$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac40e6fb-5be7-3c6a-9cb6-26d2bf39173f.roa File: ac40e6fb-5be7-3c6a-9cb6-26d2bf39173f.roa (raw, json) Hash identifier: tBCaNdyDIYIuHxm4pR6TNrIxcjyV4iGtnpF4hbKG5ks= Subject key identifier: 76:4C:3F:5C:4D:B0:B4:EE:B3:87:85:F6:BD:D1:35:F0:05:0D:D4:37 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A8F3B83B1E2C5AEABB7FF1E60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac40e6fb-5be7-3c6a-9cb6-26d2bf39173f.roa Signing time: Fri 18 Jul 2025 13:01:05 +0000 ROA not before: Fri 18 Jul 2025 13:01:05 +0000 ROA not after: Thu 16 Oct 2025 13:01:05 +0000 asID: 22547 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8f:3b:83:b1:e2:c5:ae:ab:b7:ff:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 18 13:01:05 2025 GMT Not After : Oct 16 13:01:05 2025 GMT Subject: CN=28ec7d1c-b846-40ae-aa64-10eeba3945ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c4:ec:c7:5e:3c:38:db:58:e1:98:59:c6:8d: 2f:6c:a4:32:ee:72:cd:50:d0:db:2b:36:ef:af:7d: d4:ea:8d:59:17:09:66:21:1d:0f:f6:6b:4c:7b:b6: 7a:1d:16:4a:70:b2:1a:ec:9e:e8:51:ea:69:06:5e: c2:a9:02:69:76:54:d7:03:1c:05:59:4e:ef:46:4c: 0c:27:b5:04:63:a9:5b:67:cf:0d:9b:9a:83:b2:50: 1c:78:14:06:ce:56:98:ba:d6:44:7d:4c:b9:b3:cf: 89:19:3d:0b:e3:64:05:71:f1:de:35:d4:30:f8:e6: 75:d4:b1:d7:5a:61:fa:95:27:d6:bd:24:62:dd:92: 76:bc:95:73:51:f7:d2:43:66:62:65:c9:cf:22:98: e2:f7:3f:28:b4:d7:65:3c:83:fa:ec:21:ad:95:50: 51:49:a3:3c:db:b7:8b:f8:92:e3:68:c5:3a:37:8f: fa:74:5f:12:c2:b4:d0:d5:0b:67:d6:09:5d:31:c8: d3:8f:83:ea:1c:ef:39:aa:48:2b:31:8c:a9:29:32: 6c:1a:a0:dd:69:93:ab:b5:04:c0:6b:5d:8d:a4:92: c7:ea:af:ec:5f:b0:e3:2b:78:ed:98:b9:e2:a6:96: 99:38:5d:39:50:48:48:1f:f6:cc:f9:1f:ed:0e:b7: da:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4C:3F:5C:4D:B0:B4:EE:B3:87:85:F6:BD:D1:35:F0:05:0D:D4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac40e6fb-5be7-3c6a-9cb6-26d2bf39173f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:71:4e:7c:1e:bb:c7:85:8f:aa:b6:74:0b:0d:a3:8d:fa:1d: b1:5c:97:56:1a:7f:66:bd:05:be:83:c7:5e:61:6e:49:33:fc: 06:85:d4:6a:eb:60:21:e2:50:cb:02:07:21:50:8a:cd:8d:c2: aa:29:46:ce:6c:6b:dd:04:42:9c:2a:c2:d9:bf:e2:15:1e:49: ec:85:ea:71:77:27:ff:20:5c:a9:6c:1b:a8:92:c6:f1:fd:f6: 58:7a:15:f2:ff:af:7f:32:4e:fe:81:3c:41:30:49:61:79:e8: 40:76:20:41:f8:57:0d:7b:c1:59:fe:9d:ed:76:de:4d:f1:79: de:f0:af:0f:03:e6:6b:7d:3f:c3:0e:54:41:45:15:70:93:e4: 87:ae:fb:59:68:66:a2:07:ed:62:22:7b:63:bd:db:68:10:e5: 6c:aa:7b:b9:73:72:57:65:13:f4:3a:db:30:eb:1e:5d:5a:15: bb:d7:18:f9:33:b1:d7:e5:d1:2c:e3:dc:ed:55:27:d6:9b:c0: 76:d9:a2:4c:90:01:c8:cf:ef:ae:64:05:e8:38:e3:5c:01:f1: 5c:ae:e6:15:4a:ca:b0:9b:cb:27:4e:71:60:57:52:85:61:ae: ad:dc:96:5b:b0:d2:03:b4:e2:a1:6f:09:c3:bb:22:de:89:c2: 73:c2:b4:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqPO4Ox4sWuq7f/HmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxODEzMDEwNVoXDTI1MTAxNjEzMDEwNVowLzEtMCsGA1UEAxMk MjhlYzdkMWMtYjg0Ni00MGFlLWFhNjQtMTBlZWJhMzk0NWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcTsx148ONtY4ZhZxo0vbKQy7nLNUNDbKzbv r33U6o1ZFwlmIR0P9mtMe7Z6HRZKcLIa7J7oUeppBl7CqQJpdlTXAxwFWU7vRkwM J7UEY6lbZ88Nm5qDslAceBQGzlaYutZEfUy5s8+JGT0L42QFcfHeNdQw+OZ11LHX WmH6lSfWvSRi3ZJ2vJVzUffSQ2ZiZcnPIpji9z8otNdlPIP67CGtlVBRSaM827eL +JLjaMU6N4/6dF8SwrTQ1Qtn1gldMcjTj4PqHO85qkgrMYypKTJsGqDdaZOrtQTA a12NpJLH6q/sX7DjK3jtmLnippaZOF05UEhIH/bM+R/tDrfauwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZMP1xNsLTus4eF9r3RNfAFDdQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWM0MGU2ZmItNWJlNy0z YzZhLTljYjYtMjZkMmJmMzkxNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpxTnweu8eFj6q2dAsNo436HbFcl1Yaf2a9Bb6Dx15hbkkz/AaF1Grr YCHiUMsCByFQis2NwqopRs5sa90EQpwqwtm/4hUeSeyF6nF3J/8gXKlsG6iSxvH9 9lh6FfL/r38yTv6BPEEwSWF56EB2IEH4Vw17wVn+ne123k3xed7wrw8D5mt9P8MO VEFFFXCT5Ieu+1loZqIH7WIie2O922gQ5Wyqe7lzcldlE/Q62zDrHl1aFbvXGPkz sdfl0Szj3O1VJ9abwHbZokyQAcjP765kBeg441wB8Vyu5hVKyrCbyydOcWBXUoVh rq3clluw0gO04qFvCcO7It6JwnPCtH8= -----END CERTIFICATE-----Generated at Wed Aug 6 12:26:03 2025 by rpki-client