$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b58fa142-2f87-3405-8cf4-8308642c1de1.roa File: b58fa142-2f87-3405-8cf4-8308642c1de1.roa (raw, json) Hash identifier: ujCkGKP9eIFin6evIJDPziBaX3uAZmFkPu7/LSM9lS0= Subject key identifier: CF:55:4A:F0:13:D9:32:2E:C7:6E:55:47:9A:FE:8F:28:CB:B6:98:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769C9023B62DEDD78E92DC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b58fa142-2f87-3405-8cf4-8308642c1de1.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 396574 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:c9:02:3b:62:de:dd:78:e9:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=b098609e-8394-447b-a96a-c55f511446d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:11:58:94:95:bb:39:11:6e:6e:b6:c5:d9: 67:92:df:bc:b6:c8:dd:c1:31:52:e5:7e:28:a4:f9: b0:51:a7:03:56:be:b0:fa:55:51:12:4a:66:6c:bf: 63:9b:58:d7:0f:ee:51:5e:71:e3:6a:aa:45:0b:5d: ca:52:9f:5a:bc:0f:97:ad:5c:26:b5:f0:15:c6:5e: 41:aa:cb:b4:45:c5:48:d7:96:a1:ca:f0:73:22:89: 94:8b:28:2a:5a:15:a8:6b:a6:67:70:f3:21:36:db: 74:e1:cb:14:e0:36:fd:fb:94:13:cc:7b:50:4f:c9: 66:1a:14:52:83:24:76:06:7e:6e:33:0e:dc:54:ec: ee:f5:fb:07:6d:c9:34:33:52:0b:e0:e6:f0:56:8f: 6a:11:6f:cd:33:65:9c:d8:c2:4b:8c:57:48:47:2e: 53:66:6b:37:d2:05:3c:a9:c2:02:f7:a6:e1:1b:92: 84:18:46:cf:b7:a1:51:c0:ec:53:c5:19:73:a1:79: 2f:4a:fd:29:42:f7:b1:6a:e0:9d:b4:70:56:f3:e8: b2:06:04:e3:0a:59:34:98:0b:bc:63:56:89:65:9d: 65:50:5d:2f:37:2a:8a:d6:b7:67:78:9f:2e:6e:ad: 91:d3:53:12:2c:93:cf:0c:09:0a:1d:98:ae:65:66: 98:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:55:4A:F0:13:D9:32:2E:C7:6E:55:47:9A:FE:8F:28:CB:B6:98:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b58fa142-2f87-3405-8cf4-8308642c1de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d1:4e:0b:75:b1:66:d6:37:6a:5b:c0:c8:2a:d3:8f:9c:18: 59:4b:e8:82:ca:3f:6b:ce:91:2b:8e:70:e4:b7:94:5f:60:f6: ae:2c:01:97:ee:81:34:10:e7:d2:5f:ba:31:71:5e:83:f1:e0: f1:4d:dc:0c:27:b9:c3:c2:af:2b:0d:e1:bc:fa:ab:93:35:cd: 40:85:e6:47:6b:6b:4d:6e:1a:44:9b:b8:80:bd:7c:75:6a:07: 42:98:ac:20:59:62:31:f7:53:af:b4:d2:b7:a1:36:77:f0:86: ba:a1:77:b3:9d:25:cd:5e:1f:93:eb:f1:77:87:ac:72:13:49: 7a:37:04:fa:48:35:c5:8c:cf:83:af:1b:91:09:f2:12:c1:d8: e5:29:88:0f:67:56:43:85:a0:91:df:3a:37:c4:c7:39:1c:28: 7f:8f:6f:34:18:a0:1d:ed:a8:82:fd:05:7d:a3:29:a7:dc:ac: 41:21:e7:b3:f9:0f:f6:94:d8:d6:8a:f9:da:07:ed:d3:a8:7d: d4:0d:7e:12:1b:15:d7:42:7d:40:37:43:77:d4:f9:4c:f9:3c: 11:60:cb:20:07:fd:a1:38:e2:ab:0d:22:f2:ac:0d:0a:59:20: f3:06:55:c4:28:62:5d:00:cd:9d:4a:d0:ab:76:99:af:40:55: e4:34:56:b3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHackCO2Le3XjpLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YjA5ODYwOWUtODM5NC00NDdiLWE5NmEtYzU1ZjUxMTQ0NmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZIRWJSVuzkRbm62xdlnkt+8tsjdwTFS5X4o pPmwUacDVr6w+lVREkpmbL9jm1jXD+5RXnHjaqpFC13KUp9avA+XrVwmtfAVxl5B qsu0RcVI15ahyvBzIomUiygqWhWoa6ZncPMhNtt04csU4Db9+5QTzHtQT8lmGhRS gyR2Bn5uMw7cVOzu9fsHbck0M1IL4ObwVo9qEW/NM2Wc2MJLjFdIRy5TZms30gU8 qcIC96bhG5KEGEbPt6FRwOxTxRlzoXkvSv0pQvexauCdtHBW8+iyBgTjClk0mAu8 Y1aJZZ1lUF0vNyqK1rdneJ8ubq2R01MSLJPPDAkKHZiuZWaYGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM9VSvAT2TIux25VR5r+jyjLtpgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjU4ZmExNDItMmY4Ny0z NDA1LThjZjQtODMwODY0MmMxZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJ0U4LdbFm1jdqW8DIKtOPnBhZS+iCyj9rzpErjnDkt5RfYPauLAGX 7oE0EOfSX7oxcV6D8eDxTdwMJ7nDwq8rDeG8+quTNc1AheZHa2tNbhpEm7iAvXx1 agdCmKwgWWIx91OvtNK3oTZ38Ia6oXeznSXNXh+T6/F3h6xyE0l6NwT6SDXFjM+D rxuRCfISwdjlKYgPZ1ZDhaCR3zo3xMc5HCh/j280GKAd7aiC/QV9oymn3KxBIeez +Q/2lNjWivnaB+3TqH3UDX4SGxXXQn1AN0N31PlM+TwRYMsgB/2hOOKrDSLyrA0K WSDzBlXEKGJdAM2dStCrdpmvQFXkNFaz -----END CERTIFICATE-----Generated at Sun Apr 27 05:47:46 2025 by rpki-client