$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2731af8c-ffff-3560-8d14-412ae557a927.roa File: 2731af8c-ffff-3560-8d14-412ae557a927.roa (raw, json) Hash identifier: y9c/nnoNsvjKJnq7C3mWMuHZiKrZumyke4JN6wltJfE= Subject key identifier: 34:2E:B1:E6:83:72:F1:2C:1D:AF:BC:81:10:5C:0B:93:A6:D0:76:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849203C7BE2001DDACBB99BDF20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2731af8c-ffff-3560-8d14-412ae557a927.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 396559 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:7b:e2:00:1d:da:cb:b9:9b:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=8d3a23b7-8010-4e9a-a656-91834c9eeb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:df:53:d5:94:a6:62:5d:14:dd:bc:aa:d1:08: 8b:fb:57:51:10:bf:40:c8:20:42:9d:6c:ba:1d:3e: 86:05:32:b9:cb:c4:5d:59:4d:4e:7e:38:59:e3:0b: 66:4d:e7:bd:a8:a8:1a:05:42:99:40:d1:ac:1d:49: a8:7d:fe:67:1d:37:cb:e9:9c:03:2f:4d:57:bb:01: b0:95:f6:73:cc:9c:1f:69:fe:59:3c:c4:6f:0b:aa: bc:53:68:06:fe:9e:2d:04:b5:ac:10:ec:d2:71:a1: c6:ac:fe:ba:49:0f:ef:98:1e:5f:55:65:0a:95:01: f4:67:00:7f:24:c5:5b:74:9f:6a:1b:3b:04:31:fe: 93:96:0c:c9:56:87:28:0a:5d:c6:d8:48:fe:09:fc: a9:99:25:98:e7:1b:76:0a:1d:96:44:3a:f3:3c:aa: 6e:21:f9:9a:f9:b2:db:a3:3e:ea:8f:ff:5b:49:fc: 93:0a:55:81:3c:77:82:52:d8:c3:98:f1:52:9d:25: e8:e0:26:e8:8f:70:87:21:1b:35:62:65:42:4b:3f: 45:7f:52:23:e3:4d:7d:44:1e:10:f7:db:b5:ec:b7: b7:cc:1b:4d:73:4f:97:98:04:48:65:2c:a4:7c:19: 83:07:da:3b:5e:5f:2b:41:9a:b6:42:fd:30:54:8a: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2E:B1:E6:83:72:F1:2C:1D:AF:BC:81:10:5C:0B:93:A6:D0:76:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2731af8c-ffff-3560-8d14-412ae557a927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6b:36:a0:2a:ab:0f:f5:46:1f:ed:20:61:fa:4e:c0:7b:9a: 7b:ef:82:07:f6:97:9c:fc:fa:bf:9e:94:18:94:4c:09:aa:56: 4f:96:4d:8c:57:29:13:6c:10:6b:37:f6:3f:3d:b3:37:ce:c8: c2:9b:9b:42:44:49:45:28:1a:d0:55:01:74:05:df:8b:0f:c1: f8:11:24:c1:b3:32:44:e3:32:b7:7a:bb:74:f9:98:de:7a:f2: 44:bb:b9:98:a7:ee:35:6f:a2:ba:0d:cb:14:2c:24:b1:d2:dc: a8:ba:f6:3c:0b:74:4f:52:90:55:0c:ab:1c:e3:b1:d4:83:a9: 7d:6e:3d:a2:09:bb:4f:17:a6:d6:fb:e8:09:76:26:df:62:0e: be:42:ea:d6:f2:05:89:92:65:7f:01:e8:8c:a5:42:87:d6:e2: ae:82:77:03:f6:32:6f:4e:ac:98:0a:24:8f:bf:b5:37:cd:82: 8c:a8:dd:40:80:2a:e3:16:58:93:af:28:e3:8b:23:6e:f8:f7: a3:82:a8:32:5b:67:3d:a8:8e:90:e1:44:7f:73:03:9b:05:bb: 4e:63:cb:67:bc:8f:50:1c:d6:76:76:a5:3a:ac:b9:fd:b3:ec: 73:b3:b9:29:a8:ea:fc:e0:45:8c:40:7d:17:c1:ae:82:6e:4b: 15:3a:6a:cf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkgPHviAB3ay7mb3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk OGQzYTIzYjctODAxMC00ZTlhLWE2NTYtOTE4MzRjOWVlYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld9T1ZSmYl0U3byq0QiL+1dREL9AyCBCnWy6 HT6GBTK5y8RdWU1OfjhZ4wtmTee9qKgaBUKZQNGsHUmoff5nHTfL6ZwDL01XuwGw lfZzzJwfaf5ZPMRvC6q8U2gG/p4tBLWsEOzScaHGrP66SQ/vmB5fVWUKlQH0ZwB/ JMVbdJ9qGzsEMf6TlgzJVocoCl3G2Ej+CfypmSWY5xt2Ch2WRDrzPKpuIfma+bLb oz7qj/9bSfyTClWBPHeCUtjDmPFSnSXo4Cboj3CHIRs1YmVCSz9Ff1Ij4019RB4Q 99u17Le3zBtNc0+XmARIZSykfBmDB9o7Xl8rQZq2Qv0wVIqn2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDQuseaDcvEsHa+8gRBcC5Om0HZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjczMWFmOGMtZmZmZi0z NTYwLThkMTQtNDEyYWU1NTdhOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxazagKqsP9UYf7SBh+k7Ae5p774IH9pec/Pq/npQYlEwJqlZPlk2M VykTbBBrN/Y/PbM3zsjCm5tCRElFKBrQVQF0Bd+LD8H4ESTBszJE4zK3ert0+Zje evJEu7mYp+41b6K6DcsULCSx0tyouvY8C3RPUpBVDKsc47HUg6l9bj2iCbtPF6bW ++gJdibfYg6+QurW8gWJkmV/AeiMpUKH1uKugncD9jJvTqyYCiSPv7U3zYKMqN1A gCrjFliTryjjiyNu+PejgqgyW2c9qI6Q4UR/cwObBbtOY8tnvI9QHNZ2dqU6rLn9 s+xzs7kpqOr84EWMQH0Xwa6CbksVOmrP -----END CERTIFICATE-----Generated at Sun May 11 10:30:13 2025 by rpki-client