$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa File: f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa (raw, json) Hash identifier: oWjWuzzJzHohH/iebuby+IRoX3nAX7IF81x5KbkG7qs= Subject key identifier: 02:B5:52:D6:1C:08:74:C6:5F:09:FB:25:8F:EE:13:A9:A6:72:40:C0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849203C7FE54723E308BBC24600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 36621 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:7f:e5:47:23:e3:08:bb:c2:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=4e8520f9-d869-4068-b881-a29a9094ea53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:fc:e2:f8:a8:2e:73:aa:3f:84:e8:ae:9e: ed:e9:4b:d8:2c:0c:a9:60:72:b7:1a:01:44:09:67: 6f:6a:dd:9f:39:4c:4f:b4:16:78:87:c1:d1:51:e5: 88:fd:40:b1:44:a3:cd:30:46:60:3e:ac:57:0f:ea: 14:c5:e3:7b:e4:0b:72:e8:b6:1b:42:a8:db:31:10: bc:8a:a1:25:8e:38:ca:c1:46:30:33:3c:4a:cc:a5: 48:7e:52:e7:d7:ea:42:f1:67:b2:e9:cc:62:c0:96: 65:16:a8:f1:38:e0:f8:42:40:07:87:ab:b4:7a:31: e2:44:46:29:f5:5f:5e:ef:16:ee:8f:be:3b:36:a2: 9a:da:bf:d9:68:c5:2f:9d:52:29:6e:b0:68:00:9d: 67:21:5b:4d:22:40:b0:dc:00:3b:28:5c:a7:98:7c: 06:a4:07:8b:35:d7:72:4c:db:60:44:ce:24:6f:8b: 07:43:85:22:8e:af:b4:df:42:2e:1c:a8:a8:74:2a: 61:83:23:49:9a:c3:6a:29:0e:af:db:e3:2f:43:13: 7b:32:af:18:50:3b:04:5f:f0:7f:99:24:27:05:a3: 9b:bd:1e:77:31:5f:ae:f7:4b:f8:91:7e:33:88:f0: d9:38:34:ee:7a:f9:34:eb:45:66:36:fc:9f:d4:46: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B5:52:D6:1C:08:74:C6:5F:09:FB:25:8F:EE:13:A9:A6:72:40:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f3935-55a1-30c8-b61f-9b21a5cfa963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:d9:60:55:05:40:c6:07:af:bb:5f:bb:1e:5c:33:25:b0:c7: 09:64:79:e5:be:52:16:a4:65:2d:a0:ee:ab:0c:ec:f1:77:a0: fc:bb:5c:6a:5e:eb:8e:4c:34:00:c9:17:4b:be:f8:c0:b6:a3: 11:4d:a8:84:ad:94:c6:fb:23:40:ba:e0:73:9e:05:e3:18:76: e5:3e:73:48:e2:a6:7e:87:44:46:bc:33:28:33:c0:d0:f1:b3: 2c:75:44:94:a0:45:0d:44:22:65:a6:2b:e8:33:1c:21:9e:94: d6:5d:9b:e5:4e:1e:1c:df:43:51:03:17:76:62:ca:d5:93:9f: 61:ac:0e:10:51:62:a9:4d:72:6b:2d:ed:1c:b5:db:b5:43:dd: d6:ba:90:95:90:f8:87:b4:86:99:5d:4c:dd:0d:8a:70:cf:de: 69:e2:ea:b8:e7:47:25:82:0c:41:17:15:d8:c8:47:52:2b:4e: b8:7f:31:51:6c:cc:8d:c0:f2:4e:7b:cc:7f:b1:e1:df:6b:56: 32:56:b9:ea:3e:c9:9e:4c:fb:cc:c4:87:fd:6f:af:f3:10:95: af:a3:cf:72:dc:79:33:51:95:eb:8b:70:1d:66:78:16:c7:15: ed:2d:0a:93:31:f3:d5:b3:49:f0:17:e1:6d:d6:f3:34:85:ac: d8:37:8e:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkgPH/lRyPjCLvCRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk NGU4NTIwZjktZDg2OS00MDY4LWI4ODEtYTI5YTkwOTRlYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1b84vioLnOqP4Torp7t6UvYLAypYHK3GgFE CWdvat2fOUxPtBZ4h8HRUeWI/UCxRKPNMEZgPqxXD+oUxeN75Aty6LYbQqjbMRC8 iqEljjjKwUYwMzxKzKVIflLn1+pC8Wey6cxiwJZlFqjxOOD4QkAHh6u0ejHiREYp 9V9e7xbuj747NqKa2r/ZaMUvnVIpbrBoAJ1nIVtNIkCw3AA7KFynmHwGpAeLNddy TNtgRM4kb4sHQ4Uijq+030IuHKiodCphgyNJmsNqKQ6v2+MvQxN7Mq8YUDsEX/B/ mSQnBaObvR53MV+u90v4kX4ziPDZODTuevk060VmNvyf1EbOsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAK1UtYcCHTGXwn7JY/uE6mmckDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjA0ZjM5MzUtNTVhMS0z MGM4LWI2MWYtOWIyMWE1Y2ZhOTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCk2WBVBUDGB6+7X7seXDMlsMcJZHnlvlIWpGUtoO6rDOzxd6D8u1xq XuuOTDQAyRdLvvjAtqMRTaiErZTG+yNAuuBzngXjGHblPnNI4qZ+h0RGvDMoM8DQ 8bMsdUSUoEUNRCJlpivoMxwhnpTWXZvlTh4c30NRAxd2YsrVk59hrA4QUWKpTXJr Le0ctdu1Q93WupCVkPiHtIaZXUzdDYpwz95p4uq450clggxBFxXYyEdSK064fzFR bMyNwPJOe8x/seHfa1YyVrnqPsmeTPvMxIf9b6/zEJWvo89y3HkzUZXri3AdZngW xxXtLQqTMfPVs0nwF+Ft1vM0hazYN44b -----END CERTIFICATE-----Generated at Sun Apr 27 16:30:23 2025 by rpki-client