$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d8a156b-ef22-38a3-87d9-d9b0c40a56f2.roa File: 0d8a156b-ef22-38a3-87d9-d9b0c40a56f2.roa (raw, json) Hash identifier: caGFLfF+AUmrD+Gnb+uzrULlwKjJhIM67OcIWhlAW5s= Subject key identifier: D7:7C:37:DD:84:BC:46:ED:46:C6:C9:9A:88:D2:55:90:B1:BF:30:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584996C4AA6F8D9004422F7F3100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d8a156b-ef22-38a3-87d9-d9b0c40a56f2.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 27544 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:aa:6f:8d:90:04:42:2f:7f:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=c1db19bd-b67a-4cbc-8d39-69eeabc8d777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:fa:38:2b:33:b5:67:0e:ae:e5:cf:18:aa: 72:55:51:cc:c4:6d:b7:ff:a7:87:2d:ac:df:1f:db: a3:83:55:05:8d:40:55:3c:f6:8e:da:96:f0:22:56: 14:20:d7:5d:d0:8f:00:48:7f:bd:35:71:d6:1a:32: bb:f2:bc:7c:fe:3e:99:d4:64:a7:e5:f3:31:a5:6c: 28:f7:05:32:3d:4a:78:34:2c:e3:b7:13:f2:fe:2e: af:a6:67:c0:06:35:06:e5:8f:83:f5:7f:2e:87:2d: 53:68:2c:ae:7d:cd:f0:da:ce:10:42:e4:4c:87:7a: b2:c2:8c:c6:54:9b:dc:e2:22:59:86:7d:16:42:cb: 62:33:62:a4:e4:5b:56:4c:f7:44:88:4c:6a:8f:75: 13:21:0f:c8:5e:ec:17:5b:73:e5:75:ee:32:50:d2: 50:92:60:dd:33:82:f9:8f:43:05:2d:a1:af:fa:29: bb:f6:e9:36:9e:d7:9e:e3:13:52:9e:52:0c:e8:25: e9:1e:be:7c:c5:78:3b:00:dc:97:95:e0:25:89:0b: 47:64:ee:1a:58:ae:b0:dd:6d:d9:3e:86:8e:1a:67: b1:e4:2e:ac:ad:2a:aa:43:bd:80:fc:67:2b:c5:5e: be:d9:73:fb:d7:35:8b:12:8b:ff:60:4e:d8:61:51: 75:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7C:37:DD:84:BC:46:ED:46:C6:C9:9A:88:D2:55:90:B1:BF:30:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d8a156b-ef22-38a3-87d9-d9b0c40a56f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:dc:d1:fd:c0:cb:b1:b8:87:cf:08:e1:b9:da:bc:44:0e:92: 23:91:3d:97:23:c7:e3:09:62:b1:a0:9d:cb:66:03:f7:8d:7f: 87:03:5c:9e:d9:da:2b:e1:ad:56:c1:11:5e:4d:ba:16:8f:46: 00:25:37:87:24:af:68:dd:17:ca:e2:0b:4f:aa:bf:90:88:d6: b4:75:a6:cc:9c:e1:06:d2:29:0e:98:82:ab:b2:26:12:4c:12: 60:13:0f:67:cd:c7:89:a8:de:77:b9:30:56:45:7b:d9:a3:6f: 11:9d:64:ef:f5:c5:92:5c:19:3a:b9:40:49:64:38:aa:90:79: f0:8e:e9:80:4a:b0:0d:02:5b:c6:e6:6e:03:81:d0:84:ae:c9: 46:29:1f:e9:7c:fb:5e:9f:09:4c:91:c7:88:cb:69:02:f1:01: 64:9c:de:50:4b:23:a4:ac:bc:a9:f6:72:46:ef:b8:7d:2c:51: 5d:f6:ab:9c:6c:ce:07:66:cc:80:ad:d6:e1:6d:18:90:93:f0: e7:3f:99:be:85:d2:70:50:ae:c1:6c:f3:ff:8f:f8:47:56:0e: 4a:0a:46:8e:9b:9f:33:92:33:70:e0:32:bc:fe:c0:fb:9d:45: b4:b6:3c:7d:e5:21:1d:33:38:60:c6:63:0f:e1:c4:4b:db:4f: 0e:57:64:c0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmWxKpvjZAEQi9/MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk YzFkYjE5YmQtYjY3YS00Y2JjLThkMzktNjllZWFiYzhkNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJL6OCsztWcOruXPGKpyVVHMxG23/6eHLazf H9ujg1UFjUBVPPaO2pbwIlYUINdd0I8ASH+9NXHWGjK78rx8/j6Z1GSn5fMxpWwo 9wUyPUp4NCzjtxPy/i6vpmfABjUG5Y+D9X8uhy1TaCyufc3w2s4QQuRMh3qywozG VJvc4iJZhn0WQstiM2Kk5FtWTPdEiExqj3UTIQ/IXuwXW3Plde4yUNJQkmDdM4L5 j0MFLaGv+im79uk2ntee4xNSnlIM6CXpHr58xXg7ANyXleAliQtHZO4aWK6w3W3Z PoaOGmex5C6srSqqQ72A/GcrxV6+2XP71zWLEov/YE7YYVF1WQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNd8N92EvEbtRsbJmojSVZCxvzBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGQ4YTE1NmItZWYyMi0z OGEzLTg3ZDktZDliMGM0MGE1NmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAk3NH9wMuxuIfPCOG52rxEDpIjkT2XI8fjCWKxoJ3LZgP3jX+HA1ye 2dor4a1WwRFeTboWj0YAJTeHJK9o3RfK4gtPqr+QiNa0dabMnOEG0ikOmIKrsiYS TBJgEw9nzceJqN53uTBWRXvZo28RnWTv9cWSXBk6uUBJZDiqkHnwjumASrANAlvG 5m4DgdCErslGKR/pfPtenwlMkceIy2kC8QFknN5QSyOkrLyp9nJG77h9LFFd9quc bM4HZsyArdbhbRiQk/DnP5m+hdJwUK7BbPP/j/hHVg5KCkaOm58zkjNw4DK8/sD7 nUW0tjx95SEdMzhgxmMP4cRL208OV2TA -----END CERTIFICATE-----Generated at Sat May 10 23:36:04 2025 by rpki-client