$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfed3926-df38-31bc-9681-6042bfbb2859.roa File: cfed3926-df38-31bc-9681-6042bfbb2859.roa (raw, json) Hash identifier: KaxncHdxgIh5/flnE01Urd3F6PnYW/bFsYtknyBg2oo= Subject key identifier: 74:94:0B:BB:9E:64:12:FB:65:A3:C3:7E:AA:B8:CB:F7:EB:4A:A5:5D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AA4F6039E178839957D25C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfed3926-df38-31bc-9681-6042bfbb2859.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 396543 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:60:39:e1:78:83:99:57:d2:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=6d661981-8e26-4f96-ac7a-856b45918eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:e8:ba:cc:c6:65:09:fe:e2:2e:d3:24:f2: b6:6c:39:d6:fd:84:01:63:94:72:0a:9d:da:6f:3e: d1:dd:1b:56:71:9d:e1:21:b7:9f:c8:e2:e3:0f:fa: 20:85:7b:7f:4c:39:67:78:9f:0a:4a:7c:8b:45:5a: d8:a5:c0:0a:0a:7c:fd:68:3f:b2:83:b5:3c:dd:ae: b7:00:fc:01:b2:24:a9:5c:6e:d0:8d:dc:6c:71:d2: ed:ee:e7:a7:65:f4:e1:9a:d6:c0:e6:39:b5:a7:a7: 24:8b:4a:c4:88:07:2a:3f:62:12:d3:8c:8b:f8:50: 7f:cc:32:a8:df:d7:80:09:01:ed:6e:87:a3:44:60: ba:7f:e6:8a:cf:58:d7:0d:68:9b:d7:d0:99:ee:e9: 7e:4e:ea:1f:34:72:0c:a1:30:f7:9e:b9:07:51:77: 94:b3:15:ea:27:b4:5c:15:f0:1d:93:ac:8e:82:fa: 52:1a:0e:a2:05:d7:32:ea:29:9e:4c:9c:55:11:27: d1:75:a6:3e:a3:dd:39:4d:f3:08:93:3f:f6:1d:0f: 34:48:a0:bf:5d:d3:44:ae:48:2c:f5:cf:84:ff:f0: de:5b:04:87:2f:69:1f:26:71:ae:f6:99:cb:82:91: 33:8c:e7:8b:44:fc:29:90:9c:8d:58:fe:99:be:9e: ca:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:94:0B:BB:9E:64:12:FB:65:A3:C3:7E:AA:B8:CB:F7:EB:4A:A5:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfed3926-df38-31bc-9681-6042bfbb2859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:af:e7:e4:37:2e:0e:55:0c:06:94:a1:2b:1e:28:9e:a9:bb: d5:1a:c6:da:de:26:ef:39:17:4a:85:88:dd:19:3b:2f:2d:a0: 6e:4b:c3:23:c6:9d:09:4d:98:27:be:30:be:5b:db:67:df:44: f5:cc:c4:b9:3b:26:43:27:38:8f:d4:72:a3:aa:85:b3:ce:19: dc:91:1f:ae:cf:0c:f3:04:f6:47:73:2a:04:15:78:e2:6d:f3: c1:6d:96:72:21:ae:9c:cf:40:71:70:fc:83:a0:b6:db:26:d3: da:7f:b5:00:c7:91:92:c6:04:58:f8:fa:88:6c:0d:89:26:e2: 76:bb:79:3e:fb:2f:71:bf:10:c8:ca:98:04:29:73:7b:f9:7f: 5f:43:78:d6:90:35:6b:43:54:60:ca:1e:2c:79:d5:46:73:a7: b0:9b:23:0e:21:ce:ad:a7:5d:d4:71:4a:25:25:9a:b2:0b:f4: 05:ee:e6:94:0e:ce:5c:59:48:e8:6a:2c:a3:d2:24:74:73:60: 1c:d5:2a:a5:23:1d:44:c1:36:1b:2f:ab:e9:3d:f7:89:39:1e: 0a:ab:ee:4f:8b:37:a9:06:78:09:e1:dd:75:32:90:db:34:51: f1:11:57:6d:c1:a2:31:e4:9e:62:04:38:4f:e2:fb:8f:8c:8c: c0:42:71:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmqT2A54XiDmVfSXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk NmQ2NjE5ODEtOGUyNi00Zjk2LWFjN2EtODU2YjQ1OTE4ZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlfouszGZQn+4i7TJPK2bDnW/YQBY5RyCp3a bz7R3RtWcZ3hIbefyOLjD/oghXt/TDlneJ8KSnyLRVrYpcAKCnz9aD+yg7U83a63 APwBsiSpXG7QjdxscdLt7uenZfThmtbA5jm1p6cki0rEiAcqP2IS04yL+FB/zDKo 39eACQHtboejRGC6f+aKz1jXDWib19CZ7ul+TuofNHIMoTD3nrkHUXeUsxXqJ7Rc FfAdk6yOgvpSGg6iBdcy6imeTJxVESfRdaY+o905TfMIkz/2HQ80SKC/XdNErkgs 9c+E//DeWwSHL2kfJnGu9pnLgpEzjOeLRPwpkJyNWP6Zvp7K9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHSUC7ueZBL7ZaPDfqq4y/frSqVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZlZDM5MjYtZGYzOC0z MWJjLTk2ODEtNjA0MmJmYmIyODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnr+fkNy4OVQwGlKErHiieqbvVGsba3ibvORdKhYjdGTsvLaBuS8Mj xp0JTZgnvjC+W9tn30T1zMS5OyZDJziP1HKjqoWzzhnckR+uzwzzBPZHcyoEFXji bfPBbZZyIa6cz0BxcPyDoLbbJtPaf7UAx5GSxgRY+PqIbA2JJuJ2u3k++y9xvxDI ypgEKXN7+X9fQ3jWkDVrQ1Rgyh4sedVGc6ewmyMOIc6tp13UcUolJZqyC/QF7uaU Ds5cWUjoaiyj0iR0c2Ac1SqlIx1EwTYbL6vpPfeJOR4Kq+5PizepBngJ4d11MpDb NFHxEVdtwaIx5J5iBDhP4vuPjIzAQnFz -----END CERTIFICATE-----Generated at Sun May 11 15:02:28 2025 by rpki-client