$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12bda1c7-21a6-3e1b-873a-17dc53e1fdff.roa File: 12bda1c7-21a6-3e1b-873a-17dc53e1fdff.roa (raw, json) Hash identifier: X9dDcjz0ERiopk7+Sv7A7fkh6PlfO01ZNvcigyNxXGs= Subject key identifier: CA:1A:AC:2D:2A:5F:58:C1:D4:6F:82:2C:E3:93:04:F8:DC:B9:74:EF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7E9AA321FC8760716180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12bda1c7-21a6-3e1b-873a-17dc53e1fdff.roa Signing time: Tue 29 Apr 2025 12:42:32 +0000 ROA not before: Tue 29 Apr 2025 12:42:32 +0000 ROA not after: Mon 28 Jul 2025 12:42:32 +0000 asID: 396616 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7e:9a:a3:21:fc:87:60:71:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:32 2025 GMT Not After : Jul 28 12:42:32 2025 GMT Subject: CN=70f45f01-eae9-4b1e-a21c-8a47fb1af284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:48:c2:bd:b9:da:22:e6:73:30:7c:9e:bc:40: 03:cc:b1:dc:6d:03:75:88:57:8e:8d:c5:95:96:c0: 7b:47:58:28:ea:bb:ac:4b:cb:65:f9:3a:65:44:bb: 93:42:36:0e:90:6b:a6:25:bd:08:3a:e5:b1:45:28: bc:2c:b6:2f:92:20:e6:fc:8f:ba:69:86:5a:bd:2c: cf:ef:80:5e:a8:e1:e4:47:e6:bf:40:16:93:19:a2: 60:04:07:11:bf:b8:12:d0:0e:ff:76:a3:a7:25:20: 72:1e:5f:22:1c:7f:04:ff:83:7a:87:44:c0:b8:25: 10:bd:19:56:11:9e:e6:88:41:32:43:8c:f4:42:14: 2c:49:fe:4f:52:e7:96:f3:2c:84:b4:b3:8f:c3:30: a9:d5:90:93:8c:01:3f:eb:36:74:e2:76:cd:e7:71: 52:8d:1b:ff:ee:23:1d:28:2a:d9:9f:43:fc:63:d4: 9b:1f:3d:e1:5b:ef:0e:07:00:cc:c0:bf:ea:9b:b7: 9e:32:f7:02:86:55:18:a1:e8:e0:93:ae:44:ed:49: 44:e8:c2:27:85:89:aa:bc:2d:ad:86:aa:2c:8b:7e: c2:da:ba:a7:3d:e4:5d:03:3e:18:97:57:05:74:37: 30:9f:2b:e7:ea:53:2d:52:9f:8d:3b:b9:10:3e:29: 00:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1A:AC:2D:2A:5F:58:C1:D4:6F:82:2C:E3:93:04:F8:DC:B9:74:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12bda1c7-21a6-3e1b-873a-17dc53e1fdff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:9c:97:97:de:8d:5d:96:41:f8:b6:4d:d9:c5:cb:2e:86:8b: 71:d2:b8:56:5f:d7:10:51:32:77:1c:3a:ce:3b:49:92:f7:f1: 80:76:03:8b:cf:6b:ac:d9:7f:6f:70:1d:a6:81:75:b7:76:90: c4:00:48:49:f3:27:42:8e:41:07:47:fd:bb:9b:35:94:d2:e2: 9d:07:c0:09:d6:7a:ba:6a:74:8d:e2:23:80:10:52:1e:f5:97: 39:31:3b:f8:39:82:45:97:46:37:a0:53:76:8e:ea:9b:03:31: 9d:d6:fc:71:fc:07:1d:bd:12:a3:f2:08:4b:7b:81:96:5f:1b: bb:3b:e5:cd:89:9a:55:b3:46:b0:c3:ea:30:d3:28:16:8f:d4: 29:b5:b4:23:ea:46:45:a8:5e:03:d5:b3:83:25:a8:9c:b6:d4: 88:a7:f9:69:d0:11:2a:e4:51:a1:2b:1b:53:76:b6:3b:eb:6c: 95:6e:6e:96:33:71:4d:16:26:0b:6c:38:e2:31:24:4a:4c:4b: be:5b:74:9f:b5:67:5d:b5:f9:64:c4:90:54:0f:84:b7:72:2c: b0:d4:6a:0b:69:e6:e2:9e:67:7b:7e:47:06:b3:c8:1a:84:9c: 54:09:04:e0:87:94:e0:8c:57:5b:87:01:10:9b:22:28:c7:62: 30:1d:7e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv236aoyH8h2BxYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzMloXDTI1MDcyODEyNDIzMlowLzEtMCsGA1UEAxMk NzBmNDVmMDEtZWFlOS00YjFlLWEyMWMtOGE0N2ZiMWFmMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0jCvbnaIuZzMHyevEADzLHcbQN1iFeOjcWV lsB7R1go6rusS8tl+TplRLuTQjYOkGumJb0IOuWxRSi8LLYvkiDm/I+6aYZavSzP 74BeqOHkR+a/QBaTGaJgBAcRv7gS0A7/dqOnJSByHl8iHH8E/4N6h0TAuCUQvRlW EZ7miEEyQ4z0QhQsSf5PUueW8yyEtLOPwzCp1ZCTjAE/6zZ04nbN53FSjRv/7iMd KCrZn0P8Y9SbHz3hW+8OBwDMwL/qm7eeMvcChlUYoejgk65E7UlE6MInhYmqvC2t hqosi37C2rqnPeRdAz4Yl1cFdDcwnyvn6lMtUp+NO7kQPikA8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoarC0qX1jB1G+CLOOTBPjcuXTvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTJiZGExYzctMjFhNi0z ZTFiLTg3M2EtMTdkYzUzZTFmZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJucl5fejV2WQfi2TdnFyy6Gi3HSuFZf1xBRMnccOs47SZL38YB2A4vP a6zZf29wHaaBdbd2kMQASEnzJ0KOQQdH/bubNZTS4p0HwAnWerpqdI3iI4AQUh71 lzkxO/g5gkWXRjegU3aO6psDMZ3W/HH8Bx29EqPyCEt7gZZfG7s75c2JmlWzRrDD 6jDTKBaP1Cm1tCPqRkWoXgPVs4MlqJy21Iin+WnQESrkUaErG1N2tjvrbJVubpYz cU0WJgtsOOIxJEpMS75bdJ+1Z121+WTEkFQPhLdyLLDUagtp5uKeZ3t+RwazyBqE nFQJBOCHlOCMV1uHARCbIijHYjAdfjg= -----END CERTIFICATE-----Generated at Sun May 11 08:47:39 2025 by rpki-client