$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/403b6a1d-fa11-3a6c-8722-98755c82139a.roa File: 403b6a1d-fa11-3a6c-8722-98755c82139a.roa (raw, json) Hash identifier: Ou+bEUd13P0JPq6Z6XMWjJ+wznx53ifkep5i2H8nqvA= Subject key identifier: 72:BF:16:23:C5:11:74:8E:81:E4:B9:99:2C:52:17:56:48:C3:12:13 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858497974487517C66F01C5D3FE80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/403b6a1d-fa11-3a6c-8722-98755c82139a.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 397207 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:48:75:17:c6:6f:01:c5:d3:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=3fecc74c-5aa8-471b-854c-4249dfedf19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:78:94:5e:85:b1:78:f2:a9:5a:4a:d1:f7:31: 04:ff:36:8d:f6:5a:63:3b:5a:e6:40:6b:35:e6:3c: 4f:00:5c:5b:6c:f7:0c:a8:cc:19:df:8d:59:77:d1: bb:00:d6:b0:8b:59:22:d1:ab:ed:ad:03:a5:84:b8: a9:15:75:4b:d4:3e:38:93:6d:b5:c3:96:c3:08:a4: 3a:78:fc:06:a8:b6:d4:2c:ba:f8:7a:c7:28:0a:dc: 6b:f3:74:7a:8c:43:0b:cd:b6:4d:f0:10:55:fb:e2: b9:d2:5a:53:9b:6e:2d:31:cc:3c:5e:3e:92:16:81: 66:90:12:01:c6:69:88:c8:dc:4b:13:28:2f:38:f8: 70:0d:85:73:dc:6c:eb:d0:5c:8d:60:db:9e:b8:14: e1:13:c0:e7:14:4e:2d:01:0c:f2:40:c6:59:b3:1d: 4d:c6:e3:d4:48:77:7c:27:5f:96:68:7e:7c:6a:05: eb:46:37:0e:9f:92:b9:a2:df:8c:7d:75:eb:0c:4a: f2:c6:bb:a9:5b:ee:02:37:77:06:23:f1:ff:33:b9: f1:90:1a:a2:3c:01:ad:11:dc:0e:5a:35:b8:6b:01: 65:56:ff:30:32:13:5e:1f:43:0a:c6:03:c0:ed:64: a6:ab:92:f2:fc:7e:a8:78:b1:35:bc:50:34:e2:26: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BF:16:23:C5:11:74:8E:81:E4:B9:99:2C:52:17:56:48:C3:12:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/403b6a1d-fa11-3a6c-8722-98755c82139a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:0d:6b:03:7d:6f:b2:7c:87:00:ea:be:a2:db:e0:ae:f3:34: 7a:d4:98:8a:d6:4a:b5:fe:04:59:c2:e3:a3:8a:56:f6:1f:38: 72:ad:01:f2:6e:d0:25:39:43:11:97:a3:86:3a:36:1f:ce:29: 3f:8f:da:4f:fd:95:87:dc:be:77:da:fb:d7:3d:8a:55:f7:2c: b6:7f:85:9d:7b:ae:f8:3e:69:a0:b5:d3:ac:1e:d9:7c:59:9b: 2d:0b:f5:c1:38:47:f1:9c:15:24:dd:44:2d:cc:63:8e:72:f3: ad:3c:d2:63:1e:d7:f1:44:74:96:72:c9:93:bf:eb:cf:01:ae: 9b:13:8f:67:f3:49:3f:17:09:22:f4:a6:4e:ad:09:b7:ef:79: e7:dc:a2:5d:b0:5e:4a:c6:84:0a:9c:31:e7:ff:bc:fd:40:11: 9f:5a:47:3a:1f:32:8e:ef:97:59:b6:5f:66:f7:87:81:4d:51: 22:0b:15:1d:00:f0:85:a4:7d:8b:08:10:ba:b3:61:7b:4c:28: 3b:cd:ad:d3:ee:dc:24:6d:ad:e4:22:7e:1e:98:63:de:df:cd: 84:da:52:03:cf:9a:85:e2:01:0f:2e:45:7a:a8:f6:6a:88:20: 55:54:59:17:5b:97:17:3c:bd:68:d9:97:57:e5:17:e6:a5:59: ca:0c:e7:fc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl5dEh1F8ZvAcXT/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk M2ZlY2M3NGMtNWFhOC00NzFiLTg1NGMtNDI0OWRmZWRmMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlniUXoWxePKpWkrR9zEE/zaN9lpjO1rmQGs1 5jxPAFxbbPcMqMwZ341Zd9G7ANawi1ki0avtrQOlhLipFXVL1D44k221w5bDCKQ6 ePwGqLbULLr4escoCtxr83R6jEMLzbZN8BBV++K50lpTm24tMcw8Xj6SFoFmkBIB xmmIyNxLEygvOPhwDYVz3Gzr0FyNYNueuBThE8DnFE4tAQzyQMZZsx1NxuPUSHd8 J1+WaH58agXrRjcOn5K5ot+MfXXrDEryxrupW+4CN3cGI/H/M7nxkBqiPAGtEdwO WjW4awFlVv8wMhNeH0MKxgPA7WSmq5Ly/H6oeLE1vFA04ibXgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHK/FiPFEXSOgeS5mSxSF1ZIwxITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDAzYjZhMWQtZmExMS0z YTZjLTg3MjItOTg3NTVjODIxMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCnDWsDfW+yfIcA6r6i2+Cu8zR61JiK1kq1/gRZwuOjilb2HzhyrQHy btAlOUMRl6OGOjYfzik/j9pP/ZWH3L532vvXPYpV9yy2f4Wde674PmmgtdOsHtl8 WZstC/XBOEfxnBUk3UQtzGOOcvOtPNJjHtfxRHSWcsmTv+vPAa6bE49n80k/Fwki 9KZOrQm373nn3KJdsF5KxoQKnDHn/7z9QBGfWkc6HzKO75dZtl9m94eBTVEiCxUd APCFpH2LCBC6s2F7TCg7za3T7twkba3kIn4emGPe382E2lIDz5qF4gEPLkV6qPZq iCBVVFkXW5cXPL1o2ZdX5RfmpVnKDOf8 -----END CERTIFICATE-----Generated at Sun May 11 00:29:49 2025 by rpki-client