$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e3bc4cb-f0ca-3458-9b22-6620f299f32b.roa File: 9e3bc4cb-f0ca-3458-9b22-6620f299f32b.roa (raw, json) Hash identifier: G09ppG7jbpL8tzr/IOE1uFBrWyFR8dcdcBukKBDim7A= Subject key identifier: F1:9C:EA:28:6C:42:D6:D3:A3:96:77:27:E7:33:A1:AE:E4:42:D9:D8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584993F9FE5A8C3FBF372AB2D780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e3bc4cb-f0ca-3458-9b22-6620f299f32b.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 396615 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:fe:5a:8c:3f:bf:37:2a:b2:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=fc885fce-3a0c-4ff2-995c-c33ceba35f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:b1:a3:54:a2:c2:2a:bc:cc:0f:0f:6d:a7: 89:30:ca:e3:a6:58:c3:77:e7:41:3a:6f:64:02:34: 1c:fe:e5:83:c8:81:3c:39:d3:80:5e:ed:79:e9:ad: 9d:de:52:1d:23:71:e6:1f:b6:87:82:24:b6:55:fe: 67:01:e7:30:fe:bb:bc:ce:ab:e7:84:5b:c2:b0:10: f3:01:ac:18:a0:e0:e3:74:2d:66:6e:ed:5b:d7:c1: 84:a3:66:75:2b:0a:be:8f:c4:5e:9d:c6:5c:31:38: 6d:4b:97:57:c5:f4:88:be:71:32:99:0e:ba:24:75: 24:98:36:48:0e:40:6f:f3:90:a7:dd:54:44:25:b1: c2:e8:fe:0a:1a:56:53:8f:9b:b7:36:c8:7a:df:60: c1:a6:8e:76:5d:4c:f7:af:4b:5e:b8:51:26:d1:2a: b2:8d:3f:16:1e:cc:a2:e9:34:58:56:5e:98:0c:1d: 3f:15:d4:2c:1d:79:80:19:d3:19:30:90:eb:84:dc: 73:87:c1:3a:14:e1:49:aa:0e:0a:56:5e:02:23:2b: 5d:83:15:a9:03:c2:4b:80:ea:a0:12:0d:5b:11:f2: 1c:b7:be:d5:b6:6e:e5:23:c1:ef:ba:1e:11:a7:a6: 27:5e:0c:9c:df:a1:c1:88:ce:bc:58:f7:13:e8:2a: 2b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9C:EA:28:6C:42:D6:D3:A3:96:77:27:E7:33:A1:AE:E4:42:D9:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e3bc4cb-f0ca-3458-9b22-6620f299f32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c1:3e:26:5f:22:bd:df:b1:bf:48:3a:ec:91:b8:fa:32:5e: 49:0b:ef:44:59:e0:16:8e:c6:04:a9:c3:6b:9b:62:57:60:c7: 2f:5e:59:b6:f2:eb:2f:ff:10:7b:cf:00:20:1a:1f:dc:d5:3d: 2a:ff:92:33:e8:f8:97:c8:c0:02:39:3d:f6:dd:87:24:08:6e: ae:de:bf:2f:78:24:52:80:c3:80:28:4b:cc:8a:09:a9:ad:ca: 92:27:ee:22:a8:2f:fe:0e:6a:d1:82:89:c0:e2:a1:3f:55:98: df:ba:3f:51:e0:2f:8f:73:f3:ac:3d:da:7f:c0:d4:22:6f:6a: cb:ea:94:bd:02:a6:95:e1:0b:ce:c0:13:02:92:39:af:1f:3a: e0:cc:64:88:93:7a:f2:35:46:27:07:5f:7a:bc:5e:83:f4:23: ba:eb:11:11:6e:4c:9c:7f:88:b8:27:4d:e1:89:c4:b7:ea:4a: 77:dd:04:ae:8a:fc:d1:e1:a8:e6:98:11:53:da:53:28:61:45: 09:a9:6c:04:e3:dd:61:31:4f:90:e2:07:0e:24:f5:84:d8:4b: 9b:99:b7:d0:8d:04:85:1e:90:c1:62:2c:eb:de:6c:57:68:a9: af:41:e4:a9:95:c3:37:24:1a:45:73:e8:75:91:4a:d0:32:f2: 75:ae:a0:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+f5ajD+/Nyqy14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZmM4ODVmY2UtM2EwYy00ZmYyLTk5NWMtYzMzY2ViYTM1ZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyuxo1Siwiq8zA8PbaeJMMrjpljDd+dBOm9k AjQc/uWDyIE8OdOAXu156a2d3lIdI3HmH7aHgiS2Vf5nAecw/ru8zqvnhFvCsBDz AawYoODjdC1mbu1b18GEo2Z1Kwq+j8RencZcMThtS5dXxfSIvnEymQ66JHUkmDZI DkBv85Cn3VREJbHC6P4KGlZTj5u3Nsh632DBpo52XUz3r0teuFEm0SqyjT8WHsyi 6TRYVl6YDB0/FdQsHXmAGdMZMJDrhNxzh8E6FOFJqg4KVl4CIytdgxWpA8JLgOqg Eg1bEfIct77Vtm7lI8Hvuh4Rp6YnXgyc36HBiM68WPcT6CorfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPGc6ihsQtbTo5Z3J+czoa7kQtnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWUzYmM0Y2ItZjBjYS0z NDU4LTliMjItNjYyMGYyOTlmMzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGwT4mXyK937G/SDrskbj6Ml5JC+9EWeAWjsYEqcNrm2JXYMcvXlm2 8usv/xB7zwAgGh/c1T0q/5Iz6PiXyMACOT323YckCG6u3r8veCRSgMOAKEvMigmp rcqSJ+4iqC/+DmrRgonA4qE/VZjfuj9R4C+Pc/OsPdp/wNQib2rL6pS9AqaV4QvO wBMCkjmvHzrgzGSIk3ryNUYnB196vF6D9CO66xERbkycf4i4J03hicS36kp33QSu ivzR4ajmmBFT2lMoYUUJqWwE491hMU+Q4gcOJPWE2EubmbfQjQSFHpDBYizr3mxX aKmvQeSplcM3JBpFc+h1kUrQMvJ1rqCd -----END CERTIFICATE-----Generated at Sun May 11 12:26:00 2025 by rpki-client