$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f648c9de-a67a-34f0-87a5-0bc0e4a81efb.roa File: f648c9de-a67a-34f0-87a5-0bc0e4a81efb.roa (raw, json) Hash identifier: eR+k2HLiDWeK3B3PcN1xtQK1FXrgR5Y5u67GpFa+RV0= Subject key identifier: D3:7D:91:89:99:DD:3C:E9:31:46:1E:54:F0:45:30:CD:18:B9:23:E9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498769CEEE831FCE1C45C1FC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f648c9de-a67a-34f0-87a5-0bc0e4a81efb.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 40717 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ce:ee:83:1f:ce:1c:45:c1:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=36488d1f-3939-47a9-98c4-4ccdece1dfdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:04:0e:6b:a8:9a:af:94:12:a1:65:fc:9b:f5: 48:ff:6a:ee:b9:a1:92:c3:87:e2:0d:2b:ed:ae:a6: ca:bf:95:32:7f:53:de:80:9c:3e:a7:f2:73:57:87: ea:6e:18:5e:5a:12:9f:c7:5c:6a:91:92:c2:55:4f: f9:84:36:88:90:0d:ed:f8:8d:b3:a3:be:d5:f3:ab: 67:54:8d:6c:20:bf:ce:8c:c2:a6:ee:48:bf:49:2c: 29:32:21:22:8d:ad:c9:5d:f6:e0:26:ed:20:10:62: 9d:dc:de:60:2a:b9:d3:af:85:f5:81:c3:9e:5e:af: fc:82:89:8d:31:af:12:b1:b5:05:e6:56:2b:bd:46: 6a:a2:e4:3f:54:dc:c1:14:b0:90:84:16:74:8a:43: f9:5a:7b:b6:be:11:ff:e9:35:3b:d6:56:6b:a3:9b: ae:ba:85:64:94:bf:d4:2e:f9:70:aa:38:a1:3a:dc: b4:b2:69:0d:be:34:54:1b:bc:dd:f5:28:65:8c:44: 0a:b8:a2:ed:99:4d:2b:f6:a4:7c:22:ff:06:b1:fb: b4:18:04:99:ad:c8:e0:f8:17:cd:79:5b:24:07:dc: e4:5d:da:44:f4:d7:3a:c0:e0:3a:d4:ec:29:7e:32: fa:c7:6c:30:e2:52:3f:9f:e9:1a:47:63:e4:94:e5: eb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7D:91:89:99:DD:3C:E9:31:46:1E:54:F0:45:30:CD:18:B9:23:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f648c9de-a67a-34f0-87a5-0bc0e4a81efb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:66:16:13:05:62:ce:6b:a8:61:b1:75:1a:0b:a9:42:ce:f7: c1:72:e9:b3:b9:0c:0e:21:2d:1d:9a:f6:53:ee:f5:ea:68:3a: ad:3b:35:c1:a4:6f:8e:91:ce:5a:d9:1f:d0:66:1e:0a:cc:2c: 95:98:b5:d7:fa:0c:a0:c2:0e:31:36:11:b6:86:49:74:04:6b: b0:4f:d5:fa:e9:8d:9e:05:1e:31:6e:12:8e:86:6d:65:8e:ed: cf:cc:17:e8:11:97:86:17:c9:25:c8:aa:37:66:d0:97:39:53: 1d:f1:c3:88:d9:66:67:f5:3a:e3:a5:f0:9c:f5:0c:f9:3d:c9: c4:d1:e7:88:4f:2a:c4:a2:b3:02:08:76:00:f2:2d:ae:dc:94: e4:9a:72:e9:74:d8:ff:05:e8:42:c4:f5:9b:cb:b1:e3:be:ac: c4:a6:a7:86:d0:52:d6:bf:0d:8c:ba:60:bc:f8:30:40:8b:72: 4d:fe:b1:a8:8c:08:bc:1d:e4:b6:cf:db:0c:77:87:f3:23:a2: 06:14:02:1e:01:98:9a:24:9f:76:1b:b2:dd:bc:bd:cc:86:4b: ca:62:81:da:1d:10:66:ba:96:da:73:19:4b:2f:6d:6a:a1:9f: f5:dd:8d:1b:b0:71:e4:12:68:a2:a1:2c:f1:9e:62:8d:4d:4a: cb:48:72:4d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmHac7ugx/OHEXB/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MzY0ODhkMWYtMzkzOS00N2E5LTk4YzQtNGNjZGVjZTFkZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgQOa6iar5QSoWX8m/VI/2ruuaGSw4fiDSvt rqbKv5Uyf1PegJw+p/JzV4fqbhheWhKfx1xqkZLCVU/5hDaIkA3t+I2zo77V86tn VI1sIL/OjMKm7ki/SSwpMiEija3JXfbgJu0gEGKd3N5gKrnTr4X1gcOeXq/8gomN Ma8SsbUF5lYrvUZqouQ/VNzBFLCQhBZ0ikP5Wnu2vhH/6TU71lZro5uuuoVklL/U LvlwqjihOty0smkNvjRUG7zd9ShljEQKuKLtmU0r9qR8Iv8Gsfu0GASZrcjg+BfN eVskB9zkXdpE9Nc6wOA61OwpfjL6x2ww4lI/n+kaR2PklOXrfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNN9kYmZ3TzpMUYeVPBFMM0YuSPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjY0OGM5ZGUtYTY3YS0z NGYwLTg3YTUtMGJjMGU0YTgxZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1ZhYTBWLOa6hhsXUaC6lCzvfBcumzuQwOIS0dmvZT7vXqaDqtOzXB pG+Okc5a2R/QZh4KzCyVmLXX+gygwg4xNhG2hkl0BGuwT9X66Y2eBR4xbhKOhm1l ju3PzBfoEZeGF8klyKo3ZtCXOVMd8cOI2WZn9TrjpfCc9Qz5PcnE0eeITyrEorMC CHYA8i2u3JTkmnLpdNj/BehCxPWby7HjvqzEpqeG0FLWvw2MumC8+DBAi3JN/rGo jAi8HeS2z9sMd4fzI6IGFAIeAZiaJJ92G7LdvL3MhkvKYoHaHRBmupbacxlLL21q oZ/13Y0bsHHkEmiioSzxnmKNTUrLSHJN -----END CERTIFICATE-----Generated at Sat Apr 26 22:17:37 2025 by rpki-client