$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f536eab-1004-3dc3-9f99-6da2bb937111.roa File: 7f536eab-1004-3dc3-9f99-6da2bb937111.roa (raw, json) Hash identifier: B9EbrVcAh3wVr255cH0/zFUVmEaMz3Xcqi0zu1Qf7t8= Subject key identifier: EB:5D:98:97:3A:FD:E3:84:A1:98:90:C4:B9:3B:07:DB:77:3C:15:39 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A0C091843E5E0501E6A71AE80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f536eab-1004-3dc3-9f99-6da2bb937111.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 36628 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:09:18:43:e5:e0:50:1e:6a:71:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=d1c85dc6-e990-4559-8fce-52b54dfb6efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b4:fb:68:ae:ff:d2:11:b6:6a:9f:aa:56:1c: 01:e3:46:42:f8:28:5f:ff:bf:01:07:82:65:30:e1: 89:51:43:59:98:e6:42:de:88:c1:c9:01:03:76:16: 89:f4:67:88:34:17:73:88:45:ff:18:c4:9b:14:6a: 90:5e:db:9e:ad:e3:82:6d:21:63:d0:1e:e4:3f:83: aa:98:34:48:a2:fe:f6:f3:ca:e8:59:5a:05:d2:37: 41:a3:86:38:ce:77:52:67:b1:46:00:29:79:da:11: 86:d6:26:fa:d6:c1:de:80:0e:6d:ac:44:3b:e5:61: a0:83:56:91:20:fc:cf:70:ba:7b:b6:80:1a:42:46: 8f:a2:e4:a6:92:36:7c:ec:4f:6f:87:95:ba:3e:fb: 05:db:1b:92:d7:e9:77:25:1e:af:72:9d:a7:47:c3: c3:42:ea:d7:d0:9a:8d:8b:fe:cb:f4:c6:32:ec:bf: 92:f3:46:f4:10:38:d2:09:31:d4:34:6b:2a:73:b8: d0:0d:fc:01:74:e0:f3:2a:ef:99:d7:d1:fa:36:4c: 45:79:ab:5f:b8:c2:47:7d:e0:2a:35:f4:f9:3b:97: ef:54:7c:2e:e3:ba:9b:04:6d:7f:bf:9c:db:80:b2: f4:4f:78:72:33:85:a6:40:32:9b:d4:e2:c4:bb:21: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5D:98:97:3A:FD:E3:84:A1:98:90:C4:B9:3B:07:DB:77:3C:15:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f536eab-1004-3dc3-9f99-6da2bb937111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e0:63:bc:7f:94:0f:da:2b:be:20:47:d3:35:95:9b:65:7b: 4c:a4:43:97:dc:e0:b9:1c:9e:ac:78:7d:7b:09:88:47:42:c1: 42:83:88:89:5f:3d:79:c8:a8:93:45:85:0e:9c:36:e5:b3:23: be:c3:82:1a:29:4e:53:e2:55:f5:d3:07:bc:ac:0b:20:71:06: 6b:78:b9:fd:2c:9d:d9:7c:6b:ad:a3:cb:8f:fe:2b:7e:0d:24: 03:63:51:77:ea:90:b8:3e:09:4a:06:c8:9e:17:81:9f:9a:e0: a2:cf:be:14:a9:04:2d:cc:df:c3:07:0f:ba:95:59:10:f6:39: 55:35:b6:02:82:fe:c8:ff:fe:62:75:b3:57:36:49:07:a8:82: 19:21:a3:4f:78:b1:0d:c1:6c:3e:90:dc:2d:85:81:fc:2b:18: 8b:eb:92:b0:2a:d5:d8:60:44:f5:05:b1:5f:fb:b0:2a:20:4f: 21:f5:7a:71:85:e9:9d:18:a2:77:9c:8d:a0:86:50:44:6f:17: df:6c:6c:71:76:a6:53:1a:e6:56:f4:ef:4a:98:87:20:59:cd: 99:a9:fb:f1:43:0c:d7:b7:06:45:bd:b8:5c:7a:72:93:85:01: f9:71:3c:6a:6f:4b:1d:5d:52:73:38:f5:77:e0:d9:1c:66:a5: 58:3c:a9:d1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoMCRhD5eBQHmpxroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDFjODVkYzYtZTk5MC00NTU5LThmY2UtNTJiNTRkZmI2ZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrT7aK7/0hG2ap+qVhwB40ZC+Chf/78BB4Jl MOGJUUNZmOZC3ojByQEDdhaJ9GeINBdziEX/GMSbFGqQXtuereOCbSFj0B7kP4Oq mDRIov7288roWVoF0jdBo4Y4zndSZ7FGACl52hGG1ib61sHegA5trEQ75WGgg1aR IPzPcLp7toAaQkaPouSmkjZ87E9vh5W6PvsF2xuS1+l3JR6vcp2nR8PDQurX0JqN i/7L9MYy7L+S80b0EDjSCTHUNGsqc7jQDfwBdODzKu+Z19H6NkxFeatfuMJHfeAq NfT5O5fvVHwu47qbBG1/v5zbgLL0T3hyM4WmQDKb1OLEuyH0mQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOtdmJc6/eOEoZiQxLk7B9t3PBU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2Y1MzZlYWItMTAwNC0z ZGMzLTlmOTktNmRhMmJiOTM3MTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBp4GO8f5QP2iu+IEfTNZWbZXtMpEOX3OC5HJ6seH17CYhHQsFCg4iJ Xz15yKiTRYUOnDblsyO+w4IaKU5T4lX10we8rAsgcQZreLn9LJ3ZfGuto8uP/it+ DSQDY1F36pC4PglKBsieF4GfmuCiz74UqQQtzN/DBw+6lVkQ9jlVNbYCgv7I//5i dbNXNkkHqIIZIaNPeLENwWw+kNwthYH8KxiL65KwKtXYYET1BbFf+7AqIE8h9Xpx hemdGKJ3nI2ghlBEbxffbGxxdqZTGuZW9O9KmIcgWc2ZqfvxQwzXtwZFvbhcenKT hQH5cTxqb0sdXVJzOPV34NkcZqVYPKnR -----END CERTIFICATE-----Generated at Mon Jun 30 11:31:17 2025 by rpki-client