$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f9ff8d-dce9-3139-9ae7-50f5d2914124.roa File: b9f9ff8d-dce9-3139-9ae7-50f5d2914124.roa (raw, json) Hash identifier: orly3zyDXYu8aC5nYh+iW6fbcWw/IMjjXbBJjkpUjxc= Subject key identifier: 91:21:B1:17:D3:96:E1:7E:67:9F:16:3E:DF:DC:A3:5D:F5:49:CB:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AA4F633D3E27003567CF68E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f9ff8d-dce9-3139-9ae7-50f5d2914124.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 396591 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:63:3d:3e:27:00:35:67:cf:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=2b88e9dd-cf57-46a8-9382-d1389046e2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:42:d3:54:f4:cd:fa:77:75:39:10:2e:f7:23: 03:1b:b3:36:24:d1:e6:f9:49:02:1c:c2:69:99:34: 7c:76:25:41:ca:a7:00:70:2e:29:8a:95:4c:79:d1: 07:55:a6:d7:0d:03:37:5a:11:77:04:87:14:72:b1: b8:d1:de:81:d7:95:67:06:2d:c0:54:ca:d0:f3:c6: 19:ac:f4:8a:34:34:e6:54:b5:3d:2b:22:f2:d0:d5: e6:f0:c2:ee:74:09:95:34:71:e8:36:31:c6:d0:fe: e7:8a:30:33:41:92:fd:8b:94:a8:f6:2c:57:e0:d5: e1:db:48:3a:ca:63:90:d6:34:87:fc:da:65:11:f6: 97:0e:05:30:b3:22:7d:e4:58:04:b1:3a:13:a2:af: 39:49:32:13:d0:64:63:2e:3c:d5:2f:47:60:3d:28: 3c:be:6d:77:18:30:da:bb:20:28:33:84:37:51:49: 0e:4c:0a:44:c4:48:97:80:cb:8c:0b:51:a2:9d:ff: 11:56:4c:a9:c0:70:58:5f:a4:ef:ce:17:76:d3:92: 86:30:33:1d:58:51:24:13:44:4a:fa:34:41:51:bf: 98:b7:85:37:e2:0b:f0:04:9b:82:5a:71:03:dd:9c: 45:34:94:4e:f5:57:61:82:37:63:8c:9b:76:49:a5: b2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:21:B1:17:D3:96:E1:7E:67:9F:16:3E:DF:DC:A3:5D:F5:49:CB:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f9ff8d-dce9-3139-9ae7-50f5d2914124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:56:06:42:64:35:b6:d9:2d:19:05:4e:ba:0a:42:18:fc:06: 1f:d3:05:44:29:52:63:d7:2e:b1:80:c5:39:0a:37:23:5b:d3: 70:c5:f7:5b:26:4b:4d:65:d6:47:cf:f2:c9:6e:4c:36:5e:4d: 8d:54:94:67:5f:d9:b5:ef:bc:7e:25:b9:8a:95:2d:20:08:65: c0:7a:d1:79:79:88:e4:4d:eb:66:6a:cc:1c:94:61:54:17:7a: f2:8c:cd:79:50:a8:bd:c3:4c:f1:8e:2d:8c:9e:11:8d:f9:df: d1:94:9b:87:75:81:c0:e5:fa:10:88:00:ee:e6:9f:0c:af:e1: f9:cd:83:84:bd:b0:e3:4b:d4:da:81:34:d0:05:7b:1d:a6:30: 8f:45:e8:5d:2c:19:25:f0:12:e0:2c:81:46:8f:c9:02:5d:9f: 8e:81:9b:22:24:db:bd:0f:5e:7b:90:3f:21:9b:b1:74:a8:98: 1a:33:c4:c5:ff:8f:30:b1:78:88:d7:2e:49:05:f5:ab:32:fc: 16:2c:6d:9a:a1:1e:4f:47:38:0f:00:f8:a6:06:a5:6b:21:91: ce:64:c7:2e:48:6a:3e:2a:55:21:72:e9:1b:41:b8:87:f5:0d: 4d:48:0a:c3:fd:d9:1e:fe:8a:96:bf:7b:77:9a:70:96:11:c1: cd:30:82:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmqT2M9PicANWfPaOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MmI4OGU5ZGQtY2Y1Ny00NmE4LTkzODItZDEzODkwNDZlMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkULTVPTN+nd1ORAu9yMDG7M2JNHm+UkCHMJp mTR8diVByqcAcC4pipVMedEHVabXDQM3WhF3BIcUcrG40d6B15VnBi3AVMrQ88YZ rPSKNDTmVLU9KyLy0NXm8MLudAmVNHHoNjHG0P7nijAzQZL9i5So9ixX4NXh20g6 ymOQ1jSH/NplEfaXDgUwsyJ95FgEsToToq85STIT0GRjLjzVL0dgPSg8vm13GDDa uyAoM4Q3UUkOTApExEiXgMuMC1Ginf8RVkypwHBYX6Tvzhd205KGMDMdWFEkE0RK +jRBUb+Yt4U34gvwBJuCWnED3ZxFNJRO9VdhgjdjjJt2SaWy+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJEhsRfTluF+Z58WPt/co131Scs7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjlmOWZmOGQtZGNlOS0z MTM5LTlhZTctNTBmNWQyOTE0MTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQADVgZCZDW22S0ZBU66CkIY/AYf0wVEKVJj1y6xgMU5CjcjW9Nwxfdb JktNZdZHz/LJbkw2Xk2NVJRnX9m177x+JbmKlS0gCGXAetF5eYjkTetmaswclGFU F3ryjM15UKi9w0zxji2MnhGN+d/RlJuHdYHA5foQiADu5p8Mr+H5zYOEvbDjS9Ta gTTQBXsdpjCPRehdLBkl8BLgLIFGj8kCXZ+OgZsiJNu9D157kD8hm7F0qJgaM8TF /48wsXiI1y5JBfWrMvwWLG2aoR5PRzgPAPimBqVrIZHOZMcuSGo+KlUhcukbQbiH 9Q1NSArD/dke/oqWv3t3mnCWEcHNMIJY -----END CERTIFICATE-----Generated at Sat May 10 23:14:41 2025 by rpki-client