$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a680d3-9e85-377d-bd27-4cd07d84a280.roa File: f4a680d3-9e85-377d-bd27-4cd07d84a280.roa (raw, json) Hash identifier: JihaHicNr9P9BYMT2dpWpHGbfG+9qgOdpqOqwGHqBD8= Subject key identifier: AD:97:4B:78:E3:5B:12:21:73:84:11:ED:F2:8B:52:2E:0E:17:B2:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849203C7DAF5D836B129C52F800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a680d3-9e85-377d-bd27-4cd07d84a280.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 397202 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:7d:af:5d:83:6b:12:9c:52:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=9e2b49a5-0981-49ef-b9fa-609c56c19bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:28:c2:84:13:5a:fe:69:92:79:96:a7:f9: 68:b8:53:51:93:fe:6e:e1:73:15:ff:1d:27:98:6a: 33:fe:47:cb:6a:a7:9d:0d:36:73:ed:d4:4d:c5:f8: a7:7e:a8:8b:9b:95:2d:12:be:5a:9c:27:59:b4:79: 2c:c6:0b:95:69:46:b2:b4:8b:cd:f1:41:70:31:b4: 5e:e1:57:57:bc:54:3d:9d:c0:8b:97:06:47:ae:17: 72:88:48:80:dc:e3:96:c3:c8:5b:06:82:3f:2c:a9: 5e:e2:f5:7d:09:8b:ed:3f:f8:3b:ad:82:8e:d6:5e: 01:5c:16:a2:06:f0:1b:9c:e7:b0:7d:bb:c8:29:98: 12:88:41:52:aa:26:71:a5:0f:dd:04:55:7f:35:c2: 1a:f1:4a:c5:bc:c4:5f:7e:fc:38:b7:cd:cc:7c:30: ec:e6:35:6a:8f:62:54:e8:8d:84:62:a5:d9:03:95: d9:3b:13:60:02:bd:9a:71:13:91:ae:38:57:04:99: 0b:72:4a:f9:f5:cf:c2:4a:c3:97:8f:86:9b:92:b6: 1e:34:68:ee:c7:0c:ec:60:1a:da:21:00:5f:5d:fb: 27:5e:a7:bd:37:9f:b5:c8:21:a3:c3:84:d9:d6:94: 44:25:f7:f6:aa:54:6f:ce:e7:45:f2:2b:d8:65:31: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:97:4B:78:E3:5B:12:21:73:84:11:ED:F2:8B:52:2E:0E:17:B2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a680d3-9e85-377d-bd27-4cd07d84a280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:33:b2:9a:06:0d:de:fe:ae:7f:34:a0:54:9a:d3:1f:2d:bc: 54:70:7c:b7:6b:63:93:48:4f:2b:87:73:26:bb:be:b4:3c:5a: a8:2d:2b:14:19:d6:b7:13:73:bd:c2:3e:e5:07:8f:d3:59:33: ee:96:4d:e1:e2:f8:95:19:24:0e:2a:a0:03:c1:b3:00:df:1d: 47:ac:36:11:39:54:bd:06:e4:f2:d2:54:9c:2d:fd:a2:8c:3e: 36:8b:90:7a:41:b8:b6:6a:03:9f:c4:92:b7:c7:14:3e:da:5a: 56:cd:17:f8:58:85:3d:09:58:19:77:48:3b:ea:63:0b:cb:57: 99:68:ea:7d:74:4c:0c:f8:4a:5a:ab:5f:81:d3:af:85:e5:c2: 87:2e:f5:5c:e0:8a:5a:d1:9b:21:21:72:23:24:8b:d1:5f:c1: d5:16:09:20:a9:0e:ed:99:57:a0:8d:5c:6b:d4:69:d8:cc:d2: 46:30:83:e6:a9:bb:54:49:45:1b:c4:cf:80:6f:b8:91:59:bf: ec:91:e3:5b:24:9e:36:17:c9:62:dc:ef:86:42:9f:cc:7a:76: 34:98:2e:e5:f2:42:7c:a5:0e:a3:ee:ac:ae:64:ce:57:8f:05: e9:bc:e7:eb:38:64:8d:58:24:f6:f9:a3:5a:16:55:eb:bc:b7: 7b:34:24:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkgPH2vXYNrEpxS+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk OWUyYjQ5YTUtMDk4MS00OWVmLWI5ZmEtNjA5YzU2YzE5YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS4owoQTWv5pknmWp/louFNRk/5u4XMV/x0n mGoz/kfLaqedDTZz7dRNxfinfqiLm5UtEr5anCdZtHksxguVaUaytIvN8UFwMbRe 4VdXvFQ9ncCLlwZHrhdyiEiA3OOWw8hbBoI/LKle4vV9CYvtP/g7rYKO1l4BXBai BvAbnOewfbvIKZgSiEFSqiZxpQ/dBFV/NcIa8UrFvMRffvw4t83MfDDs5jVqj2JU 6I2EYqXZA5XZOxNgAr2acRORrjhXBJkLckr59c/CSsOXj4abkrYeNGjuxwzsYBra IQBfXfsnXqe9N5+1yCGjw4TZ1pREJff2qlRvzudF8ivYZTGn5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK2XS3jjWxIhc4QR7fKLUi4OF7IjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjRhNjgwZDMtOWU4NS0z NzdkLWJkMjctNGNkMDdkODRhMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC8M7KaBg3e/q5/NKBUmtMfLbxUcHy3a2OTSE8rh3Mmu760PFqoLSsU Gda3E3O9wj7lB4/TWTPulk3h4viVGSQOKqADwbMA3x1HrDYROVS9BuTy0lScLf2i jD42i5B6Qbi2agOfxJK3xxQ+2lpWzRf4WIU9CVgZd0g76mMLy1eZaOp9dEwM+Epa q1+B06+F5cKHLvVc4Ipa0ZshIXIjJIvRX8HVFgkgqQ7tmVegjVxr1GnYzNJGMIPm qbtUSUUbxM+Ab7iRWb/skeNbJJ42F8li3O+GQp/MenY0mC7l8kJ8pQ6j7qyuZM5X jwXpvOfrOGSNWCT2+aNaFlXrvLd7NCTl -----END CERTIFICATE-----Generated at Sat Apr 26 21:25:32 2025 by rpki-client