$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d32fe2c1-6fa5-311a-8c99-b9134dd664e3.roa File: d32fe2c1-6fa5-311a-8c99-b9134dd664e3.roa (raw, json) Hash identifier: 3MljmqFiQvLJxy1gClrqpU6hOyjTOOoyk0STGZq9OuU= Subject key identifier: 9A:2C:5E:81:F5:37:B9:27:45:5C:AB:34:BB:97:43:65:0D:E2:B6:5D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584996C4AF3B622E644A83F87900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d32fe2c1-6fa5-311a-8c99-b9134dd664e3.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 396572 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:af:3b:62:2e:64:4a:83:f8:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=96b5bd97-511f-48af-af57-ed4a19536299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:4e:5a:f0:2f:4d:6b:04:11:36:54:71:58: c6:d8:66:7c:15:56:b6:f3:74:61:99:c5:ca:6e:aa: 85:2f:fa:62:3f:e0:17:9f:3a:0b:cf:89:08:b4:73: 99:79:7e:8d:8a:1b:0c:5d:32:d3:02:53:76:f1:db: 7d:c0:ca:13:77:ae:96:f8:69:d6:ed:0c:42:bb:ed: 33:8a:18:ae:45:33:7c:5e:40:e4:64:91:1d:c4:0a: 62:96:0e:c1:4c:7a:4a:82:46:c7:f7:b3:53:8a:11: d0:f7:9d:65:2b:f3:9f:5e:c6:24:9a:82:2e:b1:df: 6d:4a:d6:1e:6c:2c:f2:09:e1:71:ab:98:de:45:e3: a1:1a:0e:f7:c0:59:f2:0d:93:ea:7c:4b:e5:49:f9: c1:fc:90:7d:01:93:2b:6b:37:26:57:70:cf:6c:fa: 52:2f:89:33:47:f8:b4:0c:1e:3f:0d:19:8a:c6:09: b4:65:7f:88:a0:81:e8:cf:2c:f8:f4:6e:76:b2:2e: 89:f4:14:c8:56:84:f8:f2:2f:48:3f:f6:f4:09:96: b9:a8:72:df:1d:2b:1e:ad:1b:42:0f:26:11:53:b8: 7c:37:d2:7b:9b:59:90:06:45:0f:21:9a:bc:89:fc: fc:a0:dd:de:22:88:b7:79:46:06:f2:55:a1:ab:3d: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2C:5E:81:F5:37:B9:27:45:5C:AB:34:BB:97:43:65:0D:E2:B6:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d32fe2c1-6fa5-311a-8c99-b9134dd664e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0e:d2:47:05:aa:a6:ce:56:13:8f:ec:9a:d4:fe:bb:73:6b: ad:7c:2d:f1:cc:ce:ae:55:c4:3b:89:a3:b7:8f:18:d1:fc:14: 90:09:83:6c:9b:0f:11:58:1f:1d:ad:8a:41:e5:21:67:89:38: 75:c9:47:18:3d:38:c6:f1:db:5c:52:d8:bc:00:e8:51:8d:26: 4e:87:4d:8f:02:bb:65:38:d3:82:07:33:d4:f5:7b:0f:69:27: 4e:ef:e6:5f:22:19:be:d4:0a:9d:28:98:86:5f:0a:8b:ba:86: f2:73:fb:c8:a8:fd:81:fd:16:21:52:4c:e1:f9:71:fe:cd:c4: db:6a:aa:08:08:5d:bb:31:36:2a:03:07:80:ce:aa:06:e6:a1: f7:4e:e2:31:f3:77:e1:35:0b:f5:d0:be:a0:9c:c1:b6:27:db: 8c:b8:82:32:bf:0e:4f:3b:bc:47:15:03:96:aa:b4:ad:9b:93: f0:2c:ba:20:e0:e1:2b:b5:99:cc:60:25:3e:fb:f0:cd:13:b0: f1:e0:92:d3:21:4d:3e:1e:a8:91:dc:8e:86:5d:a9:67:73:79: 26:fa:10:14:f0:ca:a4:7d:3b:43:15:33:85:1d:44:af:5c:f4: ca:d6:ca:74:3d:5e:4c:23:b1:a9:3d:d9:a7:db:b2:5d:e2:5d: 29:b0:9e:36 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmWxK87Yi5kSoP4eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk OTZiNWJkOTctNTExZi00OGFmLWFmNTctZWQ0YTE5NTM2Mjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQFOWvAvTWsEETZUcVjG2GZ8FVa283RhmcXK bqqFL/piP+AXnzoLz4kItHOZeX6NihsMXTLTAlN28dt9wMoTd66W+GnW7QxCu+0z ihiuRTN8XkDkZJEdxApilg7BTHpKgkbH97NTihHQ951lK/OfXsYkmoIusd9tStYe bCzyCeFxq5jeReOhGg73wFnyDZPqfEvlSfnB/JB9AZMrazcmV3DPbPpSL4kzR/i0 DB4/DRmKxgm0ZX+IoIHozyz49G52si6J9BTIVoT48i9IP/b0CZa5qHLfHSserRtC DyYRU7h8N9J7m1mQBkUPIZq8ifz8oN3eIoi3eUYG8lWhqz0FvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJosXoH1N7knRVyrNLuXQ2UN4rZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDMyZmUyYzEtNmZhNS0z MTFhLThjOTktYjkxMzRkZDY2NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxDtJHBaqmzlYTj+ya1P67c2utfC3xzM6uVcQ7iaO3jxjR/BSQCYNs mw8RWB8drYpB5SFniTh1yUcYPTjG8dtcUti8AOhRjSZOh02PArtlONOCBzPU9XsP aSdO7+ZfIhm+1AqdKJiGXwqLuobyc/vIqP2B/RYhUkzh+XH+zcTbaqoICF27MTYq AweAzqoG5qH3TuIx83fhNQv10L6gnMG2J9uMuIIyvw5PO7xHFQOWqrStm5PwLLog 4OErtZnMYCU++/DNE7Dx4JLTIU0+HqiR3I6GXalnc3km+hAU8MqkfTtDFTOFHUSv XPTK1sp0PV5MI7GpPdmn27Jd4l0psJ42 -----END CERTIFICATE-----Generated at Sun Apr 27 13:03:43 2025 by rpki-client