$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a40f5b56-0c03-3ca0-b6d5-547c3c6964f0.roa File: a40f5b56-0c03-3ca0-b6d5-547c3c6964f0.roa (raw, json) Hash identifier: tX/to1Y7g3x1AQrhpx8tc8ZBG+EutMiKyG9HIiCktHo= Subject key identifier: 97:D2:27:63:6D:68:21:C0:6C:DA:79:DD:82:99:65:1F:5F:B8:EF:B0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769C8E2C56D2C27E93CEA40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a40f5b56-0c03-3ca0-b6d5-547c3c6964f0.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 396580 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:c8:e2:c5:6d:2c:27:e9:3c:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=c1a6b38d-bb4a-4737-b8c5-1a5e2cf649d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:ca:23:02:e4:1e:a9:ef:9e:ad:5e:44:65: f4:55:36:48:e5:b9:c6:61:bb:e1:f5:15:d4:40:59: 16:96:1f:cf:17:10:24:01:2c:42:fd:38:7b:87:5b: 44:34:70:9d:e6:9b:38:95:17:af:4c:da:46:00:1c: f5:70:f5:b5:22:38:9d:08:81:e2:84:03:76:0d:0d: 17:51:5d:75:8f:cb:b7:98:24:71:01:54:9c:12:1f: 56:fb:7a:31:85:0d:6f:b1:3f:b5:8f:20:56:29:8e: 17:7c:d7:45:46:be:39:5b:5f:17:eb:cc:9e:7c:34: 5c:26:65:dc:90:16:26:0e:ed:bf:b4:ac:d4:91:ef: 13:11:54:7b:25:86:74:a4:51:e6:fe:28:1a:15:fe: 10:e9:da:f8:64:55:45:80:a2:e9:9f:39:8d:4c:b7: 85:72:8b:08:ea:8f:a2:3c:03:68:11:cf:b2:e5:15: 0d:89:db:c0:02:25:01:20:d7:39:eb:fc:04:6f:e3: eb:c6:19:15:97:6a:6a:ec:89:ca:dc:4c:f9:83:77: 7a:9c:84:bd:fd:9a:b4:dc:a5:e7:46:dd:70:2a:ae: da:24:b6:73:89:23:f9:8f:70:8d:3c:58:f5:bd:df: c3:5f:e3:a2:75:1e:c9:1a:32:70:7b:16:c5:03:b9: f7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D2:27:63:6D:68:21:C0:6C:DA:79:DD:82:99:65:1F:5F:B8:EF:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a40f5b56-0c03-3ca0-b6d5-547c3c6964f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e1:cd:1a:39:91:74:b9:df:53:2a:ee:4b:61:d7:2d:4a:c5: 67:59:a7:78:91:5f:5f:f1:a9:aa:49:51:59:ac:d7:05:6a:80: 21:dd:09:b4:c8:22:2d:fd:1e:20:31:b3:7e:f5:4b:c6:64:41: a2:fd:4b:73:20:ba:17:66:08:13:29:3e:e1:f4:2c:94:65:22: 89:5f:3a:f9:0b:01:50:88:4c:b1:e6:a9:26:0f:85:0c:18:e6: 19:a2:e3:a9:e4:45:14:81:94:01:6f:09:50:68:29:e5:25:05: 19:6f:ad:13:8d:f7:b3:b4:b7:69:e9:37:29:cc:3a:40:2a:c1: 2e:d2:db:2c:0c:14:b1:62:3a:51:26:f5:af:ce:9b:f3:b1:0d: f0:1c:7a:e3:4e:ba:aa:8c:ae:a2:69:99:03:ae:01:59:8c:8c: 29:c2:22:c0:4c:a0:42:7b:32:ae:5c:c5:65:ca:22:c3:9d:55: bb:82:52:a1:6b:b1:9a:6a:d6:be:49:05:f1:f1:5e:f5:5c:f7: 99:5f:3a:19:86:a2:01:c2:ff:fd:f6:38:e0:1d:78:04:49:24: 58:80:9c:83:27:9d:14:6c:ef:8c:2c:d4:90:f6:87:c1:a7:fb: f6:2d:d1:81:74:59:98:e3:8f:1c:b3:0e:70:cd:74:eb:aa:b5: 40:0d:c5:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacjixW0sJ+k86kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YzFhNmIzOGQtYmI0YS00NzM3LWI4YzUtMWE1ZTJjZjY0OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPPKIwLkHqnvnq1eRGX0VTZI5bnGYbvh9RXU QFkWlh/PFxAkASxC/Th7h1tENHCd5ps4lRevTNpGABz1cPW1IjidCIHihAN2DQ0X UV11j8u3mCRxAVScEh9W+3oxhQ1vsT+1jyBWKY4XfNdFRr45W18X68yefDRcJmXc kBYmDu2/tKzUke8TEVR7JYZ0pFHm/igaFf4Q6dr4ZFVFgKLpnzmNTLeFcosI6o+i PANoEc+y5RUNidvAAiUBINc56/wEb+PrxhkVl2pq7InK3Ez5g3d6nIS9/Zq03KXn Rt1wKq7aJLZziSP5j3CNPFj1vd/DX+OidR7JGjJwexbFA7n3jwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJfSJ2NtaCHAbNp53YKZZR9fuO+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTQwZjViNTYtMGMwMy0z Y2EwLWI2ZDUtNTQ3YzNjNjk2NGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAF4c0aOZF0ud9TKu5LYdctSsVnWad4kV9f8amqSVFZrNcFaoAh3Qm0 yCIt/R4gMbN+9UvGZEGi/UtzILoXZggTKT7h9CyUZSKJXzr5CwFQiEyx5qkmD4UM GOYZouOp5EUUgZQBbwlQaCnlJQUZb60TjfeztLdp6TcpzDpAKsEu0tssDBSxYjpR JvWvzpvzsQ3wHHrjTrqqjK6iaZkDrgFZjIwpwiLATKBCezKuXMVlyiLDnVW7glKh a7Gaata+SQXx8V71XPeZXzoZhqIBwv/99jjgHXgESSRYgJyDJ50UbO+MLNSQ9ofB p/v2LdGBdFmY448csw5wzXTrqrVADcWl -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:42 2025 by rpki-client