$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/476ccef9-db67-314e-982a-f04e9cdec3b1.roa File: 476ccef9-db67-314e-982a-f04e9cdec3b1.roa (raw, json) Hash identifier: ptjJ8H2WTbjMlqMjuKGTO5Cuxvi0u43tGCqlh1rV1v0= Subject key identifier: F9:0E:D6:8A:EB:5A:0E:B0:7C:7C:AD:D2:E9:8C:BA:B6:76:BE:29:02 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769C15496E68E272EF28300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/476ccef9-db67-314e-982a-f04e9cdec3b1.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 397194 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:c1:54:96:e6:8e:27:2e:f2:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=54162b08-be4a-465e-9d82-d2f7f99a3dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:cd:df:21:13:fb:7f:37:e9:96:ac:5a:56: 7b:e7:c9:d2:d9:da:f9:94:d8:da:50:ca:ff:2e:d7: ef:b5:bb:ba:82:03:c8:50:47:ed:b2:0a:a6:45:26: 0d:b4:ae:10:8f:b0:52:dd:06:eb:41:09:19:f5:31: 2f:68:59:f7:d9:71:0a:32:33:2a:e5:6e:ab:f5:df: d2:8f:e8:26:15:c6:ba:48:22:d5:fc:2d:ab:65:89: ac:be:50:68:55:a1:fa:28:55:f4:61:41:73:35:9f: 6d:09:b7:10:08:bf:7e:d1:54:86:f5:18:81:51:4a: eb:67:78:94:ce:f9:4b:57:fe:16:31:3f:51:99:d4: 58:85:91:8f:c6:d1:54:eb:de:48:24:4d:03:69:86: 8e:6f:fc:7f:f1:23:59:ef:9e:56:8d:93:53:8c:61: b8:1c:52:e8:51:a3:f0:fd:7d:3c:80:0d:12:e6:5d: 67:37:08:38:2e:7a:ba:0b:d7:fa:5d:11:92:2c:78: d0:cb:5e:23:51:6e:19:6b:7a:f3:9b:27:a5:2d:bb: 23:c3:e7:5b:80:7d:0a:1b:62:54:dd:1f:e9:8a:63: 5b:85:cf:44:78:12:50:b2:c3:23:ea:8a:35:99:35: 67:4d:07:c5:61:89:07:a5:d5:4e:1b:df:19:8d:2f: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0E:D6:8A:EB:5A:0E:B0:7C:7C:AD:D2:E9:8C:BA:B6:76:BE:29:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/476ccef9-db67-314e-982a-f04e9cdec3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:f9:53:77:78:4a:3d:83:f6:89:a1:da:37:3c:00:3a:e1:a5: 84:58:07:3a:ec:16:c3:f5:69:45:9f:46:59:43:1f:b5:b6:21: b8:12:73:9d:00:4c:bf:ac:19:a7:a9:06:9b:26:e4:ef:d1:2e: 4d:fa:38:44:be:38:e0:db:6c:78:0c:ab:d8:9c:26:68:dd:b2: 44:4f:8d:27:89:5d:31:2c:04:86:38:da:f6:4a:4b:28:b8:a0: b8:41:6d:da:0a:c7:29:34:5a:91:4a:af:b2:00:ac:c4:d0:f7: de:26:9d:bb:c7:24:7c:c5:10:84:15:de:84:21:c1:0d:6e:e4: a7:21:c0:60:9a:2e:c0:5b:d2:9f:b6:e2:6a:a5:b8:3d:8b:62: 34:b4:8d:be:56:f9:a1:92:31:2a:e9:ac:0f:c1:84:fc:4a:86: 0a:e2:62:c8:7c:77:fe:c1:ca:9b:9a:38:92:e8:8e:46:ac:f5: 69:89:34:0e:72:0e:ba:9c:8b:08:9c:c2:67:f8:79:bb:a7:54: 4b:c7:61:3f:59:52:08:d4:40:7d:4e:26:80:af:18:d8:3e:3e: e7:f8:ee:a7:a6:e9:e9:ef:fd:92:b1:f4:52:63:5c:58:66:a3: 8b:bf:f1:43:bf:56:d8:66:87:79:6c:43:e0:53:0b:96:8d:ab: be:87:63:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacFUluaOJy7ygwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NTQxNjJiMDgtYmU0YS00NjVlLTlkODItZDJmN2Y5OWEzZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sPN3yET+3836ZasWlZ758nS2dr5lNjaUMr/ Ltfvtbu6ggPIUEftsgqmRSYNtK4Qj7BS3QbrQQkZ9TEvaFn32XEKMjMq5W6r9d/S j+gmFca6SCLV/C2rZYmsvlBoVaH6KFX0YUFzNZ9tCbcQCL9+0VSG9RiBUUrrZ3iU zvlLV/4WMT9RmdRYhZGPxtFU695IJE0DaYaOb/x/8SNZ755WjZNTjGG4HFLoUaPw /X08gA0S5l1nNwg4Lnq6C9f6XRGSLHjQy14jUW4Za3rzmyelLbsjw+dbgH0KG2JU 3R/pimNbhc9EeBJQssMj6oo1mTVnTQfFYYkHpdVOG98ZjS+lBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPkO1orrWg6wfHyt0umMurZ2vikCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDc2Y2NlZjktZGI2Ny0z MTRlLTk4MmEtZjA0ZTljZGVjM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAV+VN3eEo9g/aJodo3PAA64aWEWAc67BbD9WlFn0ZZQx+1tiG4EnOd AEy/rBmnqQabJuTv0S5N+jhEvjjg22x4DKvYnCZo3bJET40niV0xLASGONr2Skso uKC4QW3aCscpNFqRSq+yAKzE0PfeJp27xyR8xRCEFd6EIcENbuSnIcBgmi7AW9Kf tuJqpbg9i2I0tI2+VvmhkjEq6awPwYT8SoYK4mLIfHf+wcqbmjiS6I5GrPVpiTQO cg66nIsInMJn+Hm7p1RLx2E/WVII1EB9TiaArxjYPj7n+O6npunp7/2SsfRSY1xY ZqOLv/FDv1bYZod5bEPgUwuWjau+h2M5 -----END CERTIFICATE-----Generated at Sat Apr 26 23:53:19 2025 by rpki-client