$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17f46537-4eaa-3943-926a-50b7494bce4e.roa File: 17f46537-4eaa-3943-926a-50b7494bce4e.roa (raw, json) Hash identifier: grfVkJj+gGbqMr+wezY0/ODYuSHdAhJsgtKMn/3SFnI= Subject key identifier: B9:E8:64:D4:5E:69:40:07:40:1C:58:22:20:C0:85:E3:AB:29:FA:48 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849A35486C49F672732792F0800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17f46537-4eaa-3943-926a-50b7494bce4e.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 7342 IP address blocks: 192.68.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:86:c4:9f:67:27:32:79:2f:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=af7f12a9-8d0f-491e-bb14-d9d463c2e854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d9:cb:e5:3c:f3:41:70:10:f9:83:55:c7:81: d4:15:00:35:5d:67:ec:d6:d5:28:40:9b:61:68:bc: 40:99:16:0b:9f:74:84:a3:08:0a:6d:9a:78:ef:57: a0:02:1e:5d:c2:91:60:4d:11:f6:54:3a:6f:d1:48: a8:c2:5a:98:3d:21:1a:56:08:a7:3a:60:47:92:c1: 81:0f:18:e5:0e:1f:2a:87:e0:c7:73:e3:d4:17:f8: 6c:b2:3a:01:97:3a:ad:6b:b3:39:29:5c:61:d3:b2: 10:55:ff:37:a3:2b:bc:96:11:a5:dd:23:38:36:6f: 51:78:6a:d9:dd:c5:21:bf:e7:16:33:cb:a1:56:03: 57:19:d0:84:bc:3f:cd:b8:f1:81:4c:66:45:6d:8f: ea:83:6a:8d:1d:48:62:42:74:53:ed:87:f8:bc:41: c5:85:9f:99:96:b4:c7:5a:d7:dc:94:6b:46:02:60: 06:af:32:e4:49:c6:6c:a6:3b:41:16:2f:05:fb:ff: 9e:1e:f8:5f:ba:17:80:04:84:1d:13:71:d8:93:70: b0:99:35:ba:aa:61:43:cf:ae:e1:bf:2c:f9:84:e6: 1e:a9:67:6d:63:a6:57:3e:a6:5d:0d:10:1b:9b:1e: a2:6a:cb:cf:31:6f:be:b5:63:62:96:ab:38:ca:1f: bd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E8:64:D4:5E:69:40:07:40:1C:58:22:20:C0:85:E3:AB:29:FA:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17f46537-4eaa-3943-926a-50b7494bce4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:9d:24:51:a6:96:5a:5e:df:ba:1b:ea:5a:34:c2:0a:ca:7d: 64:e0:0a:b9:a0:4e:23:ea:d5:54:3c:7a:f9:3c:a1:62:a6:01: 5c:88:94:1a:8d:03:8d:5e:ba:28:37:fe:87:49:11:9b:4e:5c: 59:e1:e3:11:58:8a:a3:e7:ce:de:16:02:de:20:86:18:04:15: 58:37:c9:1f:26:5a:9e:6e:86:ed:a6:3f:3d:52:3f:ca:ac:3a: 72:ae:39:fa:00:90:34:65:88:2b:27:b1:34:ec:35:88:8d:56: ca:e4:f0:b1:cb:77:c2:e8:c3:bf:42:62:5b:c3:8b:70:c3:ad: b3:68:91:5f:e0:ef:86:ed:1c:e4:83:d4:d2:19:92:6d:66:67: 28:f7:e9:ff:11:fd:40:51:3c:d0:fa:81:62:19:5a:0f:44:d0: d4:2b:64:5b:b1:30:67:f9:24:3a:99:a6:ef:b8:6e:03:55:ad: d0:19:4e:10:5e:d6:ae:c6:e3:79:40:ee:b5:3c:d0:e0:9e:2f: de:de:3c:d2:26:fc:17:53:a9:78:d9:6b:c0:be:03:15:aa:bd: 48:6e:e9:d7:53:b2:f4:08:1f:ca:e8:c6:e7:f6:4c:5b:d7:fd: a6:31:b0:69:f1:97:91:1e:f5:aa:af:75:d1:b7:b7:9a:85:27: 85:29:f9:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIbEn2cnMnkvCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk YWY3ZjEyYTktOGQwZi00OTFlLWJiMTQtZDlkNDYzYzJlODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdnL5TzzQXAQ+YNVx4HUFQA1XWfs1tUoQJth aLxAmRYLn3SEowgKbZp471egAh5dwpFgTRH2VDpv0UiowlqYPSEaVginOmBHksGB DxjlDh8qh+DHc+PUF/hssjoBlzqta7M5KVxh07IQVf83oyu8lhGl3SM4Nm9ReGrZ 3cUhv+cWM8uhVgNXGdCEvD/NuPGBTGZFbY/qg2qNHUhiQnRT7Yf4vEHFhZ+ZlrTH WtfclGtGAmAGrzLkScZspjtBFi8F+/+eHvhfuheABIQdE3HYk3CwmTW6qmFDz67h vyz5hOYeqWdtY6ZXPqZdDRAbmx6iasvPMW++tWNilqs4yh+9EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnoZNReaUAHQBxYIiDAheOrKfpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTdmNDY1MzctNGVhYS0z OTQzLTkyNmEtNTBiNzQ5NGJjZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOdJFGmllpe37ob6lo0wgrKfWTgCrmgTiPq1VQ8evk8oWKmAVyIlBqN A41euig3/odJEZtOXFnh4xFYiqPnzt4WAt4ghhgEFVg3yR8mWp5uhu2mPz1SP8qs OnKuOfoAkDRliCsnsTTsNYiNVsrk8LHLd8Low79CYlvDi3DDrbNokV/g74btHOSD 1NIZkm1mZyj36f8R/UBRPND6gWIZWg9E0NQrZFuxMGf5JDqZpu+4bgNVrdAZThBe 1q7G43lA7rU80OCeL97ePNIm/BdTqXjZa8C+AxWqvUhu6ddTsvQIH8roxuf2TFvX /aYxsGnxl5Ee9aqvddG3t5qFJ4Up+bg= -----END CERTIFICATE-----Generated at Sat Apr 26 22:59:51 2025 by rpki-client