$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff583a2-eaff-39ed-a0d3-24bb34e39550.roa File: cff583a2-eaff-39ed-a0d3-24bb34e39550.roa (raw, json) Hash identifier: FtXnjz/w1jnGtHmRlow6ciUHmNCqJEuB6pPIxKEcmag= Subject key identifier: B0:A7:59:31:86:A2:D3:50:8B:68:14:48:FB:A4:E6:53:E6:E9:07:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584996C4AAE7DF42D8E839725870 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff583a2-eaff-39ed-a0d3-24bb34e39550.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 20172 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:aa:e7:df:42:d8:e8:39:72:58:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=42ed06b2-8534-4d54-8ff2-64ecf73a1259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:7a:b8:67:d0:1e:d3:e1:d6:31:b1:c1:1e: c1:60:1a:18:0d:53:41:d6:a0:5d:ff:3f:45:6b:2c: 67:4b:96:95:99:27:8d:cf:52:7e:8e:f3:b0:1d:35: 19:7b:a4:b8:d9:ba:17:30:62:56:13:f4:36:39:74: 5f:33:a5:de:ea:0e:73:c2:e4:bf:e6:13:3c:8d:d0: f2:33:ea:c8:41:13:78:79:e0:78:8f:fd:88:b0:0b: 76:e8:6d:1a:e1:9b:63:f2:a8:52:b5:64:fc:7c:1f: 84:ae:58:f2:ff:8c:63:a7:b8:63:06:a1:04:8f:2d: 92:54:0e:cc:c6:97:86:56:d3:17:9e:cb:d7:68:3a: f1:89:d1:ec:bd:4b:70:6d:8b:ca:0c:44:43:fa:48: 8e:5e:a4:98:af:9e:50:06:16:57:33:35:2b:97:18: 85:99:68:bd:7d:70:dd:54:13:7a:be:1e:ec:fb:ab: 9d:16:f7:fb:a6:64:9f:71:4b:67:d6:c6:2a:e7:32: 9b:bb:d0:5a:bd:f1:c0:42:1f:e5:1c:80:b8:0a:5e: 18:2e:c5:77:4b:28:37:35:fe:40:ec:14:bb:a2:0d: 2a:08:88:90:7a:02:11:a9:2d:72:54:79:4b:ba:ff: 2e:90:99:3c:c1:95:74:cc:00:9f:a6:32:bc:95:bd: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A7:59:31:86:A2:D3:50:8B:68:14:48:FB:A4:E6:53:E6:E9:07:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff583a2-eaff-39ed-a0d3-24bb34e39550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:38:61:a4:5a:23:bd:58:94:fe:09:46:7d:03:e7:97:60:d3: 1d:58:6e:c8:fa:4c:b4:f4:85:3d:0d:7a:5d:05:77:d1:1d:fc: 19:01:0c:28:f5:9e:22:80:8e:08:0e:19:61:11:0d:9a:be:da: 7a:ed:0a:fb:19:b9:cf:f2:d5:3e:95:75:0c:00:c2:39:c1:64: 90:f4:e7:86:07:d4:33:4f:5a:86:95:a9:8b:bf:18:fc:f5:ca: 3f:38:a9:df:79:51:b3:19:42:b2:57:c0:a9:9f:c5:39:11:70: df:ce:64:82:ce:43:5d:c4:4b:e9:3c:03:45:91:9e:a5:c1:01: 5b:b2:99:22:34:ca:c1:8d:e7:ad:cb:7e:af:80:b2:3d:63:2d: e7:9c:10:8e:40:81:41:54:a0:30:c9:29:53:7e:2b:f2:df:d9: 29:f7:56:be:5a:ec:ab:45:5d:ed:2d:5f:73:64:d2:5a:54:a8: c1:7d:74:9b:47:07:0a:34:01:7a:7c:5c:d5:4d:7b:e5:50:cd: 6a:a3:66:02:b4:f1:65:dd:0d:59:84:76:1d:ae:72:7c:35:9c: 56:18:f7:74:22:69:b6:81:54:18:6e:13:e5:6c:16:65:d8:85: 38:a9:b8:4f:68:80:10:c3:31:4a:8e:c0:82:b8:41:0e:2b:11: bc:fe:83:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmWxKrn30LY6DlyWHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NDJlZDA2YjItODUzNC00ZDU0LThmZjItNjRlY2Y3M2ExMjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DV6uGfQHtPh1jGxwR7BYBoYDVNB1qBd/z9F ayxnS5aVmSeNz1J+jvOwHTUZe6S42boXMGJWE/Q2OXRfM6Xe6g5zwuS/5hM8jdDy M+rIQRN4eeB4j/2IsAt26G0a4Ztj8qhStWT8fB+Erljy/4xjp7hjBqEEjy2SVA7M xpeGVtMXnsvXaDrxidHsvUtwbYvKDERD+kiOXqSYr55QBhZXMzUrlxiFmWi9fXDd VBN6vh7s+6udFvf7pmSfcUtn1sYq5zKbu9BavfHAQh/lHIC4Cl4YLsV3Syg3Nf5A 7BS7og0qCIiQegIRqS1yVHlLuv8ukJk8wZV0zACfpjK8lb0YqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLCnWTGGotNQi2gUSPuk5lPm6Qc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZmNTgzYTItZWFmZi0z OWVkLWEwZDMtMjRiYjM0ZTM5NTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAROGGkWiO9WJT+CUZ9A+eXYNMdWG7I+ky09IU9DXpdBXfRHfwZAQwo 9Z4igI4IDhlhEQ2avtp67Qr7GbnP8tU+lXUMAMI5wWSQ9OeGB9QzT1qGlamLvxj8 9co/OKnfeVGzGUKyV8Cpn8U5EXDfzmSCzkNdxEvpPANFkZ6lwQFbspkiNMrBjeet y36vgLI9Yy3nnBCOQIFBVKAwySlTfivy39kp91a+WuyrRV3tLV9zZNJaVKjBfXSb RwcKNAF6fFzVTXvlUM1qo2YCtPFl3Q1ZhHYdrnJ8NZxWGPd0Imm2gVQYbhPlbBZl 2IU4qbhPaIAQwzFKjsCCuEEOKxG8/oNp -----END CERTIFICATE-----Generated at Mon Apr 28 08:36:42 2025 by rpki-client