$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33df8205-50aa-3293-aa8a-912e6c6d115e.roa File: 33df8205-50aa-3293-aa8a-912e6c6d115e.roa (raw, json) Hash identifier: Lt9lAd6z3y3qOj8aSKD1+jpXPafnE4uC4EjMBHJeCtM= Subject key identifier: 02:80:BA:EC:2D:26:CB:E0:59:0A:FD:37:C6:EC:0A:71:A1:1B:F9:B4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB82AF3D0F87907BB122B0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33df8205-50aa-3293-aa8a-912e6c6d115e.roa Signing time: Tue 29 Apr 2025 12:42:34 +0000 ROA not before: Tue 29 Apr 2025 12:42:34 +0000 ROA not after: Mon 28 Jul 2025 12:42:34 +0000 asID: 396575 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:82:af:3d:0f:87:90:7b:b1:22:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:34 2025 GMT Not After : Jul 28 12:42:34 2025 GMT Subject: CN=a9e4a8af-1167-4f11-9d6d-d747c44742e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:99:6f:58:66:2a:38:6e:b5:f7:43:64:ae:de: b6:4a:b1:43:bc:9a:3d:43:e9:7d:b5:98:b7:3d:ad: 02:8b:9c:d7:09:b9:89:56:43:56:b8:95:1d:19:5c: 88:a7:87:2d:4a:20:c3:55:ca:9f:6f:7d:57:4d:63: f1:e8:71:f0:d5:26:e3:2e:8b:eb:62:8a:b9:85:79: dc:b1:fb:5f:cf:be:fd:ba:10:89:a0:ae:63:18:a4: 4d:82:bd:e8:db:fe:81:a3:b5:e2:c9:a7:44:e5:30: de:e4:c5:3f:3f:ae:49:3e:3a:1b:55:53:2d:38:46: c2:63:bb:d4:d6:b1:d7:4c:bb:8b:cf:60:d1:62:a7: 45:24:71:ec:95:b9:8b:d3:e9:5c:4c:13:07:86:fb: 07:c4:01:9a:05:3d:12:16:e2:e1:6b:d4:f8:f0:1e: 3a:c7:3f:b5:17:c7:1b:05:40:d8:11:e8:ed:07:46: 08:fb:74:58:51:aa:16:9e:3b:93:66:63:3f:42:13: 48:85:5e:66:b7:1e:6b:44:fc:47:99:37:27:98:93: ee:d3:31:66:0d:17:09:77:85:4a:b9:9a:19:82:cf: 4b:9a:c4:70:d3:73:da:a3:1f:28:e2:35:c0:b0:14: 00:9b:c7:a9:f4:92:36:20:68:87:96:85:14:05:8f: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:80:BA:EC:2D:26:CB:E0:59:0A:FD:37:C6:EC:0A:71:A1:1B:F9:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33df8205-50aa-3293-aa8a-912e6c6d115e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c8:9b:26:13:49:74:d6:b5:fa:ec:1a:f3:65:4c:0e:fb:29: 01:b3:6b:14:18:2b:ef:5b:a3:44:f7:27:86:30:6b:95:f2:9e: 5a:ac:05:10:66:29:ea:9b:e5:bb:50:c7:44:fa:a3:30:74:c6: d3:32:fe:d5:95:8e:08:82:fb:2a:d0:a5:6d:8f:b7:80:71:91: c2:e8:69:17:18:c4:ba:6c:cf:19:f6:74:46:25:34:aa:1c:ea: d1:36:bc:fd:85:72:0b:c1:94:7b:0a:71:97:9b:f6:d9:29:85: 5d:64:1c:c2:6c:4e:34:60:5e:da:fb:5e:77:fa:be:da:cd:71: 16:23:61:f5:b6:5b:71:6a:e1:ef:e1:f9:18:77:81:a0:55:cb: 3d:7c:b4:c8:ba:47:98:42:5b:72:67:63:74:20:dd:de:c7:81: 46:83:0d:6b:03:22:ea:53:c2:58:d3:98:98:6f:07:f2:c6:1a: bd:72:98:b6:ad:c5:23:e6:d1:4a:fb:c7:5a:a0:1e:05:c3:a3: be:bc:9d:6b:5e:14:ae:14:c5:f6:8e:ae:50:46:e0:82:92:1a: b7:77:e3:c4:a9:ea:01:11:ec:a3:35:64:a1:cf:2d:18:a3:6d: 78:3e:23:90:ab:78:d5:ac:18:04:2e:c5:1d:ff:5e:3c:4d:90: c1:52:77:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv24KvPQ+HkHuxIrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzNFoXDTI1MDcyODEyNDIzNFowLzEtMCsGA1UEAxMk YTllNGE4YWYtMTE2Ny00ZjExLTlkNmQtZDc0N2M0NDc0MmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZlvWGYqOG6190Nkrt62SrFDvJo9Q+l9tZi3 Pa0Ci5zXCbmJVkNWuJUdGVyIp4ctSiDDVcqfb31XTWPx6HHw1SbjLovrYoq5hXnc sftfz779uhCJoK5jGKRNgr3o2/6Bo7XiyadE5TDe5MU/P65JPjobVVMtOEbCY7vU 1rHXTLuLz2DRYqdFJHHslbmL0+lcTBMHhvsHxAGaBT0SFuLha9T48B46xz+1F8cb BUDYEejtB0YI+3RYUaoWnjuTZmM/QhNIhV5mtx5rRPxHmTcnmJPu0zFmDRcJd4VK uZoZgs9LmsRw03Paox8o4jXAsBQAm8ep9JI2IGiHloUUBY/QyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKAuuwtJsvgWQr9N8bsCnGhG/m0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzNkZjgyMDUtNTBhYS0z MjkzLWFhOGEtOTEyZTZjNmQxMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnImyYTSXTWtfrsGvNlTA77KQGzaxQYK+9bo0T3J4Ywa5XynlqsBRBm Keqb5btQx0T6ozB0xtMy/tWVjgiC+yrQpW2Pt4BxkcLoaRcYxLpszxn2dEYlNKoc 6tE2vP2FcgvBlHsKcZeb9tkphV1kHMJsTjRgXtr7Xnf6vtrNcRYjYfW2W3Fq4e/h +Rh3gaBVyz18tMi6R5hCW3JnY3Qg3d7HgUaDDWsDIupTwljTmJhvB/LGGr1ymLat xSPm0Ur7x1qgHgXDo768nWteFK4UxfaOrlBG4IKSGrd348Sp6gER7KM1ZKHPLRij bXg+I5CreNWsGAQuxR3/XjxNkMFSd1c= -----END CERTIFICATE-----Generated at Sun May 11 12:34:16 2025 by rpki-client