$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa File: 8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa (raw, json) Hash identifier: 6bpo+udL+DOVovYHDKsAKSR8VSG70vDIjXoY1bBlBFA= Subject key identifier: 5B:1D:DB:42:B2:2B:D1:63:8B:30:E1:0D:F3:C9:8A:AA:C3:B6:55:E5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858494B641E332D831BCB2F372000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 0 IP address blocks: 192.68.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1e:33:2d:83:1b:cb:2f:37:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=876d418b-ab26-408e-88a8-220d8fbd2261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:49:13:41:86:fc:a0:6b:67:e0:20:b1:0b:d6: 15:38:5a:92:31:df:e7:c0:50:bd:1a:02:67:84:aa: e1:9b:41:a1:33:ea:dc:75:ff:e5:80:04:5e:49:32: 41:63:ad:a9:9b:ca:9c:77:da:f3:e9:30:46:45:0e: 31:bd:7e:ee:3e:a9:02:c7:bf:3e:d7:71:73:81:6e: fe:78:b1:50:05:6e:44:04:80:87:0a:9a:75:18:84: dc:35:2d:ec:ac:cc:4b:c1:4d:ac:a7:d6:b4:14:36: 99:09:9f:1f:e4:56:56:99:c5:37:28:6c:04:9f:3f: 7a:cd:d5:96:f6:80:02:30:b3:20:8a:af:7c:2c:fe: a1:a1:c2:20:11:dc:f8:2f:64:72:e3:dd:75:45:c4: 8c:76:77:97:cf:6c:5c:f8:2b:f6:83:4c:0b:c1:b0: 90:fb:64:1a:b6:11:57:c6:1b:54:2f:67:9d:b0:df: a8:86:78:76:07:43:5f:74:ca:85:87:f8:32:5e:85: f4:3d:4d:9c:01:fd:0e:a9:e6:6e:08:3b:22:83:ab: 33:87:a5:c0:cb:59:d5:31:b9:01:40:c3:73:12:a5: b3:cb:8d:b2:7d:cb:81:a4:7e:a7:fb:88:bc:02:6d: 4c:c9:f6:26:3f:3e:eb:d9:01:68:28:65:d1:b6:85: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1D:DB:42:B2:2B:D1:63:8B:30:E1:0D:F3:C9:8A:AA:C3:B6:55:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:d3:a4:de:f7:9a:44:5d:fe:8c:de:48:06:7d:75:d3:ea:1f: 2a:0d:61:b5:91:69:03:c2:5a:2a:30:0f:4a:50:d5:67:e7:10: b5:ff:ce:c3:fd:23:3d:11:7e:3c:5e:c9:9a:09:69:06:03:4a: 6a:ff:de:94:57:01:1c:12:3c:bc:eb:6b:36:8c:eb:49:e9:bc: cd:21:0b:1f:55:a4:2b:82:3f:88:f6:36:f8:54:7a:32:26:b6: 1a:f7:73:7c:54:d2:de:e9:ac:c3:38:93:d1:c7:e3:7e:d6:30: 98:16:18:7e:26:bc:79:3c:15:ad:b3:a8:8f:4a:9b:c3:81:14: 0c:4d:22:1e:19:0c:ef:98:2b:85:60:4b:8e:22:9c:e2:23:1e: 01:d7:d4:b7:3b:04:1d:7c:42:4c:0f:02:a7:49:0f:90:81:14: cf:cd:d9:28:6c:ae:54:ef:49:dc:e5:c1:03:7c:20:d2:08:38: 5a:2a:e4:10:c4:10:c2:8d:8b:dd:2d:ca:4e:43:ac:76:f2:99: 6f:b2:34:ec:c8:37:bf:c2:9a:cc:e4:42:c4:bc:d6:19:f9:49: 66:eb:50:e6:74:ff:d8:d5:ef:bc:09:02:74:9c:a1:94:b5:9e: 63:ac:ce:4b:75:e8:95:88:cd:79:ff:9c:67:b8:27:70:0d:c2: 20:18:a5:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZB4zLYMbyy83IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ODc2ZDQxOGItYWIyNi00MDhlLTg4YTgtMjIwZDhmYmQyMjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EkTQYb8oGtn4CCxC9YVOFqSMd/nwFC9GgJn hKrhm0GhM+rcdf/lgAReSTJBY62pm8qcd9rz6TBGRQ4xvX7uPqkCx78+13FzgW7+ eLFQBW5EBICHCpp1GITcNS3srMxLwU2sp9a0FDaZCZ8f5FZWmcU3KGwEnz96zdWW 9oACMLMgiq98LP6hocIgEdz4L2Ry4911RcSMdneXz2xc+Cv2g0wLwbCQ+2QathFX xhtUL2edsN+ohnh2B0NfdMqFh/gyXoX0PU2cAf0OqeZuCDsig6szh6XAy1nVMbkB QMNzEqWzy42yfcuBpH6n+4i8Am1MyfYmPz7r2QFoKGXRtoUskwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsd20KyK9FjizDhDfPJiqrDtlXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGI0YTIwMWUtYjBiNS0z NTJiLTllMDUtY2VkMWU2MDFmZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwESBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHTpN73mkRd/ozeSAZ9ddPqHyoNYbWRaQPCWiowD0pQ1WfnELX/zsP9 Iz0RfjxeyZoJaQYDSmr/3pRXARwSPLzrazaM60npvM0hCx9VpCuCP4j2NvhUejIm thr3c3xU0t7prMM4k9HH437WMJgWGH4mvHk8Fa2zqI9Km8OBFAxNIh4ZDO+YK4Vg S44inOIjHgHX1Lc7BB18QkwPAqdJD5CBFM/N2ShsrlTvSdzlwQN8INIIOFoq5BDE EMKNi90tyk5DrHbymW+yNOzIN7/CmszkQsS81hn5SWbrUOZ0/9jV77wJAnScoZS1 nmOszkt16JWIzXn/nGe4J3ANwiAYpR8= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:46 2025 by rpki-client