$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8bf2b2c-8689-3b5c-a3ad-0aae985a242d.roa File: b8bf2b2c-8689-3b5c-a3ad-0aae985a242d.roa (raw, json) Hash identifier: ya7/vK1Ti7Cw74e+SoPApWgV1BF+P39bYjqarJr1ljw= Subject key identifier: CA:6D:BD:D9:F3:C1:FA:A2:1A:57:1A:64:EE:52:B5:83:54:12:F7:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584993F9FFACCD5FA2ED6FA95100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8bf2b2c-8689-3b5c-a3ad-0aae985a242d.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 396593 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:ff:ac:cd:5f:a2:ed:6f:a9:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=c7003b71-fa8d-4e5f-b54c-ce22286236ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fb:1c:a1:62:c8:d2:16:4a:4b:94:1f:1b:1f: b8:20:dd:8c:a6:c5:bb:ed:61:b0:9d:58:ef:42:e8: 89:a1:48:3e:c0:35:04:47:64:71:3a:98:fa:74:a6: 21:e7:a6:ae:0a:93:60:f6:90:0a:9a:d8:a8:cf:98: 00:45:fa:7e:83:63:4d:2a:ce:3a:ce:bb:36:c8:81: 2e:85:35:35:88:37:b4:0b:12:20:c6:2d:07:f7:80: 07:7d:1d:a6:bc:2d:b3:90:eb:b5:ee:af:0f:81:aa: cd:80:5c:eb:d3:b5:56:de:bb:ef:be:c4:ee:29:01: e1:f2:b3:56:9e:f3:c1:c1:d8:36:00:86:bb:d9:d0: fb:8b:cb:7d:12:96:35:01:1a:63:83:fe:37:92:29: 83:f6:3b:be:14:e4:38:e7:32:41:8d:fa:d6:2e:1f: 18:f5:3e:4b:39:44:d0:7a:48:d8:a3:99:64:2c:c0: 3c:86:34:c3:eb:19:42:04:75:96:cf:3b:c4:a9:c6: 33:c8:e3:b9:a3:44:17:cf:f9:eb:bb:70:66:a8:da: 6c:a8:0e:90:7c:0e:73:63:51:01:23:a3:64:38:be: 58:ff:7f:33:3f:44:a6:e1:f6:0e:65:96:73:88:77: 44:87:21:8d:67:74:1e:f3:a3:94:ab:67:df:c6:cf: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6D:BD:D9:F3:C1:FA:A2:1A:57:1A:64:EE:52:B5:83:54:12:F7:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8bf2b2c-8689-3b5c-a3ad-0aae985a242d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b8:a6:b5:ae:eb:eb:cc:ea:50:23:0d:f7:70:9d:c3:f9:f8: d1:28:74:ac:4b:e7:5c:9d:5f:96:ff:54:1b:87:df:b0:98:c8: 1b:39:5a:a7:c8:c1:e0:8a:69:33:bc:71:02:52:23:1a:d7:d9: 4d:a8:d0:b2:9f:f2:bf:23:72:13:38:07:49:ab:bb:ce:76:d7: bf:16:40:2a:19:e9:44:7b:89:4f:dd:32:a9:e1:c2:e4:9a:cf: 06:ae:49:43:74:71:b6:77:b4:a8:9e:8c:40:2d:47:d2:ed:65: 46:fb:54:7c:86:b3:f2:4e:22:2f:03:a2:11:06:9f:49:82:89: a3:0d:06:19:bc:fc:70:d2:c8:ce:3d:02:35:b9:16:bf:8c:66: 7f:78:7a:61:cb:a4:f5:02:55:3f:b9:07:e9:0e:11:7a:6a:62: 96:04:b7:ee:db:66:1f:94:6a:db:c6:9e:2d:f0:60:07:38:b7: 90:c8:7a:4b:45:54:d0:24:85:e1:00:4a:72:d6:09:52:df:b6: 9a:63:90:c5:5f:a0:d4:86:1f:00:79:5e:c3:64:81:8d:74:df: c0:1e:03:3d:e3:8f:9e:3c:ba:d7:8d:94:0c:6e:e3:fe:a3:b5: ca:32:2e:b7:93:87:9f:91:e8:42:f7:16:0d:ac:97:18:67:10: 5a:78:c6:83 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+f+szV+i7W+pUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YzcwMDNiNzEtZmE4ZC00ZTVmLWI1NGMtY2UyMjI4NjIzNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPscoWLI0hZKS5QfGx+4IN2MpsW77WGwnVjv QuiJoUg+wDUER2RxOpj6dKYh56auCpNg9pAKmtioz5gARfp+g2NNKs46zrs2yIEu hTU1iDe0CxIgxi0H94AHfR2mvC2zkOu17q8PgarNgFzr07VW3rvvvsTuKQHh8rNW nvPBwdg2AIa72dD7i8t9EpY1ARpjg/43kimD9ju+FOQ45zJBjfrWLh8Y9T5LOUTQ ekjYo5lkLMA8hjTD6xlCBHWWzzvEqcYzyOO5o0QXz/nru3BmqNpsqA6QfA5zY1EB I6NkOL5Y/38zP0Sm4fYOZZZziHdEhyGNZ3Qe86OUq2ffxs8IEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMptvdnzwfqiGlcaZO5StYNUEvcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjhiZjJiMmMtODY4OS0z YjVjLWEzYWQtMGFhZTk4NWEyNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAAuKa1ruvrzOpQIw33cJ3D+fjRKHSsS+dcnV+W/1Qbh9+wmMgbOVqn yMHgimkzvHECUiMa19lNqNCyn/K/I3ITOAdJq7vOdte/FkAqGelEe4lP3TKp4cLk ms8GrklDdHG2d7SonoxALUfS7WVG+1R8hrPyTiIvA6IRBp9JgomjDQYZvPxw0sjO PQI1uRa/jGZ/eHphy6T1AlU/uQfpDhF6amKWBLfu22YflGrbxp4t8GAHOLeQyHpL RVTQJIXhAEpy1glS37aaY5DFX6DUhh8AeV7DZIGNdN/AHgM944+ePLrXjZQMbuP+ o7XKMi63k4efkehC9xYNrJcYZxBaeMaD -----END CERTIFICATE-----Generated at Sat May 10 23:13:47 2025 by rpki-client