$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d79585f-b4b7-3774-a5e3-0a86efe2ede3.roa File: 0d79585f-b4b7-3774-a5e3-0a86efe2ede3.roa (raw, json) Hash identifier: d06jWF4cEnZEPgDI4HLJ7eq+rJw8FLNNjK1Vo9ijrx8= Subject key identifier: B9:C9:C3:9C:60:79:65:71:21:3C:1A:96:7F:3E:EC:99:0D:31:F7:8E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A8F3B7F49C582D888A4EF9D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d79585f-b4b7-3774-a5e3-0a86efe2ede3.roa Signing time: Fri 18 Jul 2025 13:01:05 +0000 ROA not before: Fri 18 Jul 2025 13:01:05 +0000 ROA not after: Thu 16 Oct 2025 13:01:05 +0000 asID: 36618 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8f:3b:7f:49:c5:82:d8:88:a4:ef:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 18 13:01:05 2025 GMT Not After : Oct 16 13:01:05 2025 GMT Subject: CN=67eff4b7-7bff-49fc-8353-c580a4b7ce29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:ac:59:f1:51:60:7b:e2:c3:10:3a:9d:93: b9:75:da:ba:0d:f1:7e:56:a7:db:41:df:cb:51:cb: 03:4f:b7:47:a6:b7:22:cf:aa:98:1d:b8:30:32:00: 7b:24:c0:48:ff:82:91:1b:85:0c:54:a6:f9:28:c3: b0:75:10:95:29:91:30:c7:f0:2e:4d:03:af:5e:8f: de:f9:5c:86:7a:f1:f5:60:6c:cf:31:74:e1:52:bb: d6:95:45:d1:3d:84:70:2a:23:0e:08:2e:aa:22:db: 6c:9d:d5:01:f8:e4:73:0f:eb:5e:6d:ff:51:dd:fd: 33:5c:e6:34:d3:49:b7:f3:94:2b:82:51:3e:80:c1: 31:3e:42:4d:85:62:0d:7b:0c:56:82:b1:a6:d2:64: 34:9a:25:c3:a4:75:26:16:0a:f7:fa:21:d1:01:e6: e0:35:d2:fe:6e:4a:98:fc:c8:60:70:24:63:a4:83: 99:af:20:9c:7a:03:8a:62:0b:14:97:7f:f1:12:3d: 31:6a:c3:bb:5a:71:62:20:1f:ec:47:dc:97:fa:de: dd:ec:bf:44:0f:5c:b9:b5:af:80:e0:be:78:4f:1f: a7:71:32:e0:bd:de:ac:ce:18:f0:78:f6:95:2f:0b: ee:31:16:c5:c5:d7:e0:d1:b3:96:76:d4:fc:d9:79: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C9:C3:9C:60:79:65:71:21:3C:1A:96:7F:3E:EC:99:0D:31:F7:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d79585f-b4b7-3774-a5e3-0a86efe2ede3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b2:e5:f1:f4:cd:f4:9a:ac:a9:25:1b:bb:99:2d:ae:62:e1: 08:79:6a:46:41:0f:08:11:56:e0:aa:18:55:95:71:15:74:cf: e2:e4:5e:a2:6a:3c:38:39:ab:59:db:2e:5d:5e:0f:18:24:8c: 8d:11:d1:c4:5f:c3:ad:86:d9:15:fb:99:a3:c0:f7:1c:f6:3e: 5c:ba:ea:33:ff:b4:fe:c2:2d:30:c4:ee:ea:e7:c6:d5:ba:ed: a4:56:db:de:ba:87:50:21:5a:e5:22:4a:0e:01:86:04:be:71: 09:75:b7:4c:94:34:f7:5e:35:5d:78:bd:04:83:66:e7:a1:9e: 4b:f9:07:80:5c:86:4a:ef:dc:ca:f4:b3:48:fb:aa:03:09:54: e2:19:ed:22:6e:ab:d4:5c:9c:98:3c:a9:9b:53:9c:d6:b8:3f: ff:b8:ec:c2:7c:bd:55:d5:7a:5d:7d:85:23:65:03:82:af:75: 1a:15:b2:46:62:5f:cd:1a:fd:ac:7f:36:af:c7:5a:b7:07:76: 32:ab:cf:bb:32:b0:9a:5f:15:e1:ce:68:e4:fc:0f:cd:38:11: e3:37:59:27:ed:8f:ea:11:5f:12:fc:33:f5:17:50:99:08:d0: 40:32:9e:7a:7e:2d:ff:9e:82:22:83:1a:0b:8b:77:5d:23:88: e8:19:be:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqPO39JxYLYiKTvnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxODEzMDEwNVoXDTI1MTAxNjEzMDEwNVowLzEtMCsGA1UEAxMk NjdlZmY0YjctN2JmZi00OWZjLTgzNTMtYzU4MGE0YjdjZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q+sWfFRYHviwxA6nZO5ddq6DfF+VqfbQd/L UcsDT7dHprciz6qYHbgwMgB7JMBI/4KRG4UMVKb5KMOwdRCVKZEwx/AuTQOvXo/e +VyGevH1YGzPMXThUrvWlUXRPYRwKiMOCC6qIttsndUB+ORzD+tebf9R3f0zXOY0 00m385QrglE+gMExPkJNhWINewxWgrGm0mQ0miXDpHUmFgr3+iHRAebgNdL+bkqY /MhgcCRjpIOZryCcegOKYgsUl3/xEj0xasO7WnFiIB/sR9yX+t7d7L9ED1y5ta+A 4L54Tx+ncTLgvd6szhjwePaVLwvuMRbFxdfg0bOWdtT82Xk2JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnJw5xgeWVxITwaln8+7JkNMfeOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGQ3OTU4NWYtYjRiNy0z Nzc0LWE1ZTMtMGE4NmVmZTJlZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCy5fH0zfSarKklG7uZLa5i4Qh5akZBDwgRVuCqGFWVcRV0z+LkXqJq PDg5q1nbLl1eDxgkjI0R0cRfw62G2RX7maPA9xz2Ply66jP/tP7CLTDE7urnxtW6 7aRW2966h1AhWuUiSg4BhgS+cQl1t0yUNPdeNV14vQSDZuehnkv5B4Bchkrv3Mr0 s0j7qgMJVOIZ7SJuq9RcnJg8qZtTnNa4P/+47MJ8vVXVel19hSNlA4KvdRoVskZi X80a/ax/Nq/HWrcHdjKrz7sysJpfFeHOaOT8D804EeM3WSftj+oRXxL8M/UXUJkI 0EAynnp+Lf+egiKDGguLd10jiOgZvlw= -----END CERTIFICATE-----Generated at Wed Aug 6 05:52:08 2025 by rpki-client