$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c52fb26-dd12-39d6-a39b-aa255adca45d.roa File: 2c52fb26-dd12-39d6-a39b-aa255adca45d.roa (raw, json) Hash identifier: 87zJcjFrYSgC99tb1ujdrseCnNYiy8cgo8smipjBslw= Subject key identifier: 02:38:46:C1:D5:B4:FE:2E:C7:B7:7B:68:24:B4:DB:DC:87:76:E2:ED Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB81FD6C9114D9F4E7EFE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c52fb26-dd12-39d6-a39b-aa255adca45d.roa Signing time: Tue 29 Apr 2025 12:42:34 +0000 ROA not before: Tue 29 Apr 2025 12:42:34 +0000 ROA not after: Mon 28 Jul 2025 12:42:34 +0000 asID: 21313 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:81:fd:6c:91:14:d9:f4:e7:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:34 2025 GMT Not After : Jul 28 12:42:34 2025 GMT Subject: CN=d99a79d6-fcaa-44c8-89e5-1a1eca2b9d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a2:3d:52:cb:1e:5c:3d:d7:75:01:07:7c:4e: 35:84:8a:c2:d8:16:46:a6:e1:2b:42:b9:9e:65:75: fa:02:86:13:57:57:e4:dc:b5:cc:d3:4e:1c:59:09: c6:f7:02:54:d2:19:c6:71:dc:fe:72:c9:23:e5:7e: 06:05:30:88:8e:e0:51:0b:c2:1a:cf:04:a5:65:c6: 70:fa:83:dd:03:5b:28:a9:5f:e7:7b:5e:8c:83:3d: 66:30:6c:2a:44:0a:8e:9b:dc:40:9c:7a:50:f3:e0: 15:e5:92:36:67:b4:93:a9:07:1a:ba:a1:7b:67:97: 60:81:27:7e:2a:67:cf:fd:0a:db:a8:9c:0e:fe:f6: e7:d2:df:d9:a3:ab:8e:86:a9:aa:f5:93:6a:6a:53: c8:73:ec:04:63:b4:ab:b3:2b:44:af:77:f8:8f:98: 19:5e:39:4f:64:7c:cd:9a:0f:1f:94:1c:54:3e:14: 32:6e:f6:00:41:32:a8:fb:58:ce:42:3a:9c:03:98: 08:a6:32:b2:ee:17:d7:83:14:46:de:e2:94:c2:27: 46:f2:d7:3e:13:e7:4d:36:22:33:31:7d:58:b6:ff: 69:06:bb:06:e9:61:2f:19:76:4e:5b:68:62:cb:4f: fc:a7:51:a9:bc:72:3a:e0:97:fa:1b:9c:11:71:63: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:38:46:C1:D5:B4:FE:2E:C7:B7:7B:68:24:B4:DB:DC:87:76:E2:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c52fb26-dd12-39d6-a39b-aa255adca45d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:22:65:01:30:10:80:26:56:be:ca:6d:f9:fb:05:15:dc:5d: 76:59:aa:79:82:68:ab:ea:c9:38:d2:50:cc:08:74:e2:9d:a7: ee:ac:b7:44:7e:38:33:fa:2b:ea:3f:de:92:29:4c:01:cf:2e: 8e:e4:77:02:43:60:87:10:be:f9:6b:39:65:9f:45:6d:92:3b: 07:bc:c0:e0:4e:3d:4f:e1:22:52:2c:51:ce:6a:10:14:99:c9: dd:17:9b:00:98:e4:7c:54:9a:b0:02:1e:65:e9:f9:5f:85:43: 32:ba:dd:b6:af:0d:26:69:56:ec:49:72:73:60:eb:28:75:b8: 4c:a1:42:9e:41:40:89:9f:bf:53:a9:5d:be:c7:f6:42:a7:73: 1f:0b:08:bd:1a:46:1a:2f:e9:42:de:51:89:b1:9c:88:30:91: 60:11:7a:cd:80:67:b3:aa:a3:2f:34:f4:e0:9a:33:f8:b6:57: 77:74:e0:bf:73:cb:1a:b2:2d:03:bb:76:5d:5d:6c:6a:7c:68: c5:67:d9:11:0e:ca:ad:b3:66:a4:20:11:51:ab:13:78:6e:7a: 9b:14:25:cf:f3:af:13:6a:ca:07:5c:5f:7c:a5:23:75:56:8a: 90:10:b8:f8:fd:d3:96:3b:ef:fb:3c:26:5e:c0:1d:cb:15:80: 94:88:94:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv24H9bJEU2fTn7+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzNFoXDTI1MDcyODEyNDIzNFowLzEtMCsGA1UEAxMk ZDk5YTc5ZDYtZmNhYS00NGM4LTg5ZTUtMWExZWNhMmI5ZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaI9UsseXD3XdQEHfE41hIrC2BZGpuErQrme ZXX6AoYTV1fk3LXM004cWQnG9wJU0hnGcdz+cskj5X4GBTCIjuBRC8IazwSlZcZw +oPdA1soqV/ne16Mgz1mMGwqRAqOm9xAnHpQ8+AV5ZI2Z7STqQcauqF7Z5dggSd+ KmfP/QrbqJwO/vbn0t/Zo6uOhqmq9ZNqalPIc+wEY7SrsytEr3f4j5gZXjlPZHzN mg8flBxUPhQybvYAQTKo+1jOQjqcA5gIpjKy7hfXgxRG3uKUwidG8tc+E+dNNiIz MX1Ytv9pBrsG6WEvGXZOW2hiy0/8p1GpvHI64Jf6G5wRcWM/SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI4RsHVtP4ux7d7aCS029yHduLtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmM1MmZiMjYtZGQxMi0z OWQ2LWEzOWItYWEyNTVhZGNhNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwiZQEwEIAmVr7Kbfn7BRXcXXZZqnmCaKvqyTjSUMwIdOKdp+6st0R+ ODP6K+o/3pIpTAHPLo7kdwJDYIcQvvlrOWWfRW2SOwe8wOBOPU/hIlIsUc5qEBSZ yd0XmwCY5HxUmrACHmXp+V+FQzK63bavDSZpVuxJcnNg6yh1uEyhQp5BQImfv1Op Xb7H9kKncx8LCL0aRhov6ULeUYmxnIgwkWARes2AZ7Oqoy809OCaM/i2V3d04L9z yxqyLQO7dl1dbGp8aMVn2REOyq2zZqQgEVGrE3huepsUJc/zrxNqygdcX3ylI3VW ipAQuPj905Y77/s8Jl7AHcsVgJSIlA4= -----END CERTIFICATE-----Generated at Sat May 10 23:13:42 2025 by rpki-client