$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9688a6f-07f9-30ec-b082-a6508372a517.roa File: a9688a6f-07f9-30ec-b082-a6508372a517.roa (raw, json) Hash identifier: EbJ0mdhIJLjNLQAZB0rMcihNHqANS/VH5WNfLWwUjoU= Subject key identifier: 19:68:67:D7:6B:DD:AB:A9:8E:7B:D6:C0:04:F3:4D:52:09:0E:64:F3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A8F3B7F116FF45E7DE3310400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9688a6f-07f9-30ec-b082-a6508372a517.roa Signing time: Fri 18 Jul 2025 13:01:05 +0000 ROA not before: Fri 18 Jul 2025 13:01:05 +0000 ROA not after: Thu 16 Oct 2025 13:01:05 +0000 asID: 396566 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8f:3b:7f:11:6f:f4:5e:7d:e3:31:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 18 13:01:05 2025 GMT Not After : Oct 16 13:01:05 2025 GMT Subject: CN=3c69021e-ea0a-4e7f-8237-156daf9822d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5a:33:43:17:ad:4e:8c:60:84:03:ac:de:f1: fc:9b:fd:eb:43:f5:6b:d5:de:99:dc:6e:e0:66:29: 48:a2:91:d2:c7:52:e5:72:49:18:47:47:5b:5a:9e: 49:60:7b:ee:9a:41:97:03:b2:b9:8d:ee:75:5d:a8: 48:93:23:28:bb:f1:8d:51:b0:e7:50:18:f8:08:87: bd:08:c9:c3:21:cc:bc:12:6c:c9:69:ce:0b:30:29: c7:b6:fe:87:ea:cb:f9:08:58:53:15:0c:a3:90:e0: 7e:c8:75:68:14:73:8e:4a:11:c1:d6:ca:64:ef:c6: 69:63:71:26:b6:9c:69:07:32:10:a9:b5:7e:85:df: 31:95:ad:f0:1f:d1:a4:87:f5:a4:ff:2a:98:3e:c4: 73:91:cb:00:aa:ed:94:8d:b2:25:b9:b9:c1:41:d3: 71:55:9b:01:1e:02:dc:c7:b9:8b:be:c6:5e:0a:cf: 1f:c5:f9:ed:51:c9:a0:1d:84:74:fa:65:fa:c7:44: 76:4c:c8:13:67:02:db:99:b6:fd:f8:9a:67:0c:86: b6:89:7c:c8:9a:aa:b7:7e:15:2a:35:87:11:3a:f4: 98:d8:9a:9c:55:60:90:7c:c1:0f:6e:37:f2:6b:16: 5f:c3:6c:4c:cd:45:3e:8f:63:69:f0:c2:42:43:3d: 69:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:68:67:D7:6B:DD:AB:A9:8E:7B:D6:C0:04:F3:4D:52:09:0E:64:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9688a6f-07f9-30ec-b082-a6508372a517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:77:a4:22:fe:b4:7c:bd:74:f0:0c:74:99:e8:c9:dd:1e:c3: f7:bb:e0:ce:77:16:4b:ba:8c:17:93:c0:16:6c:36:4a:78:2f: 6f:33:21:7b:92:9f:20:e5:99:66:35:34:cf:16:16:ab:c6:17: 86:f7:94:d9:39:ff:b1:c4:b3:9f:ac:e0:d5:77:e0:13:5b:f2: 93:f0:95:62:56:1a:8c:e6:5e:88:d3:ca:90:dd:d8:83:ec:3e: b3:d5:ef:19:a0:23:b1:ce:e4:d4:74:53:8d:87:62:ee:cf:76: 36:91:4b:d3:69:ee:79:4a:fc:05:76:55:f0:fd:e4:31:7f:35: 21:b7:00:28:03:64:50:9f:be:72:c4:49:d0:ad:d1:a2:a4:17: 3e:a3:d0:51:1f:a8:f4:7a:62:46:37:a0:90:a1:3f:a3:54:7e: 1f:1f:2d:c7:ef:5e:0c:07:db:47:5e:3c:3b:a6:0e:c7:ae:96: e5:5f:58:13:57:e9:0a:9d:66:a9:10:46:f7:47:4d:b8:22:47: 7c:63:0e:42:20:ea:cd:5c:66:5e:44:75:5f:9d:b1:ec:b7:0f: 4d:0d:8b:89:5c:41:26:68:5c:d2:fc:44:77:98:0a:06:17:f4: bf:b6:28:60:af:20:e4:73:d7:3d:a9:3d:21:97:69:83:ef:a2: ef:24:7a:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqPO38Rb/RefeMxBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxODEzMDEwNVoXDTI1MTAxNjEzMDEwNVowLzEtMCsGA1UEAxMk M2M2OTAyMWUtZWEwYS00ZTdmLTgyMzctMTU2ZGFmOTgyMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVozQxetToxghAOs3vH8m/3rQ/Vr1d6Z3G7g ZilIopHSx1LlckkYR0dbWp5JYHvumkGXA7K5je51XahIkyMou/GNUbDnUBj4CIe9 CMnDIcy8EmzJac4LMCnHtv6H6sv5CFhTFQyjkOB+yHVoFHOOShHB1spk78ZpY3Em tpxpBzIQqbV+hd8xla3wH9Gkh/Wk/yqYPsRzkcsAqu2UjbIlubnBQdNxVZsBHgLc x7mLvsZeCs8fxfntUcmgHYR0+mX6x0R2TMgTZwLbmbb9+JpnDIa2iXzImqq3fhUq NYcROvSY2JqcVWCQfMEPbjfyaxZfw2xMzUU+j2Np8MJCQz1pnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBloZ9dr3aupjnvWwATzTVIJDmTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTk2ODhhNmYtMDdmOS0z MGVjLWIwODItYTY1MDgzNzJhNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd3pCL+tHy9dPAMdJnoyd0ew/e74M53Fku6jBeTwBZsNkp4L28zIXuS nyDlmWY1NM8WFqvGF4b3lNk5/7HEs5+s4NV34BNb8pPwlWJWGozmXojTypDd2IPs PrPV7xmgI7HO5NR0U42HYu7PdjaRS9Np7nlK/AV2VfD95DF/NSG3ACgDZFCfvnLE SdCt0aKkFz6j0FEfqPR6YkY3oJChP6NUfh8fLcfvXgwH20dePDumDseuluVfWBNX 6QqdZqkQRvdHTbgiR3xjDkIg6s1cZl5EdV+dsey3D00Ni4lcQSZoXNL8RHeYCgYX 9L+2KGCvIORz1z2pPSGXaYPvou8kevU= -----END CERTIFICATE-----Generated at Wed Aug 6 10:10:35 2025 by rpki-client