$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/467f7dcb-110e-319c-8a9b-1860b4541120.roa File: 467f7dcb-110e-319c-8a9b-1860b4541120.roa (raw, json) Hash identifier: kW3BAE30eek6q53Wkl0zQNvK1oD1GxUAls6erbUfdsk= Subject key identifier: C4:32:0A:0F:3C:C1:35:2E:6C:E6:4C:70:86:A0:A5:4C:69:9C:67:D1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AA4F5C1D19E38331B54F3300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/467f7dcb-110e-319c-8a9b-1860b4541120.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 396551 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:5c:1d:19:e3:83:31:b5:4f:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=b9067eff-e135-4b0c-ab66-b2abd3c08e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:74:76:0d:98:ed:be:97:22:9a:e5:ed:d0: c0:83:bb:c3:97:ac:f0:04:37:cd:ed:69:df:66:99: d8:fa:bc:e8:7b:46:bd:a3:b6:20:6d:f4:9b:37:c1: 7b:8c:2e:49:42:19:0e:da:43:b3:2d:96:8b:6e:46: 05:8b:58:3b:a7:aa:e8:cd:8c:43:bb:8e:1e:29:6b: b1:fe:ec:f9:40:51:21:57:32:0e:6b:df:47:65:cf: 51:28:b4:fa:8b:1a:31:90:b7:e4:1e:86:82:18:d3: e8:3c:d0:4a:fe:aa:9a:70:85:23:29:85:65:b4:05: 40:c0:70:84:32:07:57:74:95:08:0e:b5:37:69:43: 9a:53:e7:71:f5:62:2f:78:55:61:f4:f7:b4:1c:80: b7:f7:56:74:18:e6:6f:69:4a:66:60:f2:2e:23:ed: db:4b:86:e7:c6:84:00:93:2f:6f:bc:bc:c4:ab:a1: 7c:5f:25:cb:0c:7c:c5:8b:eb:64:0a:5c:40:75:2d: e1:ae:2d:37:45:ad:e1:af:62:08:f3:37:e5:50:69: 52:9c:9f:f4:f5:8f:01:c4:78:cb:04:70:1a:d7:18: 13:9d:e0:38:84:77:8c:fd:0c:4b:56:d4:02:73:e6: fe:7d:b4:fb:e1:2e:3b:89:e3:89:38:c6:f5:57:dc: 90:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:32:0A:0F:3C:C1:35:2E:6C:E6:4C:70:86:A0:A5:4C:69:9C:67:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/467f7dcb-110e-319c-8a9b-1860b4541120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:70:b4:8f:99:4a:cf:75:29:8b:a0:cd:64:d1:be:3d:66:16: f1:18:54:f6:39:fa:7e:da:d7:7d:7f:f1:de:3c:a6:c6:eb:0c: e3:83:ea:43:21:e8:89:98:62:12:91:db:d9:ef:c7:7a:ea:4b: 3b:a4:1f:76:3b:a0:b6:04:11:87:7f:65:ff:78:a4:cb:3e:0c: 3a:b6:68:66:74:1b:30:10:21:70:cc:b9:c0:c4:2b:aa:fb:d6: 83:94:c8:d7:13:f2:13:6e:50:92:93:ef:18:15:e8:c3:78:fd: 13:08:38:d0:51:28:59:12:3e:12:74:14:24:fd:10:f4:26:3b: 46:69:74:ae:22:5b:48:14:a9:fb:2e:66:8f:62:f7:72:e8:16: 79:fa:2c:fe:97:78:a8:e3:5d:cd:c3:59:a3:43:0d:5f:09:1c: e4:6b:39:94:9d:3f:3c:20:15:fb:7d:ab:13:ef:03:08:c5:4c: 14:a0:de:ed:ae:e4:4e:67:b1:e9:03:27:86:b1:76:06:bd:d3: dd:fd:d1:2d:02:37:fd:31:d9:1f:9e:fd:7a:5d:48:c4:1a:26: a8:c8:30:c8:b5:05:2f:22:42:8d:4b:e1:19:14:19:aa:21:dc: a6:85:ce:d8:4c:8b:47:25:e4:9e:92:fa:b4:bd:c8:cb:87:28: 51:47:83:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmqT1wdGeODMbVPMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk YjkwNjdlZmYtZTEzNS00YjBjLWFiNjYtYjJhYmQzYzA4ZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAont0dg2Y7b6XIprl7dDAg7vDl6zwBDfN7Wnf ZpnY+rzoe0a9o7YgbfSbN8F7jC5JQhkO2kOzLZaLbkYFi1g7p6rozYxDu44eKWux /uz5QFEhVzIOa99HZc9RKLT6ixoxkLfkHoaCGNPoPNBK/qqacIUjKYVltAVAwHCE MgdXdJUIDrU3aUOaU+dx9WIveFVh9Pe0HIC391Z0GOZvaUpmYPIuI+3bS4bnxoQA ky9vvLzEq6F8XyXLDHzFi+tkClxAdS3hri03Ra3hr2II8zflUGlSnJ/09Y8BxHjL BHAa1xgTneA4hHeM/QxLVtQCc+b+fbT74S47ieOJOMb1V9yQZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMQyCg88wTUubOZMcIagpUxpnGfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDY3ZjdkY2ItMTEwZS0z MTljLThhOWItMTg2MGI0NTQxMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCgcLSPmUrPdSmLoM1k0b49ZhbxGFT2Ofp+2td9f/HePKbG6wzjg+pD IeiJmGISkdvZ78d66ks7pB92O6C2BBGHf2X/eKTLPgw6tmhmdBswECFwzLnAxCuq +9aDlMjXE/ITblCSk+8YFejDeP0TCDjQUShZEj4SdBQk/RD0JjtGaXSuIltIFKn7 LmaPYvdy6BZ5+iz+l3io413Nw1mjQw1fCRzkazmUnT88IBX7fasT7wMIxUwUoN7t ruROZ7HpAyeGsXYGvdPd/dEtAjf9Mdkfnv16XUjEGiaoyDDItQUvIkKNS+EZFBmq Idymhc7YTItHJeSekvq0vcjLhyhRR4Pg -----END CERTIFICATE-----Generated at Sun May 11 06:31:53 2025 by rpki-client