$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97aff76c-642b-326d-b7a0-d58a3c2b4155.roa File: 97aff76c-642b-326d-b7a0-d58a3c2b4155.roa (raw, json) Hash identifier: 1XTyzJgUnQCQ8VZBQ3Ck58u4BzPOZ/HWj1LgFnkmvgs= Subject key identifier: 4A:84:57:C5:D4:AA:53:E5:11:E6:B4:72:22:D1:FF:AF:D5:DA:FC:B1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769C465004B54D73E2EFE00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97aff76c-642b-326d-b7a0-d58a3c2b4155.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 25485 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:c4:65:00:4b:54:d7:3e:2e:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=9b85189b-295f-4d79-96ea-6dd005a9d18f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e8:02:53:0a:fe:22:87:ed:0b:9c:6a:7c:87: 5e:54:4c:76:87:64:f4:42:82:31:3c:3b:7f:da:2d: 8b:13:29:4a:a1:92:1a:81:1f:db:58:97:ad:c2:70: 62:bb:b8:ed:1a:88:ad:26:16:61:c9:61:82:99:c0: 59:2a:fb:a4:88:4f:39:4c:fa:3c:4f:0a:eb:25:cc: cb:6f:ff:79:83:8c:b1:78:d5:06:e3:16:ee:ee:df: e6:ae:ff:9b:25:97:2e:7a:6b:bb:7c:32:b8:80:d3: ef:09:c8:8a:82:dd:35:4d:d3:23:60:9f:cc:a5:67: 37:26:8a:f4:f3:44:a8:a1:7b:9d:e9:0e:2f:db:42: 0d:35:3f:54:d1:ae:9e:f1:a1:c2:25:b0:28:ea:cf: c6:35:95:ef:10:2b:0d:00:a4:14:ed:d2:3f:6d:1f: c8:b3:18:2a:8b:ac:2c:da:f1:32:67:8d:b5:5d:42: a5:00:c5:3a:23:55:a5:ea:e2:24:73:ef:25:2b:46: c7:30:7a:18:a9:8b:45:19:d3:5b:44:2c:1e:99:9f: 0b:17:33:61:89:56:8d:d2:fd:91:a0:58:56:5d:15: 15:62:42:dc:1c:df:42:05:6f:61:93:72:ab:72:89: 94:f1:70:45:dc:a0:fa:45:a8:56:29:52:85:1f:97: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:84:57:C5:D4:AA:53:E5:11:E6:B4:72:22:D1:FF:AF:D5:DA:FC:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97aff76c-642b-326d-b7a0-d58a3c2b4155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b9:a3:db:97:8c:ad:6b:08:45:d7:32:8a:e9:36:82:77:ca: a7:eb:64:81:65:53:f9:b4:93:d3:00:eb:dd:aa:d2:88:4c:48: b4:f4:ee:03:65:bc:af:e1:37:8c:d3:dd:e3:a2:ac:69:79:54: 47:5b:ad:eb:12:12:52:1c:06:ec:69:69:0b:52:f0:ea:32:7c: 21:64:0b:d0:27:f1:8a:c3:ef:f5:88:ab:9a:85:7c:4f:0c:ee: 3f:5f:4b:3a:53:07:e3:e5:fc:ae:ee:ac:3d:24:0b:fd:52:60: 58:60:5e:a6:83:09:bf:1b:7d:6e:e3:65:1b:a3:f1:14:6c:5a: 9c:e4:bb:26:aa:cc:04:d8:ab:b7:82:0e:f7:ef:be:48:66:27: be:94:6a:e7:e8:b9:66:28:06:ea:0c:33:3f:9b:64:29:30:f0: 4a:ff:b2:cb:66:07:1d:87:96:2a:ca:fb:6b:99:04:9e:35:f1: 5b:20:65:11:4d:59:c6:6f:78:db:36:57:ff:2b:e9:35:aa:92: 95:c2:ff:e5:78:5b:89:0d:75:fc:d9:18:10:18:da:64:6d:0f: 50:a7:6e:8a:85:8b:ea:7a:76:2c:ed:78:fc:a9:21:3c:0a:29: 9f:8b:9d:92:2b:45:da:89:4b:ea:18:4e:a2:a1:d1:96:9c:34: 30:d5:64:56 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacRlAEtU1z4u/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk OWI4NTE4OWItMjk1Zi00ZDc5LTk2ZWEtNmRkMDA1YTlkMThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOgCUwr+IoftC5xqfIdeVEx2h2T0QoIxPDt/ 2i2LEylKoZIagR/bWJetwnBiu7jtGoitJhZhyWGCmcBZKvukiE85TPo8TwrrJczL b/95g4yxeNUG4xbu7t/mrv+bJZcuemu7fDK4gNPvCciKgt01TdMjYJ/MpWc3Jor0 80SooXud6Q4v20INNT9U0a6e8aHCJbAo6s/GNZXvECsNAKQU7dI/bR/Isxgqi6ws 2vEyZ421XUKlAMU6I1Wl6uIkc+8lK0bHMHoYqYtFGdNbRCwemZ8LFzNhiVaN0v2R oFhWXRUVYkLcHN9CBW9hk3KrcomU8XBF3KD6RahWKVKFH5db/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEqEV8XUqlPlEea0ciLR/6/V2vyxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTdhZmY3NmMtNjQyYi0z MjZkLWI3YTAtZDU4YTNjMmI0MTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCIuaPbl4ytawhF1zKK6TaCd8qn62SBZVP5tJPTAOvdqtKITEi09O4D Zbyv4TeM093joqxpeVRHW63rEhJSHAbsaWkLUvDqMnwhZAvQJ/GKw+/1iKuahXxP DO4/X0s6Uwfj5fyu7qw9JAv9UmBYYF6mgwm/G31u42Ubo/EUbFqc5LsmqswE2Ku3 gg73775IZie+lGrn6LlmKAbqDDM/m2QpMPBK/7LLZgcdh5YqyvtrmQSeNfFbIGUR TVnGb3jbNlf/K+k1qpKVwv/leFuJDXX82RgQGNpkbQ9Qp26KhYvqenYs7Xj8qSE8 Cimfi52SK0XaiUvqGE6iodGWnDQw1WRW -----END CERTIFICATE-----Generated at Sat Apr 26 21:31:47 2025 by rpki-client