$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afcd9b55-66b8-3950-9d7d-1ebdff728f50.roa File: afcd9b55-66b8-3950-9d7d-1ebdff728f50.roa (raw, json) Hash identifier: Kk4WjXSiv3HNm+Y9ItCD1OYfZVhGHxIhondzTORrBNw= Subject key identifier: 50:8A:FF:EE:DA:08:57:BB:A5:6E:9A:AB:0E:D2:57:45:79:BD:E9:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769CA31D36C6DB0B5D2D080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afcd9b55-66b8-3950-9d7d-1ebdff728f50.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 396602 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ca:31:d3:6c:6d:b0:b5:d2:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=e603dab9-113b-4ea5-898f-3459ab430062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:36:67:bd:4e:c2:43:b2:20:51:03:12:e1:61: e1:d0:4d:fb:49:8a:e4:34:42:35:96:a3:36:34:64: 83:c2:7e:5c:3b:6b:4a:3c:f7:13:01:88:db:78:2f: f3:6d:16:33:21:ff:fd:ba:e1:84:c5:90:15:da:f1: 4f:72:c1:60:28:19:a2:3e:53:31:73:07:05:e8:66: c0:e3:e8:1f:b4:7d:df:33:6a:b1:0a:49:a9:17:86: 01:59:c9:86:1b:f8:e0:87:17:63:4a:c7:57:8a:27: 06:8d:09:89:ea:95:bd:95:26:78:dd:67:2f:86:13: fc:77:db:52:33:32:b0:bb:98:87:6c:66:a4:e9:fa: 64:ac:36:58:9f:ba:19:f4:1d:42:43:2d:82:68:fc: 43:29:02:0d:62:b6:67:ac:ac:6b:4b:5a:a5:a3:f9: f1:54:d5:28:70:ee:99:30:b3:9c:71:c2:dc:dd:14: f5:68:52:c2:18:1d:47:8c:90:e7:c5:51:35:15:bc: 07:f6:48:b5:65:06:2e:d4:f6:57:fe:b7:9d:a4:15: a6:fc:2c:90:9b:a7:73:37:cb:ea:d7:e7:da:8c:4d: 6e:b6:5e:de:d6:83:d0:de:88:c5:57:32:a7:64:23: 9b:a6:13:34:19:69:6e:54:b0:de:25:97:0b:db:85: 62:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8A:FF:EE:DA:08:57:BB:A5:6E:9A:AB:0E:D2:57:45:79:BD:E9:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afcd9b55-66b8-3950-9d7d-1ebdff728f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:16:27:03:92:03:a5:ea:eb:fc:13:fb:2e:e4:96:b8:6e:99: ec:86:1e:ad:18:a3:33:f2:6d:f7:50:ac:43:f1:0a:ca:73:02: 3b:c0:46:5f:8b:50:1c:a3:e6:51:0f:cb:7f:55:cb:84:fe:7c: 0a:6f:32:57:37:db:86:9c:ca:a6:db:93:a9:4c:10:46:10:6e: 3b:d0:aa:e7:be:21:06:2d:b2:ff:ef:fa:a5:4e:26:49:f7:aa: c3:2f:33:e0:31:d8:f2:bb:39:39:b9:37:5d:91:04:7a:0d:13: 1b:49:6e:46:87:fa:53:48:fd:92:b6:f9:cd:63:ff:25:07:cc: 88:89:bd:28:3b:40:b3:50:41:b2:46:91:77:cd:05:37:90:5a: d1:7e:db:ce:83:69:79:32:42:58:d4:cb:a3:7c:3c:fd:f4:9b: d9:be:f6:eb:01:2e:f9:9a:41:d2:0e:ec:27:d9:20:cb:c4:71: 6b:fe:be:44:de:25:6a:4a:0d:e1:33:1c:d7:73:65:3f:e6:1f: 7b:f9:98:96:4b:62:b9:0d:e6:1a:08:92:46:76:c2:a8:4f:36: c1:b2:60:33:47:ad:de:6c:4e:8a:a3:28:cc:3d:20:87:d7:8a: 98:ce:89:75:45:ca:3e:82:4b:6b:df:e5:ca:7f:62:1d:19:17: 1e:5b:6c:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacox02xtsLXS0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZTYwM2RhYjktMTEzYi00ZWE1LTg5OGYtMzQ1OWFiNDMwMDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DZnvU7CQ7IgUQMS4WHh0E37SYrkNEI1lqM2 NGSDwn5cO2tKPPcTAYjbeC/zbRYzIf/9uuGExZAV2vFPcsFgKBmiPlMxcwcF6GbA 4+gftH3fM2qxCkmpF4YBWcmGG/jghxdjSsdXiicGjQmJ6pW9lSZ43WcvhhP8d9tS MzKwu5iHbGak6fpkrDZYn7oZ9B1CQy2CaPxDKQINYrZnrKxrS1qlo/nxVNUocO6Z MLOcccLc3RT1aFLCGB1HjJDnxVE1FbwH9ki1ZQYu1PZX/redpBWm/CyQm6dzN8vq 1+fajE1utl7e1oPQ3ojFVzKnZCObphM0GWluVLDeJZcL24ViNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFCK/+7aCFe7pW6aqw7SV0V5vemhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZjZDliNTUtNjZiOC0z OTUwLTlkN2QtMWViZGZmNzI4ZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAHFicDkgOl6uv8E/su5Ja4bpnshh6tGKMz8m33UKxD8QrKcwI7wEZf i1Aco+ZRD8t/VcuE/nwKbzJXN9uGnMqm25OpTBBGEG470KrnviEGLbL/7/qlTiZJ 96rDLzPgMdjyuzk5uTddkQR6DRMbSW5Gh/pTSP2StvnNY/8lB8yIib0oO0CzUEGy RpF3zQU3kFrRftvOg2l5MkJY1MujfDz99JvZvvbrAS75mkHSDuwn2SDLxHFr/r5E 3iVqSg3hMxzXc2U/5h97+ZiWS2K5DeYaCJJGdsKoTzbBsmAzR63ebE6KoyjMPSCH 14qYzol1Rco+gktr3+XKf2IdGRceW2xu -----END CERTIFICATE-----Generated at Tue Apr 29 02:02:53 2025 by rpki-client