$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e9b2d32-86df-39c8-ba00-76e03dd4d303.roa File: 2e9b2d32-86df-39c8-ba00-76e03dd4d303.roa (raw, json) Hash identifier: XenSy6PJiD6X82BWdsMNkPIxKCGJ36g4WwwzGbFQUt0= Subject key identifier: 46:60:67:C4:7B:05:53:FD:E6:70:09:A5:C3:DB:33:72:34:C0:EF:B7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584993FA0153A6135919BA0F1E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e9b2d32-86df-39c8-ba00-76e03dd4d303.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 396604 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:01:53:a6:13:59:19:ba:0f:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=3891d39b-ea2d-42c5-a459-e85ebf69d1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:05:67:a9:8b:88:8e:43:4f:58:f8:08:d7: b6:a0:13:47:45:8e:44:e7:86:9c:40:0d:6b:9e:5d: 07:94:56:17:35:48:14:9c:70:b1:6d:75:7d:06:9d: 6b:51:47:22:7f:5b:50:14:31:35:8f:0d:d9:be:a9: d3:bd:6c:98:39:67:5e:5f:e6:a4:78:47:b5:ba:55: 13:2f:c8:d4:60:54:b1:39:e5:f4:30:f5:ca:74:d9: 7b:95:66:e6:77:7b:d5:9e:66:1c:d8:68:90:20:4f: bb:e8:00:b2:b9:fc:4e:d6:00:0a:da:4c:0e:af:af: ec:84:89:ee:a1:03:43:d4:9f:2e:df:4c:26:b7:f2: 61:9b:66:40:5f:55:e6:cc:21:a9:8b:0f:54:b3:f1: fa:f3:01:75:0c:61:81:e3:bb:05:92:dd:5d:8e:5a: 6e:14:9c:27:01:8a:17:df:43:02:b7:3a:da:23:30: 82:a5:0e:a5:5f:3e:7e:d6:1c:0d:7f:0d:45:ab:35: b3:cb:b9:f1:a4:05:f1:c7:e8:62:c1:30:84:69:24: 2c:6e:ee:64:8c:a5:87:2c:cf:81:b7:21:75:c9:04: fe:d2:2d:54:df:ca:5a:fc:a7:9d:9a:0f:7f:02:07: f6:f9:8f:cd:5d:99:c3:8f:d2:f6:b2:7c:37:f7:83: 36:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:60:67:C4:7B:05:53:FD:E6:70:09:A5:C3:DB:33:72:34:C0:EF:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e9b2d32-86df-39c8-ba00-76e03dd4d303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:0d:61:3c:58:7d:9f:f3:c6:25:c5:ce:b4:04:b0:91:2e:d5: 80:04:5d:ff:9a:f3:3d:e2:0d:40:ee:04:0e:35:9d:4c:ef:a9: ac:47:f8:83:a8:31:ed:89:ea:c7:84:2c:1f:52:2a:9a:1d:07: f9:7d:53:9f:39:bb:25:3d:fb:6a:64:8d:df:d5:c9:af:14:7e: 10:f6:92:22:29:82:56:d4:a2:27:55:fb:fb:6d:b7:6b:a8:90: 1e:c1:9c:ad:ae:82:6f:4c:c1:f5:b2:5a:7c:df:4f:3a:37:dc: 2c:af:90:89:b4:f4:ee:e2:09:a6:72:e4:04:d4:ed:47:35:63: 72:17:e1:8d:bf:c9:d6:75:32:97:ad:e8:07:7a:79:2e:45:d5: bd:78:48:b8:2c:f1:e2:3e:7e:e4:7f:60:d9:64:d1:a4:3b:95: 98:e2:e4:c4:d3:86:d3:eb:7e:c8:03:c5:fb:0e:e1:c2:e9:3a: 39:da:36:a8:fd:1a:d1:74:46:44:7f:0e:dd:af:95:6e:c6:b8: 31:e0:db:88:60:ff:4e:1f:3b:33:58:5d:1c:8c:c9:ac:a4:ab: e8:55:d8:8a:f0:59:e8:7e:5c:b2:2d:1a:be:0a:9d:78:d3:e3: 11:b9:df:d8:c5:3f:4f:18:d5:c2:c9:d7:d0:e9:5b:83:89:c6: 7d:14:a1:1d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+gFTphNZGboPHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk Mzg5MWQzOWItZWEyZC00MmM1LWE0NTktZTg1ZWJmNjlkMWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JkFZ6mLiI5DT1j4CNe2oBNHRY5E54acQA1r nl0HlFYXNUgUnHCxbXV9Bp1rUUcif1tQFDE1jw3ZvqnTvWyYOWdeX+akeEe1ulUT L8jUYFSxOeX0MPXKdNl7lWbmd3vVnmYc2GiQIE+76ACyufxO1gAK2kwOr6/shInu oQND1J8u30wmt/Jhm2ZAX1XmzCGpiw9Us/H68wF1DGGB47sFkt1djlpuFJwnAYoX 30MCtzraIzCCpQ6lXz5+1hwNfw1FqzWzy7nxpAXxx+hiwTCEaSQsbu5kjKWHLM+B tyF1yQT+0i1U38pa/Kedmg9/Agf2+Y/NXZnDj9L2snw394M25QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEZgZ8R7BVP95nAJpcPbM3I0wO+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmU5YjJkMzItODZkZi0z OWM4LWJhMDAtNzZlMDNkZDRkMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQDWE8WH2f88Ylxc60BLCRLtWABF3/mvM94g1A7gQONZ1M76msR/iD qDHtierHhCwfUiqaHQf5fVOfObslPftqZI3f1cmvFH4Q9pIiKYJW1KInVfv7bbdr qJAewZytroJvTMH1slp83086N9wsr5CJtPTu4gmmcuQE1O1HNWNyF+GNv8nWdTKX regHenkuRdW9eEi4LPHiPn7kf2DZZNGkO5WY4uTE04bT637IA8X7DuHC6To52jao /RrRdEZEfw7dr5Vuxrgx4NuIYP9OHzszWF0cjMmspKvoVdiK8FnoflyyLRq+Cp14 0+MRud/YxT9PGNXCydfQ6VuDicZ9FKEd -----END CERTIFICATE-----Generated at Sun May 11 00:39:52 2025 by rpki-client