$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbaa2634-c105-36dd-a5af-e9683f6c572c.roa File: dbaa2634-c105-36dd-a5af-e9683f6c572c.roa (raw, json) Hash identifier: tTvJf0mlhfRyODL6a7DoKOIqJ5VRTmjZP4UM8Tlitbg= Subject key identifier: B8:AD:8C:44:A5:CF:CF:97:6C:73:46:7D:4F:A8:3B:86:A8:46:85:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AA4F5EA600A28C694577E680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbaa2634-c105-36dd-a5af-e9683f6c572c.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 397212 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:5e:a6:00:a2:8c:69:45:77:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=7b8cef3c-f4f8-4b19-92c6-43d9b1bea3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:02:7e:37:3e:37:85:ca:45:c5:61:33:9c:b2: a4:36:2d:87:2b:e1:db:31:7a:ec:76:91:35:a4:97: d3:5a:40:27:c4:ec:7f:3f:f6:f8:3f:6c:91:ae:21: 50:95:8a:9b:70:67:e2:0e:5a:ca:cd:fc:9f:20:c9: 2d:c3:fc:cd:cd:e2:0f:cf:57:7f:41:ec:b0:69:0c: 1f:6f:27:ed:12:02:7a:24:9b:5d:22:29:43:29:21: 55:ad:32:35:31:97:c9:66:c5:85:59:48:b4:57:c0: 47:d2:5b:d3:69:3d:95:f4:1b:f7:6f:14:54:c0:c3: 65:db:42:95:07:ed:e0:ae:1e:c0:cb:da:92:dd:b6: c9:e9:90:b2:34:89:1f:f0:8e:3c:33:00:05:3d:fd: f5:31:29:5a:35:99:38:c9:95:e3:b4:61:6a:8c:0f: 87:74:a9:bf:2d:12:36:b6:7b:fd:b5:25:a6:69:60: 89:95:26:58:be:54:4f:ff:99:19:e3:71:9f:c7:33: 7d:79:57:7e:fc:4f:b9:60:c2:ea:ec:91:9b:94:aa: ef:e4:38:bc:2a:2b:21:87:c5:6c:16:63:c2:50:e5: 18:7f:6b:4a:a0:b3:e8:b8:47:70:a6:53:3d:69:76: f8:c2:59:1f:7c:94:26:16:3c:a4:f7:46:9e:1b:91: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AD:8C:44:A5:CF:CF:97:6C:73:46:7D:4F:A8:3B:86:A8:46:85:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbaa2634-c105-36dd-a5af-e9683f6c572c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ad:d3:22:b7:00:bd:d8:02:69:2d:5e:99:04:ce:4f:6f:f4: a5:1d:5b:de:26:8b:ca:76:ca:03:27:85:bb:f1:55:33:48:60: d1:e9:6b:36:19:99:f8:df:12:d3:96:7a:d5:51:08:67:81:b5: bd:ff:19:7e:3c:eb:69:1c:2c:fa:0e:5c:7d:cd:33:1e:4d:24: 4e:ca:da:7e:19:fa:33:4e:1d:be:95:be:c4:69:98:29:9d:ab: 6b:e4:fe:7c:4d:aa:68:f4:cf:25:e5:e3:62:bf:bf:40:dc:80: c8:dd:82:7c:0d:32:2d:c7:ba:1f:19:5e:5a:00:9d:d4:60:b4: 13:86:58:d1:62:6e:da:d5:d0:63:70:47:9c:a3:78:44:9c:ec: 2a:d8:ea:d5:13:c7:47:61:d1:78:f5:ef:d1:b4:ad:50:65:ed: df:cd:d1:11:c2:0b:7a:56:4e:3a:e5:c8:6e:e5:bb:f4:a6:d4: e3:bd:f4:03:f3:3e:66:af:33:bb:7c:e4:4b:ee:a4:24:7f:60: d1:c8:3c:e1:30:ae:36:b5:d5:08:0f:19:51:13:7d:8a:78:27: b0:26:de:51:38:96:5c:04:1e:3f:e4:53:84:01:29:cd:a8:90: 09:c0:28:ba:05:96:56:06:a9:ec:2c:fc:a3:b0:f7:0c:c3:dc: 05:40:2b:c4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmqT16mAKKMaUV35oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk N2I4Y2VmM2MtZjRmOC00YjE5LTkyYzYtNDNkOWIxYmVhM2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwJ+Nz43hcpFxWEznLKkNi2HK+HbMXrsdpE1 pJfTWkAnxOx/P/b4P2yRriFQlYqbcGfiDlrKzfyfIMktw/zNzeIPz1d/QeywaQwf byftEgJ6JJtdIilDKSFVrTI1MZfJZsWFWUi0V8BH0lvTaT2V9Bv3bxRUwMNl20KV B+3grh7Ay9qS3bbJ6ZCyNIkf8I48MwAFPf31MSlaNZk4yZXjtGFqjA+HdKm/LRI2 tnv9tSWmaWCJlSZYvlRP/5kZ43GfxzN9eVd+/E+5YMLq7JGblKrv5Di8Kishh8Vs FmPCUOUYf2tKoLPouEdwplM9aXb4wlkffJQmFjyk90aeG5G6OQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLitjESlz8+XbHNGfU+oO4aoRoX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGJhYTI2MzQtYzEwNS0z NmRkLWE1YWYtZTk2ODNmNmM1NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBardMitwC92AJpLV6ZBM5Pb/SlHVveJovKdsoDJ4W78VUzSGDR6Ws2 GZn43xLTlnrVUQhngbW9/xl+POtpHCz6Dlx9zTMeTSROytp+GfozTh2+lb7EaZgp natr5P58Tapo9M8l5eNiv79A3IDI3YJ8DTItx7ofGV5aAJ3UYLQThljRYm7a1dBj cEeco3hEnOwq2OrVE8dHYdF49e/RtK1QZe3fzdERwgt6Vk465chu5bv0ptTjvfQD 8z5mrzO7fORL7qQkf2DRyDzhMK42tdUIDxlRE32KeCewJt5ROJZcBB4/5FOEASnN qJAJwCi6BZZWBqnsLPyjsPcMw9wFQCvE -----END CERTIFICATE-----Generated at Mon Apr 28 08:35:13 2025 by rpki-client