$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7e0c1ef-b358-3716-abb6-8954f364ed2b.roa File: d7e0c1ef-b358-3716-abb6-8954f364ed2b.roa (raw, json) Hash identifier: wXQYs0MfsctP44RG/Z9RbxMuL940uD+xKVrlvai21eI= Subject key identifier: 55:DA:2E:AA:93:7D:F9:84:69:EA:97:F6:38:86:45:87:0A:BA:96:A0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584993FA008E549E3C10E4E7DF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7e0c1ef-b358-3716-abb6-8954f364ed2b.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 396616 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:00:8e:54:9e:3c:10:e4:e7:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=52620d24-9289-4b40-a3ee-b5bddd715283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:78:be:07:12:3c:2b:3a:a1:4b:7b:6f:51: 16:b3:b0:72:a0:f7:5f:0c:bf:7a:2b:84:4e:d2:34: 9a:b0:71:66:27:ec:d4:17:ca:09:a4:8b:eb:0e:ab: ad:07:92:31:db:be:d2:5a:c3:9d:49:f5:81:f7:ef: 98:2f:2f:73:85:90:3b:75:ff:95:a6:7d:f4:3d:6a: 71:0b:c8:e4:58:50:72:d3:60:7f:33:cc:66:9e:bd: ab:13:5f:01:31:00:26:84:8f:a7:b4:06:c8:6f:d7: d8:27:f9:2a:ee:38:b7:88:36:0d:03:f9:1e:4c:26: 44:90:36:fd:81:3e:29:8e:fd:47:3b:5d:82:79:26: 5f:26:76:47:d4:7c:18:21:16:83:10:fd:a3:f5:dd: d6:df:92:69:9a:f3:c6:49:f9:21:c3:32:68:5c:70: eb:c5:1e:ae:11:ea:f7:63:39:3e:9e:60:13:26:71: 14:b7:44:96:bf:4c:e8:1a:61:d9:e4:78:27:cb:2a: 0e:b1:ca:64:3e:54:84:c1:6d:97:45:09:1c:a3:9f: 37:5a:38:3f:56:af:82:6b:c0:c3:71:0a:76:8a:05: b6:ec:7a:d8:e0:47:ca:f0:fa:a9:38:b6:9c:ad:ef: dc:87:b3:cd:16:1b:fc:8f:ff:72:6e:59:96:a1:7b: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DA:2E:AA:93:7D:F9:84:69:EA:97:F6:38:86:45:87:0A:BA:96:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7e0c1ef-b358-3716-abb6-8954f364ed2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c4:85:7f:f5:53:99:01:be:2d:3d:4c:d4:4e:83:08:9e:c0: 32:fa:ad:86:2e:49:f2:bd:66:b0:0d:df:6f:c7:ad:1b:cf:15: 2a:77:d7:de:33:16:c2:ca:2e:f5:7e:c3:8a:58:77:fa:23:82: d8:0b:7d:ca:dc:f6:96:3c:bd:46:d3:c2:49:20:34:b6:63:1d: 29:ba:d1:1d:cd:bc:5d:e4:cb:ee:2c:ce:45:da:da:21:35:f2: fa:95:fe:2d:e6:95:fa:a8:b1:75:30:51:3d:9a:cd:bd:b8:cc: 17:30:b3:4f:aa:cd:77:eb:01:ac:5a:0e:c2:43:d2:e4:7a:ba: d4:7d:86:b6:3d:62:6e:81:37:34:3f:4a:1c:b4:53:ba:67:7f: 68:61:8a:4a:ca:21:27:15:c8:47:d7:49:23:e1:62:f0:8d:c3: cf:48:71:dc:49:c0:7a:59:c6:de:5a:21:be:db:23:1f:04:03: 00:97:ca:26:f5:b1:3f:19:70:bb:39:f5:78:20:e3:cd:e9:b7: 34:02:b0:5a:13:81:c0:50:65:07:d6:cd:e7:ad:25:fe:a8:93: 83:c7:3a:2c:53:05:b9:f4:5c:ed:e6:eb:6e:cd:49:9d:6d:11: c9:a4:3f:4c:7c:2c:0b:4e:0f:1d:6b:8d:cb:82:e8:90:d1:62: 36:be:1a:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+gCOVJ48EOTn34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NTI2MjBkMjQtOTI4OS00YjQwLWEzZWUtYjViZGRkNzE1MjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmt4vgcSPCs6oUt7b1EWs7ByoPdfDL96K4RO 0jSasHFmJ+zUF8oJpIvrDqutB5Ix277SWsOdSfWB9++YLy9zhZA7df+Vpn30PWpx C8jkWFBy02B/M8xmnr2rE18BMQAmhI+ntAbIb9fYJ/kq7ji3iDYNA/keTCZEkDb9 gT4pjv1HO12CeSZfJnZH1HwYIRaDEP2j9d3W35JpmvPGSfkhwzJoXHDrxR6uEer3 Yzk+nmATJnEUt0SWv0zoGmHZ5HgnyyoOscpkPlSEwW2XRQkco583Wjg/Vq+Ca8DD cQp2igW27HrY4EfK8PqpOLacre/ch7PNFhv8j/9yblmWoXsHcQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFXaLqqTffmEaeqX9jiGRYcKupagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDdlMGMxZWYtYjM1OC0z NzE2LWFiYjYtODk1NGYzNjRlZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6xIV/9VOZAb4tPUzUToMInsAy+q2GLknyvWawDd9vx60bzxUqd9fe MxbCyi71fsOKWHf6I4LYC33K3PaWPL1G08JJIDS2Yx0putEdzbxd5MvuLM5F2toh NfL6lf4t5pX6qLF1MFE9ms29uMwXMLNPqs136wGsWg7CQ9LkerrUfYa2PWJugTc0 P0octFO6Z39oYYpKyiEnFchH10kj4WLwjcPPSHHcScB6WcbeWiG+2yMfBAMAl8om 9bE/GXC7OfV4IOPN6bc0ArBaE4HAUGUH1s3nrSX+qJODxzosUwW59Fzt5utuzUmd bRHJpD9MfCwLTg8da43LguiQ0WI2vhrk -----END CERTIFICATE-----Generated at Sat Apr 26 22:57:26 2025 by rpki-client