$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60aab960-9ecd-380f-b919-1045572108e3.roa File: 60aab960-9ecd-380f-b919-1045572108e3.roa (raw, json) Hash identifier: kLtMIz0ognkXx2dxuSag6F+HYcJXfgQPRTzt9hH4+i8= Subject key identifier: BA:FC:56:63:A2:61:D1:53:21:38:CA:59:7B:BF:06:10:AB:DD:F7:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769CA6B4A6CEF535C886C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60aab960-9ecd-380f-b919-1045572108e3.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 396552 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ca:6b:4a:6c:ef:53:5c:88:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=2cce84cd-8fe0-4ae2-98b8-b110b8c55c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a1:b5:a0:42:88:f5:93:cd:f0:9e:cc:72:8e: 99:0e:20:95:5e:dc:3f:dd:89:26:c5:be:c5:15:5b: 79:45:c3:df:74:ee:ee:8f:cb:72:5f:9c:69:47:e6: 39:3d:52:e8:d9:c9:ec:19:c1:d8:dd:21:6a:47:52: e5:2b:20:ea:d7:04:d0:b3:5d:af:c9:b5:80:a3:ff: 68:8c:c6:77:20:59:79:6f:70:6a:44:01:de:96:7d: be:2e:e0:a6:ba:99:9a:a7:a8:36:fe:11:ce:cb:27: c0:5d:85:ab:c9:1f:92:6a:26:02:86:43:34:ca:7c: ee:7e:86:03:d5:39:21:4a:b2:f4:91:6a:b9:28:65: 25:34:bd:71:30:2f:6b:2f:fe:44:24:7f:41:e6:d3: e4:3c:16:c2:ad:9d:a0:fa:00:c0:4d:be:b0:3d:b7: 2d:9d:e6:f8:91:93:93:1b:55:62:df:0a:c4:0e:55: 48:db:7d:38:59:f5:be:86:c3:ab:e9:87:4e:91:75: 8c:76:9a:86:62:27:0d:cc:3f:a1:25:82:72:ef:06: b6:da:b5:c3:b7:37:de:29:18:56:4a:2d:48:83:0e: 9a:dd:b9:ee:55:1b:60:d8:5b:c0:0e:1c:88:86:41: f4:cf:2c:8f:d1:34:d1:77:e7:b0:6c:56:cf:df:39: ef:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FC:56:63:A2:61:D1:53:21:38:CA:59:7B:BF:06:10:AB:DD:F7:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60aab960-9ecd-380f-b919-1045572108e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a0:d1:04:02:6c:9f:14:c5:de:ba:a2:36:26:ba:f6:b9:1e: bc:2f:bd:ec:44:16:c5:f6:2a:ef:59:24:59:54:d2:1c:72:9b: 3b:a9:27:da:5c:1c:3a:23:cb:98:e9:f0:60:c2:ae:c7:1b:51: 7e:80:a3:7b:cb:7f:b4:c4:69:a5:33:95:8f:da:ee:e8:29:d6: 54:b2:96:db:58:5a:9a:bc:a0:2c:d4:4a:e1:3e:cd:6a:ef:a6: b4:2f:b0:f5:2e:ac:99:e7:a3:62:96:4f:3e:00:8d:d2:d7:33: 24:b4:91:40:69:64:5f:d7:f8:b7:14:dc:55:05:34:44:f5:0e: fb:10:19:e2:07:48:20:e5:e4:35:6b:b2:ff:7d:74:6f:9c:a1: fa:fc:5a:6c:91:69:2c:30:20:ba:cf:9c:d5:ad:f3:03:8e:7f: 4e:94:20:e8:e0:63:64:84:13:6e:2e:07:00:91:8d:80:5e:90: 07:db:5f:e6:81:98:c8:b8:6c:47:d5:0c:33:07:bf:96:93:fd: 07:ff:03:2e:50:bb:9f:0d:c2:d7:92:1e:3e:6a:dc:bc:74:ac: e5:dc:13:4b:95:ac:f7:ef:ad:55:00:88:86:00:c4:22:ef:c1: b0:16:d1:02:5a:3c:13:be:d1:85:52:86:15:0b:e0:6d:f4:e7: f5:ba:fa:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacprSmzvU1yIbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MmNjZTg0Y2QtOGZlMC00YWUyLTk4YjgtYjExMGI4YzU1YzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KG1oEKI9ZPN8J7Mco6ZDiCVXtw/3Ykmxb7F FVt5RcPfdO7uj8tyX5xpR+Y5PVLo2cnsGcHY3SFqR1LlKyDq1wTQs12vybWAo/9o jMZ3IFl5b3BqRAHeln2+LuCmupmap6g2/hHOyyfAXYWryR+SaiYChkM0ynzufoYD 1TkhSrL0kWq5KGUlNL1xMC9rL/5EJH9B5tPkPBbCrZ2g+gDATb6wPbctneb4kZOT G1Vi3wrEDlVI2304WfW+hsOr6YdOkXWMdpqGYicNzD+hJYJy7wa22rXDtzfeKRhW Si1Igw6a3bnuVRtg2FvADhyIhkH0zyyP0TTRd+ewbFbP3znvmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLr8VmOiYdFTITjKWXu/BhCr3feIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjBhYWI5NjAtOWVjZC0z ODBmLWI5MTktMTA0NTU3MjEwOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9oNEEAmyfFMXeuqI2Jrr2uR68L73sRBbF9irvWSRZVNIccps7qSfa XBw6I8uY6fBgwq7HG1F+gKN7y3+0xGmlM5WP2u7oKdZUspbbWFqavKAs1ErhPs1q 76a0L7D1LqyZ56Nilk8+AI3S1zMktJFAaWRf1/i3FNxVBTRE9Q77EBniB0gg5eQ1 a7L/fXRvnKH6/FpskWksMCC6z5zVrfMDjn9OlCDo4GNkhBNuLgcAkY2AXpAH21/m gZjIuGxH1QwzB7+Wk/0H/wMuULufDcLXkh4+aty8dKzl3BNLlaz3761VAIiGAMQi 78GwFtECWjwTvtGFUoYVC+Bt9Of1uvqc -----END CERTIFICATE-----Generated at Tue Apr 29 11:29:05 2025 by rpki-client