$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac20e86-eefd-3446-a4f9-6714e97d106d.roa File: 3ac20e86-eefd-3446-a4f9-6714e97d106d.roa (raw, json) Hash identifier: bj9vAu87+Wbk2lU2N/DidvAyrUjoNcwNrJhX/V8Fj00= Subject key identifier: 54:CD:93:F5:C0:A8:F9:CA:10:5B:D5:2C:E6:08:08:FC:CA:03:BB:09 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584996C4A1D3562F421C86EBD4B2 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac20e86-eefd-3446-a4f9-6714e97d106d.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 396581 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:a1:d3:56:2f:42:1c:86:eb:d4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=3f96efe7-c8f2-4ec2-b99b-3db8a9d7d32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:13:2f:f8:84:59:c5:94:78:fd:0b:69:8f:59: 9a:b1:ed:61:c1:f8:8d:d6:3a:e5:c3:05:35:c2:0d: cb:fe:74:26:a6:8c:39:17:8c:c3:57:a7:ec:fd:d4: 4e:48:87:20:28:7f:f2:ae:99:fa:a0:b5:6a:1f:1a: b4:fe:4e:f0:c8:58:70:ae:2c:02:0e:88:6c:6f:64: 7e:44:01:6e:32:49:94:c1:f2:8a:64:3e:a5:d5:06: 79:de:d8:02:85:09:78:6b:3c:cf:0b:33:33:37:69: 16:01:ac:a1:a9:78:37:15:ae:27:83:0b:c5:44:cc: 56:14:d1:8d:8a:0d:02:3c:73:57:88:9a:0c:eb:f3: d2:af:1d:16:ee:bf:ba:53:81:48:7f:f5:b5:cc:ff: ea:ed:b3:67:35:05:b9:50:9e:17:fc:35:89:ff:bb: 75:d6:f6:89:d2:c9:2f:6a:c9:31:82:96:f0:62:c4: de:3d:b8:4c:e8:b0:f8:04:bf:5a:4f:1d:ff:d4:7b: e7:c7:c1:1b:3e:fa:b3:c3:9a:a5:a1:20:f2:d8:cd: 04:82:61:c2:2a:97:81:0b:59:ea:86:48:bd:39:ae: ef:8b:aa:8c:6e:a3:1a:9a:01:07:52:e7:e4:e6:ca: 71:ed:3a:6a:91:b8:ca:e1:54:39:57:81:bf:d4:82: c7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CD:93:F5:C0:A8:F9:CA:10:5B:D5:2C:E6:08:08:FC:CA:03:BB:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac20e86-eefd-3446-a4f9-6714e97d106d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:35:6d:d9:62:2e:a4:5c:79:f7:cc:67:f7:44:b8:9c:fb:a6: 0a:f5:f4:a4:18:d4:97:cc:88:3b:25:8f:07:c1:29:a2:fc:aa: f7:88:4a:bf:b9:59:3e:4a:59:8c:17:a5:8c:1e:02:73:05:44: a6:5d:6c:c8:69:01:0f:0c:41:3a:b2:60:05:d0:e3:55:97:85: c6:bc:c1:98:02:c4:55:ea:1b:04:74:f4:6b:53:75:55:de:19: c8:6d:45:ed:32:b7:69:3b:ed:2e:bc:31:d8:7c:da:18:cc:a0: d0:27:8d:ea:22:5b:49:20:12:9f:38:8e:3c:78:44:58:80:02: 52:d5:cf:fe:9c:7b:8b:ee:f0:af:73:97:91:00:cc:75:0e:4d: 6b:43:28:b9:74:e5:b0:98:0d:e6:af:87:2f:65:33:76:c0:18: d2:0b:21:ec:ef:18:bd:f9:cd:99:60:67:57:3f:f7:72:d5:30: ef:3f:4d:f6:18:f8:27:44:fd:d3:57:1f:46:a0:b7:c2:6c:a1: 49:e9:e8:74:d4:e7:fd:43:4c:a1:8b:b3:e3:3c:1b:54:61:ed: fb:05:f8:d5:7e:61:33:26:a8:a0:0b:5a:df:a9:a6:7e:01:72: da:ed:47:3d:af:72:26:9a:d1:91:4e:1b:70:55:72:9b:10:94: df:ac:33:af -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmWxKHTVi9CHIbr1LIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk M2Y5NmVmZTctYzhmMi00ZWMyLWI5OWItM2RiOGE5ZDdkMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hMv+IRZxZR4/Qtpj1mase1hwfiN1jrlwwU1 wg3L/nQmpow5F4zDV6fs/dROSIcgKH/yrpn6oLVqHxq0/k7wyFhwriwCDohsb2R+ RAFuMkmUwfKKZD6l1QZ53tgChQl4azzPCzMzN2kWAayhqXg3Fa4ngwvFRMxWFNGN ig0CPHNXiJoM6/PSrx0W7r+6U4FIf/W1zP/q7bNnNQW5UJ4X/DWJ/7t11vaJ0skv askxgpbwYsTePbhM6LD4BL9aTx3/1Hvnx8EbPvqzw5qloSDy2M0EgmHCKpeBC1nq hki9Oa7vi6qMbqMamgEHUufk5spx7TpqkbjK4VQ5V4G/1ILHbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFTNk/XAqPnKEFvVLOYICPzKA7sJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FjMjBlODYtZWVmZC0z NDQ2LWE0ZjktNjcxNGU5N2QxMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAINW3ZYi6kXHn3zGf3RLic+6YK9fSkGNSXzIg7JY8HwSmi/Kr3iEq/ uVk+SlmMF6WMHgJzBUSmXWzIaQEPDEE6smAF0ONVl4XGvMGYAsRV6hsEdPRrU3VV 3hnIbUXtMrdpO+0uvDHYfNoYzKDQJ43qIltJIBKfOI48eERYgAJS1c/+nHuL7vCv c5eRAMx1Dk1rQyi5dOWwmA3mr4cvZTN2wBjSCyHs7xi9+c2ZYGdXP/dy1TDvP032 GPgnRP3TVx9GoLfCbKFJ6eh01Of9Q0yhi7PjPBtUYe37BfjVfmEzJqigC1rfqaZ+ AXLa7Uc9r3ImmtGRThtwVXKbEJTfrDOv -----END CERTIFICATE-----Generated at Sun May 11 04:18:45 2025 by rpki-client