$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3331eafb-2a98-32bc-9bb9-bf6739a8f121.roa File: 3331eafb-2a98-32bc-9bb9-bf6739a8f121.roa (raw, json) Hash identifier: PCtnZfQdXn8OB8f5d0o9EUK/zRZx6BEUh3CToSleELo= Subject key identifier: 92:42:D7:0A:FE:88:6F:B3:E9:4A:20:E4:EF:8A:30:BB:6B:B8:D6:A6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7D0B133B69CC4EE3EF4C Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3331eafb-2a98-32bc-9bb9-bf6739a8f121.roa Signing time: Tue 29 Apr 2025 12:42:32 +0000 ROA not before: Tue 29 Apr 2025 12:42:32 +0000 ROA not after: Mon 28 Jul 2025 12:42:32 +0000 asID: 396541 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7d:0b:13:3b:69:cc:4e:e3:ef:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:32 2025 GMT Not After : Jul 28 12:42:32 2025 GMT Subject: CN=70767b9c-7a3a-42cb-8845-ab0681a8533e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:3f:1d:ef:49:ec:c0:64:1c:55:7e:32:00: 35:9a:25:33:85:3a:22:d5:f1:c0:5b:0e:18:a3:c4: 97:8d:71:65:78:4e:15:05:fe:8b:1c:09:07:af:60: a4:91:31:a0:fb:30:da:5c:6a:a6:40:22:0b:cf:a0: f4:a6:0b:96:13:f8:6a:43:b0:40:6d:03:7e:27:0f: 82:0b:f7:80:eb:a1:9e:b6:a6:c3:9f:82:6c:e7:d5: 3a:4c:cd:b8:87:fa:01:58:a9:6a:a7:74:47:88:fe: ca:8b:1d:36:38:6d:9d:84:96:d6:68:7f:37:70:57: 78:1e:dd:26:44:f8:1a:0e:ea:96:77:4e:f7:ca:b3: ca:ef:4c:f5:16:2a:39:b1:6f:dc:79:c7:b0:8f:57: c1:fd:65:5b:36:3e:97:da:8d:26:64:ed:15:01:5a: 67:fe:54:f2:45:e5:b5:c6:64:5f:19:97:7b:92:65: 89:a8:72:6c:d0:dd:56:64:dc:1a:27:a1:e8:bf:ae: b5:cf:9b:4d:4a:a1:9e:07:3f:48:de:f5:48:10:c5: 6f:53:fc:07:92:54:b7:da:5d:d5:0a:60:ec:a9:e0: aa:87:43:e8:95:e5:d4:56:62:f2:36:cd:fd:59:35: 7c:2c:a5:76:40:4e:59:ce:c0:a9:fc:16:49:35:24: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:42:D7:0A:FE:88:6F:B3:E9:4A:20:E4:EF:8A:30:BB:6B:B8:D6:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3331eafb-2a98-32bc-9bb9-bf6739a8f121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:42:4f:e3:47:34:27:71:80:d2:5c:e0:cf:2e:f5:c4:be:df: d8:00:be:da:c6:04:b0:c1:7b:18:c2:f7:15:f0:0b:82:63:92: d3:1c:10:3d:15:98:c2:e8:b4:d1:f7:de:22:7b:6f:72:af:3b: 23:46:df:a7:ea:46:89:44:64:cd:f3:1e:fa:d8:f5:57:17:15: cc:49:29:e4:8c:cd:8c:b1:fb:3e:b9:43:7a:c2:75:48:ed:2f: bc:d6:e5:b6:5d:2c:4f:af:ce:a1:0e:1e:80:53:60:8c:1f:3d: 8f:e6:57:62:59:64:9c:12:c0:24:46:ba:e9:41:cf:b5:6b:1c: 01:04:1b:8d:76:db:83:42:68:ec:47:86:95:4a:20:2a:92:6c: 8b:e8:93:11:84:2c:65:50:6e:41:cc:3c:0f:98:f4:75:9c:9e: 96:85:c8:4d:68:47:84:32:ac:59:65:8b:50:17:3f:9b:eb:d6: df:12:0a:32:0b:bf:83:36:ad:b0:97:13:03:81:c2:98:ce:2c: 3c:5c:23:02:6a:94:ff:6d:f3:c3:79:83:68:87:88:36:74:b5: 39:8d:09:f3:d2:0d:ab:c1:63:5b:f6:2c:86:6d:59:25:b3:42: 16:a2:4a:8a:90:17:3d:69:75:56:59:85:ff:89:72:a8:62:23: d8:81:a0:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv230LEztpzE7j70wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzMloXDTI1MDcyODEyNDIzMlowLzEtMCsGA1UEAxMk NzA3NjdiOWMtN2EzYS00MmNiLTg4NDUtYWIwNjgxYTg1MzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMI/He9J7MBkHFV+MgA1miUzhToi1fHAWw4Y o8SXjXFleE4VBf6LHAkHr2CkkTGg+zDaXGqmQCILz6D0pguWE/hqQ7BAbQN+Jw+C C/eA66GetqbDn4Js59U6TM24h/oBWKlqp3RHiP7Kix02OG2dhJbWaH83cFd4Ht0m RPgaDuqWd073yrPK70z1Fio5sW/cecewj1fB/WVbNj6X2o0mZO0VAVpn/lTyReW1 xmRfGZd7kmWJqHJs0N1WZNwaJ6Hov661z5tNSqGeBz9I3vVIEMVvU/wHklS32l3V CmDsqeCqh0PoleXUVmLyNs39WTV8LKV2QE5ZzsCp/BZJNSRvqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJC1wr+iG+z6Uog5O+KMLtruNamMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzMzMWVhZmItMmE5OC0z MmJjLTliYjktYmY2NzM5YThmMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVCT+NHNCdxgNJc4M8u9cS+39gAvtrGBLDBexjC9xXwC4JjktMcED0V mMLotNH33iJ7b3KvOyNG36fqRolEZM3zHvrY9VcXFcxJKeSMzYyx+z65Q3rCdUjt L7zW5bZdLE+vzqEOHoBTYIwfPY/mV2JZZJwSwCRGuulBz7VrHAEEG41224NCaOxH hpVKICqSbIvokxGELGVQbkHMPA+Y9HWcnpaFyE1oR4QyrFlli1AXP5vr1t8SCjIL v4M2rbCXEwOBwpjOLDxcIwJqlP9t88N5g2iHiDZ0tTmNCfPSDavBY1v2LIZtWSWz QhaiSoqQFz1pdVZZhf+JcqhiI9iBoMI= -----END CERTIFICATE-----Generated at Sun May 11 00:34:21 2025 by rpki-client