$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f35fdefc-f3bb-3974-bfe8-457a0d138fce.roa File: f35fdefc-f3bb-3974-bfe8-457a0d138fce.roa (raw, json) Hash identifier: H2KkT7tN8gTJhmdin5wapjKdRh6wbI7MDwvgU1BImEI= Subject key identifier: F2:73:DF:85:C2:35:5B:CA:FE:D2:06:2F:C6:D1:31:86:C3:81:A8:B7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AA4F57A6E19A570318C63C40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f35fdefc-f3bb-3974-bfe8-457a0d138fce.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 396549 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:57:a6:e1:9a:57:03:18:c6:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=6bcf31e9-56a2-4a5a-a196-52a82c0e32e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:58:9b:cb:bb:29:ec:4f:e8:ca:28:ac:77: 12:f3:0f:f1:a3:89:26:ec:fe:c3:25:e9:20:f6:e8: e2:2d:91:f2:bc:a9:c3:25:72:87:16:c6:eb:b6:34: f8:2f:0c:87:95:dc:89:d0:1a:26:3d:58:83:8b:94: 56:fc:60:3f:5c:f8:01:0e:87:d2:84:bb:ce:ad:a9: 4d:b0:4c:5e:12:bd:14:9f:50:3d:0e:8c:2a:dd:af: e0:90:da:70:d1:7d:25:f8:fa:7c:58:78:fd:3f:49: 9e:f9:3d:a9:d2:02:0c:f6:f0:74:77:85:59:2f:0c: 1d:57:ad:32:a3:72:d5:c5:5c:2e:5e:d9:4e:83:16: 9c:1c:85:5c:d9:3d:35:ba:fa:9b:ec:9b:2e:8e:bc: d3:29:12:bc:c2:32:1d:11:2a:ad:f8:b6:af:2f:f7: 97:a9:28:34:96:49:c6:f0:c0:d0:67:32:91:f9:ba: 10:a7:9c:84:9b:e1:d8:31:35:0d:ce:99:1a:9b:92: af:2d:c5:c5:06:2f:6f:0a:73:29:b4:09:e8:1a:d3: b8:4b:89:03:b4:45:34:ff:e9:a9:ed:a4:5b:67:e9: 70:e1:0d:59:a9:6a:c7:90:b4:d2:f5:58:1e:b4:39: 40:6c:36:b8:e1:22:af:11:d0:69:02:7b:8d:6b:6e: 4c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:73:DF:85:C2:35:5B:CA:FE:D2:06:2F:C6:D1:31:86:C3:81:A8:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f35fdefc-f3bb-3974-bfe8-457a0d138fce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:70:9f:85:b2:14:77:12:4a:59:34:fc:b6:dc:bf:25:42:5a: 38:a5:53:c7:92:d1:60:b4:27:dd:00:e6:05:3c:8c:39:f2:a6: 2d:5e:11:a4:f9:79:a8:81:c6:0d:90:bc:b2:32:60:fe:52:fd: d3:b8:20:25:b9:d2:90:6b:fc:24:00:57:94:5f:2c:ee:f7:39: 1c:70:01:5f:7b:38:9c:63:03:66:6c:00:73:5b:0f:51:3c:b5: bc:c1:7b:42:90:39:3c:c7:8a:b4:77:45:77:c4:35:cd:a8:29: cf:ce:2f:67:27:ce:5c:45:07:1a:5c:d7:12:bd:e2:8b:d5:f9: ed:43:57:22:fa:a6:c4:79:08:44:c9:f8:21:c5:d7:40:3e:28: d5:3d:ad:8d:ff:2f:05:e2:b0:79:44:34:94:fc:c5:04:c0:99: 1f:c3:d9:11:23:d9:f8:bd:16:d7:3d:a5:c6:bb:b2:c5:84:88: 3e:03:b8:92:a3:a2:59:9d:e1:b8:3f:9b:d6:c7:48:96:f1:b6: fb:99:04:d8:d3:52:c3:6b:7b:cc:a2:2a:e3:77:ce:ef:80:47: 3a:63:7f:fe:61:ce:47:42:9d:14:e0:8c:fa:72:75:7c:4c:b8: 1c:aa:b8:a3:66:fe:20:19:c2:e1:1a:1d:47:23:3e:ca:60:66: 16:2e:a8:88 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmqT1em4ZpXAxjGPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk NmJjZjMxZTktNTZhMi00YTVhLWExOTYtNTJhODJjMGUzMmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtulYm8u7KexP6MoorHcS8w/xo4km7P7DJekg 9ujiLZHyvKnDJXKHFsbrtjT4LwyHldyJ0BomPViDi5RW/GA/XPgBDofShLvOralN sExeEr0Un1A9Dowq3a/gkNpw0X0l+Pp8WHj9P0me+T2p0gIM9vB0d4VZLwwdV60y o3LVxVwuXtlOgxacHIVc2T01uvqb7JsujrzTKRK8wjIdESqt+LavL/eXqSg0lknG 8MDQZzKR+boQp5yEm+HYMTUNzpkam5KvLcXFBi9vCnMptAnoGtO4S4kDtEU0/+mp 7aRbZ+lw4Q1ZqWrHkLTS9VgetDlAbDa44SKvEdBpAnuNa25MhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPJz34XCNVvK/tIGL8bRMYbDgai3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjM1ZmRlZmMtZjNiYi0z OTc0LWJmZTgtNDU3YTBkMTM4ZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWcJ+FshR3EkpZNPy23L8lQlo4pVPHktFgtCfdAOYFPIw58qYtXhGk +XmogcYNkLyyMmD+Uv3TuCAludKQa/wkAFeUXyzu9zkccAFfezicYwNmbABzWw9R PLW8wXtCkDk8x4q0d0V3xDXNqCnPzi9nJ85cRQcaXNcSveKL1fntQ1ci+qbEeQhE yfghxddAPijVPa2N/y8F4rB5RDSU/MUEwJkfw9kRI9n4vRbXPaXGu7LFhIg+A7iS o6JZneG4P5vWx0iW8bb7mQTY01LDa3vMoirjd87vgEc6Y3/+Yc5HQp0U4Iz6cnV8 TLgcqrijZv4gGcLhGh1HIz7KYGYWLqiI -----END CERTIFICATE-----Generated at Sun May 11 06:17:37 2025 by rpki-client