$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e20e8ab-615c-3fe0-80e3-1a29e7b4b8c0.roa File: 0e20e8ab-615c-3fe0-80e3-1a29e7b4b8c0.roa (raw, json) Hash identifier: 8UDYQlaNdOCNQ7jj7dijRwXoZdqL7yQDKGM1hnsdFPs= Subject key identifier: 5E:62:91:3D:B6:FD:7A:B6:FB:37:88:19:DF:20:A4:19:14:7B:5A:8F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7D1A4420461AC858EA40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e20e8ab-615c-3fe0-80e3-1a29e7b4b8c0.roa Signing time: Tue 29 Apr 2025 12:42:32 +0000 ROA not before: Tue 29 Apr 2025 12:42:32 +0000 ROA not after: Mon 28 Jul 2025 12:42:32 +0000 asID: 397204 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7d:1a:44:20:46:1a:c8:58:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:32 2025 GMT Not After : Jul 28 12:42:32 2025 GMT Subject: CN=657dee88-6ef0-4232-9135-3d3a51553f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:25:b5:dd:eb:0d:bf:34:bb:fe:5a:a6:fd: 45:90:81:b8:ea:fb:f0:10:25:8d:27:94:70:ab:a6: 26:84:96:4d:1e:cb:e1:16:c7:dc:f6:8c:60:06:cc: 26:09:33:9b:0e:90:cc:e4:69:ac:f2:17:c5:82:21: 1f:74:df:cc:1a:a1:42:88:61:76:3c:ae:82:b4:15: 76:f0:30:4f:51:ed:47:60:31:2f:1a:bd:7f:03:e0: 68:82:a5:7a:8b:d6:8f:25:6a:c8:04:f9:07:52:71: 69:78:43:b3:08:fd:f7:cf:5b:e1:d8:65:ba:8f:f9: 34:d3:2f:7f:80:98:d8:05:14:09:d6:eb:76:a7:8b: 04:84:93:9a:19:73:10:6c:eb:40:97:92:bc:4b:7c: c9:7c:48:c3:59:38:50:10:37:81:f4:0d:46:88:b7: 0e:5a:b1:5f:3f:e2:4c:9a:ec:65:f2:0c:d3:e6:68: 5f:32:8d:5d:f9:fa:01:d4:a8:11:62:c7:f8:8f:75: e3:e9:11:aa:df:66:dc:8d:85:fd:5f:8b:3a:63:d8: 20:59:b1:30:c7:9b:46:31:93:4f:02:a7:03:2d:b7: 56:37:37:2f:c4:ad:98:6b:ff:5c:a9:71:22:9d:32: 5a:81:4e:b7:08:a9:da:dd:27:22:cf:c2:67:65:ff: 9f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:62:91:3D:B6:FD:7A:B6:FB:37:88:19:DF:20:A4:19:14:7B:5A:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e20e8ab-615c-3fe0-80e3-1a29e7b4b8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9f:84:83:d8:0d:33:ec:03:38:f0:5d:1a:c2:8d:4d:65:58: 12:22:e2:30:9e:c4:ce:b0:f1:b3:f5:25:1d:5c:b8:2b:8b:6d: 9d:f9:dc:ad:f5:e8:45:8d:19:3c:26:71:70:21:5f:02:f0:4f: 25:57:95:73:87:4d:4e:3b:f1:fa:19:78:e9:1a:08:5a:58:b1: 87:2c:fb:d8:c4:31:49:c1:57:79:33:27:a9:de:1c:ba:f0:dd: 6a:2b:88:0f:98:c3:42:55:01:c7:c1:5f:24:8c:0a:57:80:eb: d4:95:67:ee:fc:e9:12:08:49:f3:4b:8e:32:6d:8f:fc:93:31: fe:1f:22:5c:e3:0d:91:64:d7:d8:2c:1a:68:38:ac:e0:b8:15: 98:b0:7b:55:93:ff:12:b3:71:79:85:84:9c:72:d6:51:34:9f: 20:b8:5f:58:c1:2d:e7:ad:89:3a:ab:ac:48:8a:8a:62:ea:ee: ca:94:09:c1:61:eb:f0:8d:74:08:6f:da:30:a6:cc:3e:e1:86: 1c:de:3c:be:01:8c:85:c9:86:f7:b3:5a:02:d1:b4:16:3d:da: 29:bf:d5:83:fb:0c:d8:28:41:57:e6:5a:39:1c:6c:b2:41:6e: 6d:e3:04:61:b9:54:71:7c:47:55:94:da:47:4c:84:40:90:ec: 1b:06:be:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv230aRCBGGshY6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzMloXDTI1MDcyODEyNDIzMlowLzEtMCsGA1UEAxMk NjU3ZGVlODgtNmVmMC00MjMyLTkxMzUtM2QzYTUxNTUzZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIcltd3rDb80u/5apv1FkIG46vvwECWNJ5Rw q6YmhJZNHsvhFsfc9oxgBswmCTObDpDM5Gms8hfFgiEfdN/MGqFCiGF2PK6CtBV2 8DBPUe1HYDEvGr1/A+BogqV6i9aPJWrIBPkHUnFpeEOzCP33z1vh2GW6j/k00y9/ gJjYBRQJ1ut2p4sEhJOaGXMQbOtAl5K8S3zJfEjDWThQEDeB9A1GiLcOWrFfP+JM muxl8gzT5mhfMo1d+foB1KgRYsf4j3Xj6RGq32bcjYX9X4s6Y9ggWbEwx5tGMZNP AqcDLbdWNzcvxK2Ya/9cqXEinTJagU63CKna3Sciz8JnZf+fBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5ikT22/Xq2+zeIGd8gpBkUe1qPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGUyMGU4YWItNjE1Yy0z ZmUwLTgwZTMtMWEyOWU3YjRiOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADufhIPYDTPsAzjwXRrCjU1lWBIi4jCexM6w8bP1JR1cuCuLbZ353K31 6EWNGTwmcXAhXwLwTyVXlXOHTU478foZeOkaCFpYsYcs+9jEMUnBV3kzJ6neHLrw 3WoriA+Yw0JVAcfBXySMCleA69SVZ+786RIISfNLjjJtj/yTMf4fIlzjDZFk19gs Gmg4rOC4FZiwe1WT/xKzcXmFhJxy1lE0nyC4X1jBLeetiTqrrEiKimLq7sqUCcFh 6/CNdAhv2jCmzD7hhhzePL4BjIXJhvezWgLRtBY92im/1YP7DNgoQVfmWjkcbLJB bm3jBGG5VHF8R1WU2kdMhECQ7BsGvss= -----END CERTIFICATE-----Generated at Sat May 10 23:05:32 2025 by rpki-client