$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd1d5c25-1d63-3b8b-b443-366de68598ea.roa File: cd1d5c25-1d63-3b8b-b443-366de68598ea.roa (raw, json) Hash identifier: r6XGQkvvJ6azzv1u+vpQGCfL5QfuWZbyfA4bsCnfKRE= Subject key identifier: 02:9F:01:6C:30:1D:17:D2:A8:A6:D9:F9:B6:D6:7E:A3:78:38:06:72 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769C711ABEAD6B30D056A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd1d5c25-1d63-3b8b-b443-366de68598ea.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 396576 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:c7:11:ab:ea:d6:b3:0d:05:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=01633a47-3f1a-4e9e-a6f5-ff059fe16ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8d:a5:00:f8:a3:10:f2:09:73:6d:11:2f:ab: 24:8f:76:dc:94:c4:72:de:61:c8:32:e2:c0:98:cc: f4:59:ae:b0:4d:42:4e:8a:26:a5:75:4f:6d:99:55: f1:cf:19:03:bf:db:8e:cc:53:1e:dc:85:f1:4c:40: 45:bd:4d:e2:c1:2c:fa:fa:1a:62:31:2a:f2:98:75: 33:59:a2:7a:e9:ed:62:e0:db:8e:c6:58:84:14:bc: 38:30:d9:e5:d9:5c:e8:fb:96:30:aa:d3:8d:90:9a: 0b:a3:fc:3f:28:1c:27:1f:45:ed:40:f5:39:5b:bc: 2c:41:fa:a4:39:79:19:91:f4:a5:5e:a4:a7:1c:e5: ae:3e:a6:08:26:8b:87:b7:5f:3d:39:d4:f4:8e:8e: b0:7e:03:f3:05:a8:c9:c6:d3:60:04:a4:8a:f6:d7: 78:cd:44:e2:60:c3:f0:f1:c9:0a:f1:21:89:84:d0: ba:4a:8d:9d:eb:53:2c:92:08:bc:a2:b7:7f:89:7b: 49:09:98:9f:5b:34:58:c3:77:38:30:e7:dd:63:c7: b9:4b:0f:11:8e:2d:33:9d:60:04:40:55:7c:c9:34: a8:4d:ad:6a:43:3b:91:51:fc:fd:c0:77:c8:c4:ed: dd:c4:9d:14:ae:49:8f:6b:99:9b:43:a8:0c:da:ab: 34:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9F:01:6C:30:1D:17:D2:A8:A6:D9:F9:B6:D6:7E:A3:78:38:06:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd1d5c25-1d63-3b8b-b443-366de68598ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:33:4b:5c:ab:ed:ba:e6:7c:1f:fd:47:d2:23:08:23:e5:ee: 47:18:e8:55:78:ba:0e:a6:f9:bc:6d:91:47:a6:e0:33:81:f6: 79:69:1b:63:c7:f9:68:4b:ad:5d:f8:e5:e2:f3:f1:68:72:0c: 16:e2:a0:29:02:eb:d3:5e:f0:49:dd:19:ca:d8:9b:ee:13:e4: 00:57:7c:83:02:c2:76:bc:70:26:f4:5c:af:b1:6b:40:26:72: e6:13:53:10:36:63:77:ff:b7:38:a8:f6:b1:37:23:59:8b:8d: e4:3d:2d:16:9c:09:73:06:81:45:73:01:eb:50:a1:6f:04:81: 42:16:d2:a6:bc:d6:aa:da:09:23:09:cd:91:9f:94:1e:47:7d: ed:be:70:2e:01:98:45:1e:0f:af:29:a3:c9:39:34:15:b0:dc: 7d:5e:e9:78:9d:58:c0:ae:61:a6:a2:c3:6a:26:0a:58:d5:80: 11:4e:98:ce:64:6d:79:58:53:46:31:c0:e0:bf:d6:06:57:ee: 66:22:df:d2:b7:7c:ac:93:06:c7:91:65:be:69:f3:6b:aa:33: a0:a4:04:0f:84:b5:09:f6:25:7d:35:0e:c5:dc:b0:72:7c:75: 7a:6d:88:bf:03:43:3c:8d:d8:cc:21:b5:8b:67:43:01:8b:7e: 4b:72:3b:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHaccRq+rWsw0FagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MDE2MzNhNDctM2YxYS00ZTllLWE2ZjUtZmYwNTlmZTE2ZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko2lAPijEPIJc20RL6skj3bclMRy3mHIMuLA mMz0Wa6wTUJOiialdU9tmVXxzxkDv9uOzFMe3IXxTEBFvU3iwSz6+hpiMSrymHUz WaJ66e1i4NuOxliEFLw4MNnl2Vzo+5YwqtONkJoLo/w/KBwnH0XtQPU5W7wsQfqk OXkZkfSlXqSnHOWuPqYIJouHt189OdT0jo6wfgPzBajJxtNgBKSK9td4zUTiYMPw 8ckK8SGJhNC6So2d61Mskgi8ord/iXtJCZifWzRYw3c4MOfdY8e5Sw8Rji0znWAE QFV8yTSoTa1qQzuRUfz9wHfIxO3dxJ0UrkmPa5mbQ6gM2qs0nQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAKfAWwwHRfSqKbZ+bbWfqN4OAZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2QxZDVjMjUtMWQ2My0z YjhiLWI0NDMtMzY2ZGU2ODU5OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9M0tcq+265nwf/UfSIwgj5e5HGOhVeLoOpvm8bZFHpuAzgfZ5aRtj x/loS61d+OXi8/FocgwW4qApAuvTXvBJ3RnK2JvuE+QAV3yDAsJ2vHAm9FyvsWtA JnLmE1MQNmN3/7c4qPaxNyNZi43kPS0WnAlzBoFFcwHrUKFvBIFCFtKmvNaq2gkj Cc2Rn5QeR33tvnAuAZhFHg+vKaPJOTQVsNx9Xul4nVjArmGmosNqJgpY1YARTpjO ZG15WFNGMcDgv9YGV+5mIt/St3yskwbHkWW+afNrqjOgpAQPhLUJ9iV9NQ7F3LBy fHV6bYi/A0M8jdjMIbWLZ0MBi35LcjtK -----END CERTIFICATE-----Generated at Sat Apr 26 21:34:03 2025 by rpki-client