$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa File: 3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa (raw, json) Hash identifier: pVMsRB5a8kIwxb2IrlCB2A86wqRFipQBqKAAPWlmaKo= Subject key identifier: 7F:2D:FF:0E:94:30:D4:4E:E1:66:44:D9:3D:30:84:E2:57:73:B8:7C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AA4F5A6716F52B867ABD8100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 396585 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:5a:67:16:f5:2b:86:7a:bd:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=5816e24f-cd20-4181-8152-6be235652a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:4c:a5:e6:15:35:d6:8a:02:0e:8c:67:ed: 7c:ca:d4:2d:ed:ac:7f:58:f8:80:64:f7:16:59:88: e1:e9:00:e4:46:1b:af:f2:5f:01:f2:53:90:0b:1a: 74:57:fa:ff:d3:eb:b6:63:04:e6:f0:25:d2:7b:ff: ac:8b:3d:de:84:75:90:5c:11:e2:e9:4e:92:01:62: 5b:86:fd:35:df:ce:cc:4e:c2:71:b4:99:81:3c:b2: e3:d8:61:54:3b:15:13:5a:d1:a9:42:d6:ba:8c:6e: 50:8b:5c:dd:26:9a:70:93:e0:c3:95:4a:f6:f0:2f: db:89:a9:7e:d3:5d:7b:cd:ef:7d:1c:ea:01:3e:0b: 61:e9:11:d8:53:61:20:96:65:e1:c7:82:48:f6:fe: 4d:0e:99:39:3f:e5:5f:44:d0:91:e0:d0:6e:bb:12: 88:66:4f:23:e7:45:c0:8a:55:01:5d:f5:58:fe:e2: 85:02:4c:c3:0b:c8:9b:40:bb:26:4e:b0:67:59:79: cc:80:43:40:22:59:8a:e1:45:8c:80:c5:ba:e9:81: 6b:17:e8:31:d8:c9:18:14:98:24:5b:19:b4:38:9c: e5:22:62:b9:44:6a:b7:f0:db:66:a2:cb:5c:64:fc: e7:41:79:0a:8c:bd:4d:bc:92:98:27:c9:89:50:04: 32:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2D:FF:0E:94:30:D4:4E:E1:66:44:D9:3D:30:84:E2:57:73:B8:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:11:a0:ec:f3:6e:49:18:ad:f7:fe:8c:7c:f0:4a:01:0c:e9: 12:21:37:63:5e:1f:49:e6:c6:b3:46:4e:3e:a7:09:ad:61:ba: 92:26:20:98:e1:aa:24:de:c7:31:9e:11:23:47:a7:dd:f9:95: 7c:7b:9d:9d:18:03:4e:bc:3a:ff:70:cc:39:d0:3e:25:1f:dc: 4b:19:95:27:24:03:d0:54:e1:ee:fe:c7:cd:19:1d:7f:96:e6: 8f:8d:e6:c5:ad:ca:97:2a:95:cf:8e:34:50:e9:f1:e3:3f:07: 6c:a1:f2:c7:2d:fc:6d:e4:0e:41:27:8a:16:ac:fa:a2:20:2b: 88:83:0a:b3:f2:0f:94:dc:d7:1d:4e:e7:7a:95:3d:fe:9a:09: 16:c2:3c:df:12:d4:4a:2b:91:9d:f3:d7:bb:08:33:45:c1:26: 9e:49:b9:16:8e:b1:36:ed:d6:42:03:ed:9b:4e:c4:dc:4e:3d: fa:77:24:0c:e0:84:36:92:be:91:12:83:09:9f:3d:24:94:35: 54:0c:2e:27:fa:ed:73:a5:39:dc:69:7c:80:3a:c9:80:45:0e: fd:5f:c0:11:3f:67:49:2b:97:36:b2:a8:ac:20:b0:be:cf:79: ed:6e:95:c6:35:86:c3:08:0e:52:33:8e:8f:8e:b2:72:0d:54: 96:52:44:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmqT1pnFvUrhnq9gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk NTgxNmUyNGYtY2QyMC00MTgxLTgxNTItNmJlMjM1NjUyYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApclMpeYVNdaKAg6MZ+18ytQt7ax/WPiAZPcW WYjh6QDkRhuv8l8B8lOQCxp0V/r/0+u2YwTm8CXSe/+siz3ehHWQXBHi6U6SAWJb hv01387MTsJxtJmBPLLj2GFUOxUTWtGpQta6jG5Qi1zdJppwk+DDlUr28C/bial+ 0117ze99HOoBPgth6RHYU2EglmXhx4JI9v5NDpk5P+VfRNCR4NBuuxKIZk8j50XA ilUBXfVY/uKFAkzDC8ibQLsmTrBnWXnMgENAIlmK4UWMgMW66YFrF+gx2MkYFJgk Wxm0OJzlImK5RGq38NtmostcZPznQXkKjL1NvJKYJ8mJUAQyfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH8t/w6UMNRO4WZE2T0whOJXc7h8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2JhZmUwOWItNzgyYi0z MmFiLWFkZjktYmIxZmY2NWE5MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAiEaDs825JGK33/ox88EoBDOkSITdjXh9J5sazRk4+pwmtYbqSJiCY 4aok3scxnhEjR6fd+ZV8e52dGANOvDr/cMw50D4lH9xLGZUnJAPQVOHu/sfNGR1/ luaPjebFrcqXKpXPjjRQ6fHjPwdsofLHLfxt5A5BJ4oWrPqiICuIgwqz8g+U3Ncd Tud6lT3+mgkWwjzfEtRKK5Gd89e7CDNFwSaeSbkWjrE27dZCA+2bTsTcTj36dyQM 4IQ2kr6REoMJnz0klDVUDC4n+u1zpTncaXyAOsmARQ79X8ARP2dJK5c2sqisILC+ z3ntbpXGNYbDCA5SM46PjrJyDVSWUkTs -----END CERTIFICATE-----Generated at Sun May 11 06:11:52 2025 by rpki-client