$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8b8a20-cb68-377a-ba5c-55c62456adfd.roa File: 1a8b8a20-cb68-377a-ba5c-55c62456adfd.roa (raw, json) Hash identifier: y5B0KxRq3wL0gPWK4SA2DAshvd4R3qJvMJVZ146Y80g= Subject key identifier: 0A:64:08:AC:65:CB:08:39:75:4F:41:59:CA:FF:F0:91:B7:2B:E3:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7F36391E41BDE3333D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8b8a20-cb68-377a-ba5c-55c62456adfd.roa Signing time: Tue 29 Apr 2025 12:42:33 +0000 ROA not before: Tue 29 Apr 2025 12:42:33 +0000 ROA not after: Mon 28 Jul 2025 12:42:33 +0000 asID: 397206 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7f:36:39:1e:41:bd:e3:33:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:33 2025 GMT Not After : Jul 28 12:42:33 2025 GMT Subject: CN=bf7f27da-8ac9-4c96-a3e8-3d16a95c00fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ff:bd:a9:41:81:e3:16:be:5c:63:48:2b:0d: f8:48:1f:b0:57:c9:d3:14:85:d5:3e:1b:4c:88:11: fd:c1:bc:34:8f:b3:77:52:45:ff:84:1d:4b:ad:6b: 07:96:59:21:5b:29:14:0b:2a:18:3d:25:93:7a:67: 3d:fc:80:5f:18:63:59:65:96:97:67:ee:3d:ca:13: c8:95:5a:43:3d:4c:25:5b:d3:d4:9e:79:8a:95:07: 0e:41:be:7f:5c:25:27:c7:b0:c4:1d:9a:d7:82:cb: 7f:2f:32:76:a0:be:53:13:53:d1:73:65:00:93:90: 4b:b8:6b:47:25:43:99:91:a5:c4:16:86:9e:2a:b3: f9:89:0e:49:1c:e1:d9:b6:7e:d4:4b:3e:c8:59:0b: 81:bd:31:46:35:e5:0c:34:e2:cf:cd:7a:b6:de:fb: 44:20:c8:9d:73:c6:f1:ac:00:2c:e5:4c:f0:65:84: 25:54:65:73:d8:04:32:db:c8:6c:b6:75:81:01:21: a9:a8:e2:00:8f:45:6d:d3:a2:31:4a:86:01:fe:dd: 70:31:05:8a:ff:89:f6:d1:7f:ff:fa:2c:86:1e:82: 19:d8:77:7d:99:a0:69:00:5a:ec:53:22:36:98:82: 96:d0:ed:fe:a3:ce:ba:9b:0a:67:f8:a1:79:63:1c: 97:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:64:08:AC:65:CB:08:39:75:4F:41:59:CA:FF:F0:91:B7:2B:E3:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8b8a20-cb68-377a-ba5c-55c62456adfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c9:33:f0:6a:75:26:1e:14:b8:8b:2d:5f:b5:53:f9:d7:5a: 66:7a:8d:24:a6:23:69:37:1a:46:91:ed:5c:91:83:4c:9d:a0: 48:df:34:27:45:61:26:c5:16:e4:bd:2b:16:3a:f6:f9:8e:b4: ce:6b:3a:95:a4:c1:9f:02:38:94:f2:43:68:12:5a:b7:27:26: 08:f5:39:e5:eb:d8:fb:96:7a:e2:90:b3:63:b0:ad:ff:f9:ca: 39:b6:6c:8e:97:ab:77:be:2a:6c:e0:b5:8d:5f:5c:4a:81:05: 97:a6:7a:a7:66:24:3c:ed:43:ce:40:41:02:c0:c1:cc:26:8e: ea:cd:e9:60:0a:0f:0c:db:d8:53:e1:65:e3:1a:84:82:46:11: 22:97:56:bb:50:9e:d6:ba:ac:33:48:3a:18:70:2c:94:9a:c8: 84:e7:71:3c:ff:f9:92:6b:97:39:eb:47:da:5d:d5:e5:e7:89: 48:40:d3:4d:3a:96:dd:f4:e6:b4:16:e2:e5:25:4c:5b:64:c9: 37:59:4c:09:95:22:f9:c6:3e:3a:fd:24:1b:1b:9c:07:fd:a7: 76:5e:d1:a1:d0:84:64:19:24:9c:d8:93:53:4d:31:02:97:e8: 95:b4:da:8e:b9:da:ac:78:d5:ea:2a:2b:c3:66:81:2f:49:90: 56:65:f3:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv2382OR5BveMzPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzM1oXDTI1MDcyODEyNDIzM1owLzEtMCsGA1UEAxMk YmY3ZjI3ZGEtOGFjOS00Yzk2LWEzZTgtM2QxNmE5NWMwMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/+9qUGB4xa+XGNIKw34SB+wV8nTFIXVPhtM iBH9wbw0j7N3UkX/hB1LrWsHllkhWykUCyoYPSWTemc9/IBfGGNZZZaXZ+49yhPI lVpDPUwlW9PUnnmKlQcOQb5/XCUnx7DEHZrXgst/LzJ2oL5TE1PRc2UAk5BLuGtH JUOZkaXEFoaeKrP5iQ5JHOHZtn7USz7IWQuBvTFGNeUMNOLPzXq23vtEIMidc8bx rAAs5UzwZYQlVGVz2AQy28hstnWBASGpqOIAj0Vt06IxSoYB/t1wMQWK/4n20X// +iyGHoIZ2Hd9maBpAFrsUyI2mIKW0O3+o866mwpn+KF5YxyX4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApkCKxlywg5dU9BWcr/8JG3K+NnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWE4YjhhMjAtY2I2OC0z NzdhLWJhNWMtNTVjNjI0NTZhZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjJM/BqdSYeFLiLLV+1U/nXWmZ6jSSmI2k3GkaR7VyRg0ydoEjfNCdF YSbFFuS9KxY69vmOtM5rOpWkwZ8COJTyQ2gSWrcnJgj1OeXr2PuWeuKQs2Owrf/5 yjm2bI6Xq3e+KmzgtY1fXEqBBZemeqdmJDztQ85AQQLAwcwmjurN6WAKDwzb2FPh ZeMahIJGESKXVrtQnta6rDNIOhhwLJSayITncTz/+ZJrlznrR9pd1eXniUhA0006 lt305rQW4uUlTFtkyTdZTAmVIvnGPjr9JBsbnAf9p3Ze0aHQhGQZJJzYk1NNMQKX 6JW02o652qx41eoqK8NmgS9JkFZl84o= -----END CERTIFICATE-----Generated at Sun May 11 01:51:42 2025 by rpki-client