$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2d095ee-23d7-30f6-9b3a-36b1d0a757d3.roa File: b2d095ee-23d7-30f6-9b3a-36b1d0a757d3.roa (raw, json) Hash identifier: s63hwm8dhoUYf5NoizSraDFxVm+IwhfsJl8xFGcuZpM= Subject key identifier: E8:FD:D8:27:AF:E8:9F:28:48:E0:55:CB:4D:90:DD:A1:B2:70:24:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769C36C303C7DD754B93100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2d095ee-23d7-30f6-9b3a-36b1d0a757d3.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 36629 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:c3:6c:30:3c:7d:d7:54:b9:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=6f1f41e9-8571-41a6-a2af-90ef47c6edd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4a:a5:dc:70:89:ec:86:ed:d1:d8:58:bd:44: 49:c1:ad:ad:03:4c:7e:4f:a4:79:5e:2c:cc:e2:86: dd:a9:5f:a4:1f:9e:ad:f4:13:75:58:a9:91:ce:8e: 1b:43:11:e1:f6:a6:55:46:e7:67:63:7e:57:91:9c: 2c:13:c7:64:59:fe:65:97:59:6b:a8:c7:55:6b:91: b7:32:3f:c1:5b:7b:3c:6e:9c:91:96:36:b2:b1:41: 70:8a:c3:3a:8b:87:f1:7b:69:6f:c0:81:f6:f3:f7: 38:87:68:d0:f7:f7:1b:fe:87:c5:b1:bc:c1:be:d7: fb:50:31:e2:f0:f3:53:ca:b2:f5:c1:5e:52:cb:3b: 3a:70:e9:80:aa:be:09:19:44:ac:74:91:2a:b0:2d: 18:a8:86:66:81:20:10:71:1d:58:e6:c0:2b:ce:63: eb:f7:e8:a7:56:eb:a7:ef:f8:f0:a5:4d:ff:5d:f2: 44:97:98:ad:ef:5d:e9:67:60:6d:6b:eb:41:1e:d8: 92:80:f3:ce:d5:c2:ef:75:53:6a:75:da:a7:c3:33: 53:b4:d7:97:22:da:46:25:da:70:73:70:9c:ba:98: 38:be:f7:03:47:6c:bf:ad:66:a5:0e:5f:b2:6b:56: 6b:e0:6a:0e:b2:31:85:81:c6:44:6f:bc:cd:e3:7b: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FD:D8:27:AF:E8:9F:28:48:E0:55:CB:4D:90:DD:A1:B2:70:24:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2d095ee-23d7-30f6-9b3a-36b1d0a757d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1f:61:d7:74:87:26:87:3d:e9:39:2e:7a:79:d5:fb:65:d4: fa:5a:8a:34:aa:c0:14:ad:b0:5e:82:7e:bc:cd:45:d2:bc:4e: 27:b1:6c:d7:02:77:fd:88:2e:c9:7e:f0:9d:65:67:ab:d8:80: 2b:a8:28:4f:b6:f3:90:26:39:e3:91:90:ad:20:63:7b:3e:fb: 12:ca:e9:ee:06:28:17:ae:8e:33:fe:8c:a7:f1:a1:61:e9:6d: 26:0e:90:e4:ba:b7:aa:0f:19:22:de:3a:55:55:ce:4e:00:12: 48:0f:8f:ff:23:e2:f9:45:db:d9:2b:a4:53:b5:b1:1c:70:ae: 75:ec:0d:ea:37:db:e4:34:9f:c4:7c:21:68:63:9e:d8:91:96: a0:a6:95:03:96:66:1f:8e:1e:d4:0c:e9:c2:a8:42:7d:34:7b: 69:7f:9e:37:40:25:fb:8f:b9:0a:d9:8d:c5:17:bc:17:c3:df: 00:f8:da:7a:42:d2:83:3d:ad:8f:a4:0c:05:72:aa:2e:7b:ce: 27:f1:18:b3:d1:0b:38:7e:0d:9d:2b:d8:79:0d:1f:36:54:6f: 24:66:cb:17:c0:5f:c1:86:bd:82:a7:e2:d8:49:7a:4c:af:0e: 13:2e:22:4f:ef:d7:c0:ad:a8:a2:7e:38:d1:93:54:3b:0a:d1: a4:51:6c:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacNsMDx911S5MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NmYxZjQxZTktODU3MS00MWE2LWEyYWYtOTBlZjQ3YzZlZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20ql3HCJ7Ibt0dhYvURJwa2tA0x+T6R5XizM 4obdqV+kH56t9BN1WKmRzo4bQxHh9qZVRudnY35XkZwsE8dkWf5ll1lrqMdVa5G3 Mj/BW3s8bpyRljaysUFwisM6i4fxe2lvwIH28/c4h2jQ9/cb/ofFsbzBvtf7UDHi 8PNTyrL1wV5Syzs6cOmAqr4JGUSsdJEqsC0YqIZmgSAQcR1Y5sArzmPr9+inVuun 7/jwpU3/XfJEl5it713pZ2Bta+tBHtiSgPPO1cLvdVNqddqnwzNTtNeXItpGJdpw c3Ccupg4vvcDR2y/rWalDl+ya1Zr4GoOsjGFgcZEb7zN43uFUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOj92Cev6J8oSOBVy02Q3aGycCRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjJkMDk1ZWUtMjNkNy0z MGY2LTliM2EtMzZiMWQwYTc1N2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkH2HXdIcmhz3pOS56edX7ZdT6Woo0qsAUrbBegn68zUXSvE4nsWzX Anf9iC7JfvCdZWer2IArqChPtvOQJjnjkZCtIGN7PvsSyunuBigXro4z/oyn8aFh 6W0mDpDkureqDxki3jpVVc5OABJID4//I+L5RdvZK6RTtbEccK517A3qN9vkNJ/E fCFoY57YkZagppUDlmYfjh7UDOnCqEJ9NHtpf543QCX7j7kK2Y3FF7wXw98A+Np6 QtKDPa2PpAwFcqoue84n8Riz0Qs4fg2dK9h5DR82VG8kZssXwF/Bhr2Cp+LYSXpM rw4TLiJP79fAraiifjjRk1Q7CtGkUWzr -----END CERTIFICATE-----Generated at Sun Apr 27 12:59:14 2025 by rpki-client