$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ae523e-413d-3de1-b8a2-602af3acc080.roa File: 86ae523e-413d-3de1-b8a2-602af3acc080.roa (raw, json) Hash identifier: 1Qy+ep8KvjC8WtCZrDQYA56drq9hXzAaspwzP/Xcu8U= Subject key identifier: E0:2B:FB:FE:11:81:09:D9:D0:91:1F:9F:A3:49:47:71:4B:43:7C:D3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769C219DFA149FB203C4524 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ae523e-413d-3de1-b8a2-602af3acc080.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 396558 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:c2:19:df:a1:49:fb:20:3c:45:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=1a211f00-df75-402b-97ce-be9e640280dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9b:17:aa:4f:0e:71:41:fc:6d:00:c4:6c:4d: 86:fd:2f:e6:04:57:e0:2d:e6:0c:ea:db:51:ba:57: 8b:31:5d:58:f1:39:98:f3:36:2d:ba:62:21:8a:8a: 7e:a6:85:dd:81:21:54:49:bc:41:fb:7d:ad:24:dc: a2:1d:95:43:21:9d:a8:da:d6:e0:c6:4c:b6:9a:2a: 05:87:23:f9:1b:94:a2:70:2f:d6:b7:fa:73:71:7d: b5:7a:4d:fe:ef:45:5d:0f:d6:cc:dc:37:ee:ec:41: 29:e0:21:4f:ab:25:9a:57:6c:bd:05:53:eb:18:26: 4b:1b:82:cd:bf:7e:c9:a4:79:8c:0b:a3:28:43:85: 86:91:bb:46:97:84:2d:ad:aa:15:e6:b7:31:3e:f2: 01:9b:78:d4:69:27:c8:0a:43:e1:f9:71:ff:b0:e9: c9:b2:53:0c:c1:1c:f3:23:8a:1f:09:84:fe:f2:9a: 8c:5d:78:38:7c:c9:f5:af:69:51:78:7e:3d:a3:e5: 3d:79:ab:cc:0f:70:5c:54:8e:1f:2a:01:30:64:ad: 9e:c8:1d:4d:75:40:3e:0a:03:29:94:35:ad:56:23: 25:25:bf:62:bb:af:8d:21:a7:45:5c:99:41:30:64: 00:15:34:a0:8f:7e:06:fd:70:6c:b3:11:21:e2:b1: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2B:FB:FE:11:81:09:D9:D0:91:1F:9F:A3:49:47:71:4B:43:7C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ae523e-413d-3de1-b8a2-602af3acc080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f9:e2:56:4e:c1:fb:33:b8:4a:e3:ee:1a:81:a5:cc:e5:28: d2:c3:96:fd:e5:f0:38:d7:89:fc:8e:8a:83:73:df:3b:3c:d6: 08:70:7e:39:a1:bc:ed:2e:de:25:93:8b:d1:88:a1:89:53:d1: 62:f1:ba:45:ed:ba:92:63:a6:69:42:76:f4:f4:13:6c:76:3e: af:41:2e:61:64:54:cb:8e:25:55:fb:8d:4b:4f:18:89:ec:b8: f1:3c:cc:59:6d:58:5a:13:42:73:b5:a3:13:9e:70:f0:af:0a: 32:a7:72:bd:6b:b0:9e:4d:28:2d:b4:6a:eb:4e:b4:6e:7f:84: 75:bc:0c:1c:88:1f:2b:8a:df:b9:ab:b8:fa:8a:31:8d:47:33: 01:3f:f6:3a:d9:49:62:ab:8e:d5:88:41:e0:ab:3c:91:32:cf: e9:5d:9d:00:9b:0a:1e:cc:01:26:71:67:d5:9c:fd:b0:e1:d1: 67:69:e4:c1:8e:76:7d:a7:9f:a7:37:3b:a8:e4:2f:de:71:e6: b7:c0:cf:ad:64:68:d5:f2:21:52:18:ab:0b:ec:68:cf:ab:e3: 25:34:33:ac:e6:11:dc:50:4e:75:79:e9:e5:dd:b5:ce:45:51: 6c:bc:34:67:25:01:55:25:30:5f:e4:ed:ce:fa:c7:30:12:31: ae:a3:39:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacIZ36FJ+yA8RSQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MWEyMTFmMDAtZGY3NS00MDJiLTk3Y2UtYmU5ZTY0MDI4MGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5sXqk8OcUH8bQDEbE2G/S/mBFfgLeYM6ttR uleLMV1Y8TmY8zYtumIhiop+poXdgSFUSbxB+32tJNyiHZVDIZ2o2tbgxky2mioF hyP5G5SicC/Wt/pzcX21ek3+70VdD9bM3Dfu7EEp4CFPqyWaV2y9BVPrGCZLG4LN v37JpHmMC6MoQ4WGkbtGl4QtraoV5rcxPvIBm3jUaSfICkPh+XH/sOnJslMMwRzz I4ofCYT+8pqMXXg4fMn1r2lReH49o+U9eavMD3BcVI4fKgEwZK2eyB1NdUA+CgMp lDWtViMlJb9iu6+NIadFXJlBMGQAFTSgj34G/XBssxEh4rG3UwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOAr+/4RgQnZ0JEfn6NJR3FLQ3zTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZhZTUyM2UtNDEzZC0z ZGUxLWI4YTItNjAyYWYzYWNjMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQ+eJWTsH7M7hK4+4agaXM5SjSw5b95fA414n8joqDc987PNYIcH45 obztLt4lk4vRiKGJU9Fi8bpF7bqSY6ZpQnb09BNsdj6vQS5hZFTLjiVV+41LTxiJ 7LjxPMxZbVhaE0JztaMTnnDwrwoyp3K9a7CeTSgttGrrTrRuf4R1vAwciB8rit+5 q7j6ijGNRzMBP/Y62Uliq47ViEHgqzyRMs/pXZ0AmwoezAEmcWfVnP2w4dFnaeTB jnZ9p5+nNzuo5C/ecea3wM+tZGjV8iFSGKsL7GjPq+MlNDOs5hHcUE51eenl3bXO RVFsvDRnJQFVJTBf5O3O+scwEjGuozn9 -----END CERTIFICATE-----Generated at Sun Apr 27 20:19:48 2025 by rpki-client