$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7dda03a-4d6e-3f43-bef2-a39e65001570.roa File: c7dda03a-4d6e-3f43-bef2-a39e65001570.roa (raw, json) Hash identifier: KlyXAo6CqlsQDZoo+V4BSpZM6jcc/TycbMcE4FaqA2g= Subject key identifier: D0:41:B8:3E:7C:D1:BC:20:42:68:65:A5:CC:74:58:F6:87:82:B2:46 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769CB076681C0081B6DF1C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7dda03a-4d6e-3f43-bef2-a39e65001570.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 36625 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:cb:07:66:81:c0:08:1b:6d:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=ed33f9aa-2c74-4267-88c5-0a88e095cbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fd:58:69:ba:dc:63:d0:81:4e:ac:9d:f5:5d: 3a:0d:b3:42:f0:af:56:f5:a0:ae:93:43:81:cd:eb: be:22:e7:07:ca:ac:29:f5:43:1f:7f:59:7e:ba:fa: 8d:2c:6c:3e:71:46:8b:bd:49:ea:56:85:59:23:aa: b1:35:7e:0a:0f:b4:ad:3c:88:09:97:49:f6:74:90: 9b:68:1d:5e:cb:1c:b0:87:bb:eb:ec:5a:cf:4d:fb: 1a:b0:d5:4f:75:97:d6:00:a8:c1:90:fb:28:28:c4: 69:32:7a:77:9d:8b:c7:e1:36:98:bd:fd:86:39:52: be:58:e2:2b:39:e9:9c:ee:97:c7:d0:1d:6d:32:5a: db:65:94:0a:05:87:28:43:96:bc:7b:58:c7:34:8a: 1c:e5:33:42:6c:6b:8e:13:e7:3a:6a:07:2a:eb:98: b3:63:f6:8a:31:5c:e2:10:70:40:f9:a7:f6:e4:7e: b9:68:0c:c4:b0:68:4e:70:83:04:5e:c4:8f:48:73: 25:2b:a7:84:ac:e0:1b:23:3a:b2:5b:52:87:de:4d: 69:55:0b:5e:50:73:23:52:3b:c6:52:aa:37:da:8f: 88:b4:61:0e:0f:6c:1c:9e:0e:36:40:8c:48:7e:de: 26:49:d9:5f:0c:ce:27:3a:44:d0:3b:1a:d6:0a:da: 29:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:41:B8:3E:7C:D1:BC:20:42:68:65:A5:CC:74:58:F6:87:82:B2:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7dda03a-4d6e-3f43-bef2-a39e65001570.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:aa:c1:aa:fd:9d:b9:37:68:a9:48:16:cd:49:14:37:b5:5d: 86:7d:10:36:6b:35:f4:3f:d4:04:84:7f:20:21:dd:d7:a2:18: bd:c6:6e:2e:c9:5a:fd:f6:6e:4d:7b:08:bf:1c:11:b2:ec:5e: bf:19:2c:e0:d5:f2:07:bf:e7:b7:33:20:35:30:1d:a4:f8:7e: c9:ce:6d:41:bb:6c:87:ca:ab:e8:e0:27:e6:5a:ad:a0:3a:da: cb:b5:08:59:1c:3d:a3:b8:d7:b8:40:ac:95:a9:58:c4:c6:53: 9e:11:93:53:8e:c7:3a:e1:99:f3:1b:99:3b:d6:58:f9:f8:96: af:4e:d6:a7:6f:ee:92:60:14:1e:39:9b:08:b1:b9:1f:74:3a: 71:9f:60:0d:75:dd:ce:59:eb:4e:9a:49:8e:43:e1:bc:c9:27: b7:40:78:37:0a:64:da:dc:72:e2:24:06:99:a7:56:a6:66:5e: 4a:29:fc:ef:d4:80:13:b8:81:7c:bd:dc:c6:65:d1:76:c9:11: dd:ee:1e:50:49:09:e3:48:1c:b3:a9:25:d8:5e:52:4f:9f:61: d3:7a:63:b6:4c:96:ba:ea:1c:44:2f:fa:79:16:f6:70:a4:a2: a0:ed:5b:46:c8:c8:29:81:32:ed:88:7d:f5:64:30:7a:27:07: 25:07:72:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacsHZoHACBtt8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZWQzM2Y5YWEtMmM3NC00MjY3LTg4YzUtMGE4OGUwOTVjYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f1YabrcY9CBTqyd9V06DbNC8K9W9aCuk0OB zeu+IucHyqwp9UMff1l+uvqNLGw+cUaLvUnqVoVZI6qxNX4KD7StPIgJl0n2dJCb aB1eyxywh7vr7FrPTfsasNVPdZfWAKjBkPsoKMRpMnp3nYvH4TaYvf2GOVK+WOIr Oemc7pfH0B1tMlrbZZQKBYcoQ5a8e1jHNIoc5TNCbGuOE+c6agcq65izY/aKMVzi EHBA+af25H65aAzEsGhOcIMEXsSPSHMlK6eErOAbIzqyW1KH3k1pVQteUHMjUjvG Uqo32o+ItGEOD2wcng42QIxIft4mSdlfDM4nOkTQOxrWCtopxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNBBuD580bwgQmhlpcx0WPaHgrJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzdkZGEwM2EtNGQ2ZS0z ZjQzLWJlZjItYTM5ZTY1MDAxNTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUqsGq/Z25N2ipSBbNSRQ3tV2GfRA2azX0P9QEhH8gId3Xohi9xm4u yVr99m5Newi/HBGy7F6/GSzg1fIHv+e3MyA1MB2k+H7Jzm1Bu2yHyqvo4CfmWq2g OtrLtQhZHD2juNe4QKyVqVjExlOeEZNTjsc64ZnzG5k71lj5+JavTtanb+6SYBQe OZsIsbkfdDpxn2ANdd3OWetOmkmOQ+G8ySe3QHg3CmTa3HLiJAaZp1amZl5KKfzv 1IATuIF8vdzGZdF2yRHd7h5QSQnjSByzqSXYXlJPn2HTemO2TJa66hxEL/p5FvZw pKKg7VtGyMgpgTLtiH31ZDB6JwclB3IJ -----END CERTIFICATE-----Generated at Sun Apr 27 03:03:11 2025 by rpki-client