:04:f8:1a:1d:5d:2d:9e:ee:b3:e3:8b:46:ad:89:1c:65:8e: 74:f6:69:1d:13:5f:72:f4:4e:4a:1b:4a:91:c7:6e:dd:35:61: 29:0d:2a:44:92:3b:ea:b0:2d:83:08:8e:84:8d:17:c4:95:a0: 60:02:ad:42:93:e2:df:49:67:21:83:b2:d8:c6:fc:74:a9:14: e4:cf:8d:54:03:da:08:73:0c:62:17:c2:21:83:8b:23:70:b0: 3a:ee:2b:bd:a3:d2:cb:64:1d:b8:40:4b:13:8a:a5:5d:30:88: 6e:61:99:a5:e5:03:4e:25:9a:47:4c:90:e1:a6:06:01:a1:c5: 4e:a8:fe:2b:33:50:4a:14:8b:6e:18:bd:0d:41:c3:19:22:df: 7e:db:13:28:c7:f8:86:b1:c2:d1:f4:5b:17:fb:62:e0:16:1d: b0:34:c4:06:f0:68:bb:72:83:17:36:c8:a1:cc:8d:41:5b:21: 34:b1:70:8a:2a:62:be:15:07:de:a1:06:b2:a6:31:f3:4c:42: 04:0a:4e:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+f6bkcYHhT/LJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MTRiY2FjZTktOGFkNi00YTBjLWI5OGMtNjljNzhkOTRiODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimEB1nADIbtllo4PoRIw5Be2MmZsTce9Mn+D t56xx+8c4qq5Zr7xZJQWzci0u0HrTbVYImX+IFn+lG83zRM6ObXpplU8Bn2/lIqK NsS/83NSJBkct/lOqko8PC+cKzj+ZZWnEQB5Dkr0RsPYuKwyf+RJ+q8WoeNRoNE0 YmQN5BnNLFU5rTcOkUsPE4f4d8At3hUfVzeKrw1/rWLS014JpD3+t0W+FdH3doK6 V1PkITqrpl10jdKjGsUZ11/Y9gSzF211tZ78NXKZ6mnkE8deRR2fQazLI8CbwnsR CpAsqguHA4ji6g3EB5FgXDtCnnHSmb4CoA68GCshbsrpKf2SBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOgC5q8AeUiq2/PuWNrVf+xak06LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzRiNzgwNGUtYmNiYy0z MWIxLWIyZTMtOWEzYTEwMmY0YmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABm2psKhbfaYNxEjat2FkKtBjSJLp2lVGdvP/aIsi9UhiHAYNezhBZ sUL+Gw3VCBCWo1F87qBTBPgaHV0tnu6z44tGrYkcZY509mkdE19y9E5KG0qRx27d NWEpDSpEkjvqsC2DCI6EjRfElaBgAq1Ck+LfSWchg7LYxvx0qRTkz41UA9oIcwxi F8Ihg4sjcLA67iu9o9LLZB24QEsTiqVdMIhuYZml5QNOJZpHTJDhpgYBocVOqP4r M1BKFItuGL0NQcMZIt9+2xMox/iGscLR9FsX+2LgFh2wNMQG8Gi7coMXNsihzI1B WyE0sXCKKmK+FQfeoQaypjHzTEIECk4n -----END CERTIFICATE-----Generated at Sun Apr 27 15:54:16 2025 by rpki-client