$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa File: ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa (raw, json) Hash identifier: +Y/mVlAVtx+DURLmTMsmRFbY39dlZKwcsg0urmk8t7o= Subject key identifier: 52:52:A3:36:02:19:9F:15:09:16:64:FB:EE:A6:FA:E7:26:88:C6:0D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584993F9FAB24B26B05519AA65C8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 396554 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:fa:b2:4b:26:b0:55:19:aa:65:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=c43fe055-2ace-404a-a9ad-70daf7c9bee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:13:ff:ab:78:df:03:70:f2:9d:bd:bf:d9:93: 45:b9:5f:03:7c:73:34:15:93:40:ec:01:f3:3a:f5: a1:12:0f:a6:f6:99:be:12:60:63:e8:7e:ee:9b:85: 1f:61:62:a5:d4:ea:a2:ee:4a:7b:c8:79:20:ac:3d: 49:d4:71:31:1a:a8:18:01:7d:82:35:e7:0e:2e:76: 11:81:bd:4b:1f:b1:64:ba:e8:0b:22:b4:05:19:0b: 19:b5:c2:9f:e4:f0:f5:d3:88:50:0c:9f:43:80:43: e5:23:12:6e:9b:20:60:a7:45:2c:fb:fc:8d:5b:17: ba:ab:81:0b:5b:c9:ad:bb:f9:5c:91:4b:9a:e9:15: 78:b4:19:1f:72:05:0a:b8:0c:c8:c6:e1:75:95:f9: 32:cf:3b:81:f8:a2:e6:4c:5b:5f:0f:53:49:9d:fd: af:ca:c5:8c:f4:b0:d7:e4:be:96:b4:55:f7:be:76: 74:cf:d7:bb:43:26:98:73:e5:24:b3:e4:9f:00:7b: 40:8c:80:fe:78:a9:64:98:56:52:e4:e1:58:ba:b4: 21:5a:5c:b2:6d:41:89:a7:a6:15:22:d9:86:de:18: 91:1e:7d:de:0a:2e:01:56:5c:f2:10:9d:05:b2:30: 94:42:06:bb:8f:1a:73:23:68:e1:f9:7c:49:f0:a1: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:52:A3:36:02:19:9F:15:09:16:64:FB:EE:A6:FA:E7:26:88:C6:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:72:3a:0f:3e:c1:23:e1:cc:73:52:d6:06:fa:86:fb:a5:83: ed:30:88:15:39:0c:03:d3:b6:43:65:a5:92:3d:c9:3f:75:40: 15:80:28:23:7a:a3:ce:15:0f:f2:b6:b2:99:74:04:23:31:bd: f5:40:6e:43:8b:47:e6:55:1a:50:98:a1:bc:e7:e1:f6:bb:53: 00:40:2c:21:8a:5f:cf:16:42:e9:68:05:b3:39:2a:5f:d8:5e: b7:ae:85:09:e9:f8:9c:0f:7d:c2:c9:43:e6:c6:c7:3a:92:1a: 9a:b2:e3:29:60:b5:7e:07:41:c9:35:a7:3a:d1:14:5e:d6:38: 15:c4:1b:f4:98:a8:2a:0a:19:be:75:2e:64:00:6a:b2:51:a6: 9c:46:a8:3f:24:69:f7:d8:9e:6c:a1:3c:11:82:1d:fa:f7:dc: 78:c5:a8:bb:2c:45:ae:fd:4c:d2:c4:0d:09:13:eb:67:b8:3d: 82:fd:bd:2c:98:7e:02:c1:41:87:2c:d1:28:9a:13:1f:b0:e9: dd:f1:ff:dd:cf:bd:fa:26:f7:ad:28:00:4b:32:b2:62:29:b5: 77:76:8e:ab:f9:d4:26:e0:b9:17:e7:60:12:2c:fc:8d:dd:25: ad:6c:0f:4d:bb:37:1a:5e:1c:42:68:61:15:e2:3b:fb:8e:0d: a7:ed:87:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+fqySyawVRmqZcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YzQzZmUwNTUtMmFjZS00MDRhLWE5YWQtNzBkYWY3YzliZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhP/q3jfA3Dynb2/2ZNFuV8DfHM0FZNA7AHz OvWhEg+m9pm+EmBj6H7um4UfYWKl1Oqi7kp7yHkgrD1J1HExGqgYAX2CNecOLnYR gb1LH7FkuugLIrQFGQsZtcKf5PD104hQDJ9DgEPlIxJumyBgp0Us+/yNWxe6q4EL W8mtu/lckUua6RV4tBkfcgUKuAzIxuF1lfkyzzuB+KLmTFtfD1NJnf2vysWM9LDX 5L6WtFX3vnZ0z9e7QyaYc+Uks+SfAHtAjID+eKlkmFZS5OFYurQhWlyybUGJp6YV ItmG3hiRHn3eCi4BVlzyEJ0FsjCUQga7jxpzI2jh+XxJ8KHXIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFJSozYCGZ8VCRZk++6m+ucmiMYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmY1YThkYjktMDQwMC0z YzYzLThkZTQtNmRkODQ4OWExMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAEcjoPPsEj4cxzUtYG+ob7pYPtMIgVOQwD07ZDZaWSPck/dUAVgCgj eqPOFQ/ytrKZdAQjMb31QG5Di0fmVRpQmKG85+H2u1MAQCwhil/PFkLpaAWzOSpf 2F63roUJ6ficD33CyUPmxsc6khqasuMpYLV+B0HJNac60RRe1jgVxBv0mKgqChm+ dS5kAGqyUaacRqg/JGn32J5soTwRgh3699x4xai7LEWu/UzSxA0JE+tnuD2C/b0s mH4CwUGHLNEomhMfsOnd8f/dz736JvetKABLMrJiKbV3do6r+dQm4LkX52ASLPyN 3SWtbA9NuzcaXhxCaGEV4jv7jg2n7Ye8 -----END CERTIFICATE-----Generated at Mon Apr 28 16:12:18 2025 by rpki-client