$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0f2ec55-6e21-309e-b2e9-9ec460b7e263.roa File: d0f2ec55-6e21-309e-b2e9-9ec460b7e263.roa (raw, json) Hash identifier: hDVxMhUvQch6Mo/+X4WYJB5b/Ol+7YgdLq4NJ0LTT4o= Subject key identifier: E6:0F:A8:38:21:1A:6E:94:54:82:0B:39:2B:0D:B1:45:50:8B:EF:F2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769C1374BEBDD766FC27100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0f2ec55-6e21-309e-b2e9-9ec460b7e263.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 396571 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:c1:37:4b:eb:dd:76:6f:c2:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=2a66d020-ccb3-499c-af17-bd75fbfb3910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:fe:8c:e4:ac:10:cf:85:88:5b:0e:37:f7: bb:57:66:a9:e5:57:e7:d0:37:47:c7:d9:c6:93:0b: e0:e9:e2:86:36:7b:5b:4a:ae:3d:c7:4c:1d:10:85: 8c:25:05:9e:e1:06:da:f4:fa:50:b0:2d:62:bf:d5: 64:d2:f9:ae:50:29:c0:99:0f:67:dd:60:f6:b6:23: 58:80:76:6a:09:82:3e:74:de:07:81:91:ef:59:0e: 38:6b:02:7c:16:17:2f:00:b7:c1:32:bc:22:5f:69: 09:85:33:56:aa:21:a5:21:76:71:01:0a:71:a7:38: 70:40:60:0b:59:20:33:95:8f:d0:05:fd:aa:8e:18: c0:14:96:ce:c8:5b:78:48:3e:bd:8f:39:d1:f3:29: d2:57:2f:9c:e9:19:6c:d5:e2:d8:5f:04:14:5f:f6: c2:5b:d1:2b:b6:8b:b9:d7:1f:63:ac:ef:33:74:99: 25:29:a8:c3:ec:04:d3:32:4b:16:bf:4a:9e:bf:03: 7b:02:c3:7a:90:84:00:31:3f:3a:f7:0a:a6:d0:12: d4:2e:d5:8a:ae:af:46:c6:5f:92:1c:f6:6b:74:a5: 6e:dc:36:b6:71:fc:fe:aa:7d:a3:f7:c6:79:0e:01: b2:a0:ea:5c:97:86:00:f3:fb:f3:65:37:7a:f4:a3: 2e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0F:A8:38:21:1A:6E:94:54:82:0B:39:2B:0D:B1:45:50:8B:EF:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0f2ec55-6e21-309e-b2e9-9ec460b7e263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7a:b9:16:22:3c:1a:ad:ad:f3:6c:ed:e3:3e:51:ca:11:59: 88:98:68:0a:93:d4:72:4a:81:1e:53:c2:95:26:0a:59:37:c3: 60:1b:59:49:42:db:bf:b8:f8:ae:f9:37:8d:f7:8a:f9:ad:a4: 28:1a:d1:09:81:de:0b:82:3c:45:5f:e4:66:5d:0a:d4:e2:96: 2a:da:2a:1f:e8:3b:af:df:db:38:0e:01:91:f7:9d:de:19:af: 0d:4c:72:aa:ee:12:6f:7e:27:b3:be:2e:48:6e:09:17:ac:72: 42:f8:0b:17:0d:a2:5c:9e:f6:f4:4f:32:db:d2:c8:45:8e:98: 3c:14:86:f4:14:c2:cf:6b:b6:db:84:47:da:4f:e5:22:58:10: 9f:57:92:ad:06:e3:ec:4d:62:28:21:6a:a8:10:3e:e5:d9:ca: 06:d1:88:e5:c2:5c:70:83:61:dc:be:28:0e:18:ee:37:97:32: 1d:56:3b:ec:4b:ca:fc:f3:e8:96:61:03:a6:2f:1f:c1:83:e6: 8f:0b:07:16:f7:d3:32:f9:3f:c7:27:80:61:bd:47:57:79:e1: a9:cf:bd:49:3a:62:3e:f6:0b:e5:89:8c:0f:c2:3f:40:a3:24: 1f:49:08:32:83:d7:ec:8f:13:e6:e8:a1:8d:af:15:4a:ea:c1: 2d:41:13:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHacE3S+vddm/CcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MmE2NmQwMjAtY2NiMy00OTljLWFmMTctYmQ3NWZiZmIzOTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmj+jOSsEM+FiFsON/e7V2ap5Vfn0DdHx9nG kwvg6eKGNntbSq49x0wdEIWMJQWe4Qba9PpQsC1iv9Vk0vmuUCnAmQ9n3WD2tiNY gHZqCYI+dN4HgZHvWQ44awJ8FhcvALfBMrwiX2kJhTNWqiGlIXZxAQpxpzhwQGAL WSAzlY/QBf2qjhjAFJbOyFt4SD69jznR8ynSVy+c6Rls1eLYXwQUX/bCW9Ertou5 1x9jrO8zdJklKajD7ATTMksWv0qevwN7AsN6kIQAMT869wqm0BLULtWKrq9Gxl+S HPZrdKVu3Da2cfz+qn2j98Z5DgGyoOpcl4YA8/vzZTd69KMuKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOYPqDghGm6UVIILOSsNsUVQi+/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBmMmVjNTUtNmUyMS0z MDllLWIyZTktOWVjNDYwYjdlMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkerkWIjwara3zbO3jPlHKEVmImGgKk9RySoEeU8KVJgpZN8NgG1lJ Qtu/uPiu+TeN94r5raQoGtEJgd4LgjxFX+RmXQrU4pYq2iof6Duv39s4DgGR953e Ga8NTHKq7hJvfiezvi5IbgkXrHJC+AsXDaJcnvb0TzLb0shFjpg8FIb0FMLPa7bb hEfaT+UiWBCfV5KtBuPsTWIoIWqoED7l2coG0Yjlwlxwg2HcvigOGO43lzIdVjvs S8r88+iWYQOmLx/Bg+aPCwcW99My+T/HJ4BhvUdXeeGpz71JOmI+9gvliYwPwj9A oyQfSQgyg9fsjxPm6KGNrxVK6sEtQRN6 -----END CERTIFICATE-----Generated at Sun Apr 27 00:00:38 2025 by rpki-client