$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff3dc59-670d-386a-bf4e-427741031bd8.roa File: cff3dc59-670d-386a-bf4e-427741031bd8.roa (raw, json) Hash identifier: RbMLUxkz0l98Fh2pxXdCjbYRwmqFrqLqxJ0HvX2T4VI= Subject key identifier: AC:4F:4F:72:51:84:B1:BC:90:AD:10:87:9F:C3:8C:B6:DC:00:76:DC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769CC8C17FB61AFF5CB9A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff3dc59-670d-386a-bf4e-427741031bd8.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 397210 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:cc:8c:17:fb:61:af:f5:cb:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=2f3b80f5-2c59-4667-9131-d78c455a09bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:49:cb:a5:f1:55:b5:08:c9:97:59:a0:df: 53:15:7b:01:5e:33:08:26:c3:f6:3a:0d:4f:07:52: 60:fb:ce:ac:7b:37:77:a6:fc:f3:09:15:96:47:e8: c6:c1:3f:83:b3:7d:b0:33:7c:c1:2b:4a:28:66:f5: 0a:34:0c:9f:d4:c1:3b:b4:35:30:46:f2:85:67:42: 90:f8:5a:77:64:7d:8b:3c:23:15:cd:c8:e5:b4:43: f2:c1:b9:9b:8f:9b:48:bf:f4:9c:73:b3:af:b5:16: 43:1d:12:bd:25:26:9c:6b:a9:5f:83:2f:42:25:e8: 65:a8:38:31:bb:5a:31:10:35:78:b7:d2:5a:75:0d: aa:73:38:fa:28:4c:38:e5:e1:99:1e:51:2f:ee:7f: 33:2b:87:5a:02:59:1c:3a:57:b5:c9:f0:1f:5f:17: 37:1a:d4:6b:33:1d:42:43:7a:0a:4f:48:66:06:f6: 42:f4:e9:a7:69:64:3d:44:5e:17:df:e0:e4:07:4e: a4:fd:85:db:92:05:51:0e:af:c1:cb:ab:50:8b:50: 56:83:54:5e:1c:af:40:dc:1c:20:3f:11:37:d1:57: 2f:2d:6d:1a:46:63:00:93:9a:eb:13:d1:88:b0:fb: 2d:de:2d:cc:cd:bf:52:7f:34:a8:d2:f7:a7:ec:3c: 59:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4F:4F:72:51:84:B1:BC:90:AD:10:87:9F:C3:8C:B6:DC:00:76:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff3dc59-670d-386a-bf4e-427741031bd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:be:38:a7:99:1a:ec:94:2c:62:b0:6d:78:f6:27:4e:d5:eb: f2:8a:5c:02:0c:66:ea:38:1e:75:e0:6c:1f:97:cd:02:a5:49: 44:4f:b4:7b:45:64:ad:5b:f7:7c:46:fe:6f:fa:24:6d:bd:64: 70:d1:39:d8:84:47:3b:16:0e:37:3c:8d:1f:b1:40:e5:fa:ec: f4:98:a7:e1:8b:6b:3d:90:8f:e9:58:46:a3:10:a0:06:a6:e6: c9:d2:74:0d:3e:44:19:f0:b0:2d:3f:e4:da:b0:3e:64:b8:68: df:f3:9e:29:68:2e:7c:24:38:63:b4:84:57:17:17:a0:06:e1: 79:cb:47:ab:2e:37:a8:82:95:8f:fb:68:c0:06:8e:6b:8f:e0: f9:ac:f7:19:93:bc:e3:ba:c1:21:46:33:ff:ba:45:1e:80:5c: 60:bb:30:6a:be:82:7d:70:e9:93:48:34:cf:0b:38:87:c2:67: 0f:2a:a7:f0:21:18:6e:07:b7:e6:a0:f3:9c:4e:2d:35:29:78: b1:65:95:92:3a:f8:7e:72:dd:f1:4a:a8:8e:81:69:87:28:05: 96:59:8d:05:2d:4e:13:e0:e5:0a:99:a9:e0:eb:66:a3:af:ae: bc:04:68:5f:69:9b:6a:fb:07:3f:b9:3e:7a:1d:66:9a:3a:08: 67:97:9c:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacyMF/thr/XLmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MmYzYjgwZjUtMmM1OS00NjY3LTkxMzEtZDc4YzQ1NWEwOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrdJy6XxVbUIyZdZoN9TFXsBXjMIJsP2Og1P B1Jg+86sezd3pvzzCRWWR+jGwT+Ds32wM3zBK0ooZvUKNAyf1ME7tDUwRvKFZ0KQ +Fp3ZH2LPCMVzcjltEPywbmbj5tIv/Scc7OvtRZDHRK9JSaca6lfgy9CJehlqDgx u1oxEDV4t9JadQ2qczj6KEw45eGZHlEv7n8zK4daAlkcOle1yfAfXxc3GtRrMx1C Q3oKT0hmBvZC9OmnaWQ9RF4X3+DkB06k/YXbkgVRDq/By6tQi1BWg1ReHK9A3Bwg PxE30VcvLW0aRmMAk5rrE9GIsPst3i3Mzb9SfzSo0ven7DxZeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKxPT3JRhLG8kK0Qh5/DjLbcAHbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZmM2RjNTktNjcwZC0z ODZhLWJmNGUtNDI3NzQxMDMxYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBavjinmRrslCxisG149idO1evyilwCDGbqOB514Gwfl80CpUlET7R7 RWStW/d8Rv5v+iRtvWRw0TnYhEc7Fg43PI0fsUDl+uz0mKfhi2s9kI/pWEajEKAG pubJ0nQNPkQZ8LAtP+TasD5kuGjf854paC58JDhjtIRXFxegBuF5y0erLjeogpWP +2jABo5rj+D5rPcZk7zjusEhRjP/ukUegFxguzBqvoJ9cOmTSDTPCziHwmcPKqfw IRhuB7fmoPOcTi01KXixZZWSOvh+ct3xSqiOgWmHKAWWWY0FLU4T4OUKmang62aj r668BGhfaZtq+wc/uT56HWaaOghnl5wF -----END CERTIFICATE-----Generated at Sun Apr 27 00:22:18 2025 by rpki-client