$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/102fc8f8-d3b3-35aa-9c45-b62cb2e9da2f.roa File: 102fc8f8-d3b3-35aa-9c45-b62cb2e9da2f.roa (raw, json) Hash identifier: obERxfgqjudsShorO1OxOpvMnxZ1iNg/wfNjU1QhKnw= Subject key identifier: 18:C9:7D:59:C7:54:AA:EC:95:2A:A2:1C:CE:37:27:6A:2D:57:40:AB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849287E573AA5FF5563FDF28440 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/102fc8f8-d3b3-35aa-9c45-b62cb2e9da2f.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 7342 IP address blocks: 192.34.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:57:3a:a5:ff:55:63:fd:f2:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=628e7750-45e2-445d-8d5a-7bb67c2d79b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fa:a1:e6:2e:3e:7f:c1:36:f2:9c:bb:f7:0e: c9:11:51:a2:48:05:98:86:2d:76:88:aa:f2:af:42: c8:a8:d3:6c:00:3d:b7:84:9f:d4:8d:0f:4a:0b:a5: dc:79:6a:06:da:fa:12:b7:fd:3d:49:a4:f7:60:0e: a3:53:70:ae:d4:75:8a:06:c5:0b:c8:c8:36:29:a5: 19:14:78:e2:58:00:a6:8e:d8:56:c6:f6:b1:08:ee: 49:a8:12:ef:5c:5c:7d:a3:a6:bc:70:08:b3:b9:6e: 74:4a:94:a5:d8:da:9d:f9:a9:ae:e6:04:66:59:2d: 5f:1f:dc:76:a5:b2:8c:d1:83:21:6a:69:85:1c:e4: 50:c9:af:a8:fd:74:0f:f3:f1:d5:4f:07:8e:4e:ef: 7b:f5:5c:d3:6d:65:1c:41:2d:50:e6:01:82:aa:32: 7c:4e:69:d7:f3:06:ce:3f:f4:18:65:4c:75:34:91: 0b:06:2a:dd:d1:3a:f1:6a:be:27:9d:cc:11:d1:04: eb:eb:2d:23:29:dc:ff:8f:91:f7:86:26:21:21:37: 2a:92:37:bb:81:8e:80:68:9b:cb:45:e1:cc:3e:f3: 24:aa:2f:c6:b2:dc:11:2b:17:77:ad:01:ad:4a:67: cc:ff:64:78:bf:c5:75:ab:fa:d3:2c:f0:d6:0a:73: f6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C9:7D:59:C7:54:AA:EC:95:2A:A2:1C:CE:37:27:6A:2D:57:40:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/102fc8f8-d3b3-35aa-9c45-b62cb2e9da2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:2d:cf:61:e6:06:86:6a:8a:85:fc:f7:38:bb:08:cd:d4:ae: e5:08:c5:9b:b5:63:cb:a3:cb:c2:c3:40:63:e7:4d:66:99:64: ad:f5:e6:61:68:5e:97:fc:e1:c9:19:61:b9:39:32:05:ae:22: eb:81:2f:2b:e8:47:95:3a:c3:37:ca:16:04:ed:c7:12:14:00: 29:0f:e4:91:8e:57:c9:34:94:7c:f7:3e:9a:4d:79:74:9f:bd: 75:fc:f8:9e:9a:cc:45:85:e8:62:f5:2c:f6:fd:a2:31:dc:4b: 97:b9:77:cb:d5:65:58:cb:21:ed:b8:b4:f7:1d:4a:b3:d9:00: 84:6e:a6:f2:41:7e:a9:8c:b7:a1:69:c3:37:8b:55:f9:24:84: 05:c2:b3:12:29:5f:d7:ae:69:61:fe:57:ef:83:c8:67:d8:a4: 52:76:b9:d6:f2:f8:80:11:13:6b:fa:fb:8f:61:df:8d:91:b9: 73:11:f8:0d:74:fe:64:93:1e:4c:d1:cc:52:b5:25:c7:8f:4e: 36:25:0d:f7:f5:92:b7:e4:2b:5a:2d:08:4f:df:ba:39:ea:90: 34:15:bd:99:3b:87:5c:1f:47:ab:82:55:5a:35:89:43:b3:03: 40:00:2a:13:0f:50:b2:23:4a:72:3b:4b:fd:ca:86:e6:2d:b4: a0:ef:0f:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkoflc6pf9VY/3yhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjI4ZTc3NTAtNDVlMi00NDVkLThkNWEtN2JiNjdjMmQ3OWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfqh5i4+f8E28py79w7JEVGiSAWYhi12iKry r0LIqNNsAD23hJ/UjQ9KC6XceWoG2voSt/09SaT3YA6jU3Cu1HWKBsULyMg2KaUZ FHjiWACmjthWxvaxCO5JqBLvXFx9o6a8cAizuW50SpSl2Nqd+amu5gRmWS1fH9x2 pbKM0YMhammFHORQya+o/XQP8/HVTweOTu979VzTbWUcQS1Q5gGCqjJ8TmnX8wbO P/QYZUx1NJELBird0Trxar4nncwR0QTr6y0jKdz/j5H3hiYhITcqkje7gY6AaJvL ReHMPvMkqi/GstwRKxd3rQGtSmfM/2R4v8V1q/rTLPDWCnP26QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjJfVnHVKrslSqiHM43J2otV0CrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTAyZmM4ZjgtZDNiMy0z NWFhLTljNDUtYjYyY2IyZTlkYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEtz2HmBoZqioX89zi7CM3UruUIxZu1Y8ujy8LDQGPnTWaZZK315mFo Xpf84ckZYbk5MgWuIuuBLyvoR5U6wzfKFgTtxxIUACkP5JGOV8k0lHz3PppNeXSf vXX8+J6azEWF6GL1LPb9ojHcS5e5d8vVZVjLIe24tPcdSrPZAIRupvJBfqmMt6Fp wzeLVfkkhAXCsxIpX9euaWH+V++DyGfYpFJ2udby+IARE2v6+49h342RuXMR+A10 /mSTHkzRzFK1JcePTjYlDff1krfkK1otCE/fujnqkDQVvZk7h1wfR6uCVVo1iUOz A0AAKhMPULIjSnI7S/3KhuYttKDvD8M= -----END CERTIFICATE-----Generated at Sun May 11 06:05:47 2025 by rpki-client