$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40eb2735-bbb5-37fc-8f73-10232927697d.roa File: 40eb2735-bbb5-37fc-8f73-10232927697d.roa (raw, json) Hash identifier: bjTdShxdGpCIWgwhPu919mlVvG1RokUJyV0rMMdKdhs= Subject key identifier: 8D:12:AC:C4:BC:19:9D:C5:CE:EA:D1:19:F6:4E:70:22:B6:49:C8:E8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7E2EBD101DF208D48880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40eb2735-bbb5-37fc-8f73-10232927697d.roa Signing time: Tue 29 Apr 2025 12:42:32 +0000 ROA not before: Tue 29 Apr 2025 12:42:32 +0000 ROA not after: Mon 28 Jul 2025 12:42:32 +0000 asID: 397201 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7e:2e:bd:10:1d:f2:08:d4:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:32 2025 GMT Not After : Jul 28 12:42:32 2025 GMT Subject: CN=d5489dc8-0bfe-4d32-94a1-cf39193b0e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:65:47:cf:8f:69:5a:01:c7:ff:0f:29:69:67: 23:71:a0:a2:10:31:d0:e9:af:25:f9:4c:e3:ba:30: d4:50:84:42:bc:8a:38:22:e8:84:46:12:ea:12:20: aa:d2:cd:36:05:6b:11:37:e6:5e:81:42:f8:1b:63: 1a:72:38:a1:3b:a6:88:1c:b3:7c:fb:3d:10:e8:64: 42:5b:86:8c:b6:da:c4:60:54:ba:10:e6:a0:6b:16: 56:03:4e:cb:e5:62:d4:5c:cd:b8:81:f3:ff:1d:7a: 72:9c:63:33:27:80:6e:ff:ef:c2:a1:96:d5:1a:f7: 75:52:2a:9d:11:e7:2e:d8:0e:12:de:ae:bc:11:2d: cb:e6:12:37:5f:e0:b9:f8:b7:a1:6a:b9:7c:06:b7: c1:27:f7:18:d6:db:8d:8c:88:7c:44:b8:be:f8:17: da:e3:27:1f:d0:16:6e:aa:41:da:ef:7a:94:86:45: c1:72:33:ce:54:80:5b:d3:5a:0c:77:bb:5f:ff:2a: 5d:92:1d:0c:d6:6f:46:57:ea:e4:11:78:18:0e:f2: a8:14:42:1d:29:72:7f:5e:2d:4e:b2:0a:12:e2:7f: 90:40:90:11:84:99:4b:f8:d0:c8:47:52:4b:63:26: dd:32:e4:80:2a:d2:c9:68:b3:6e:06:79:4e:8e:53: c4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:12:AC:C4:BC:19:9D:C5:CE:EA:D1:19:F6:4E:70:22:B6:49:C8:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40eb2735-bbb5-37fc-8f73-10232927697d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:2b:18:fe:8b:9f:15:7b:d0:85:2b:01:e7:81:24:89:a4:db: 02:b5:7e:80:22:6c:96:64:e6:43:81:42:48:4e:cf:3c:3e:99: b0:e8:50:e7:3d:68:bd:b4:e7:a1:01:76:38:09:71:29:53:5d: b4:01:3f:ed:fb:cf:34:ee:70:ac:6e:52:50:c5:2b:59:a5:ee: a3:c2:61:ae:35:51:93:9c:1d:13:b2:8b:7d:f4:a7:84:04:ad: 13:e2:e3:18:97:b0:21:dd:5a:11:21:a7:f9:b1:24:10:7b:94: a0:d1:ed:5d:60:c8:81:02:2b:3c:35:0d:42:02:1b:37:33:d6: 2f:05:1c:9c:bb:9e:9c:fb:f5:11:45:89:36:89:32:72:9f:d7: e3:76:5d:9e:7c:c8:92:17:15:4e:46:32:ee:ef:8b:0b:c5:16: b4:40:68:71:fd:dc:56:c2:b6:73:4d:52:db:8f:20:e1:68:1a: 76:02:d0:96:9d:f6:cc:15:3d:50:6d:b6:2a:36:e2:38:19:70: a5:ed:2a:14:ba:3a:4a:3d:7c:7a:37:74:3a:3f:5d:94:3f:fd: 35:58:47:52:4c:4d:55:30:be:b3:25:10:19:48:2b:2a:fd:a0: 8a:cf:d5:57:46:a0:63:b5:56:7d:75:19:d7:c7:6b:1b:1c:02: f3:a4:2c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv234uvRAd8gjUiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzMloXDTI1MDcyODEyNDIzMlowLzEtMCsGA1UEAxMk ZDU0ODlkYzgtMGJmZS00ZDMyLTk0YTEtY2YzOTE5M2IwZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmVHz49pWgHH/w8paWcjcaCiEDHQ6a8l+Uzj ujDUUIRCvIo4IuiERhLqEiCq0s02BWsRN+ZegUL4G2MacjihO6aIHLN8+z0Q6GRC W4aMttrEYFS6EOagaxZWA07L5WLUXM24gfP/HXpynGMzJ4Bu/+/CoZbVGvd1Uiqd Eecu2A4S3q68ES3L5hI3X+C5+Leharl8BrfBJ/cY1tuNjIh8RLi++Bfa4ycf0BZu qkHa73qUhkXBcjPOVIBb01oMd7tf/ypdkh0M1m9GV+rkEXgYDvKoFEIdKXJ/Xi1O sgoS4n+QQJARhJlL+NDIR1JLYybdMuSAKtLJaLNuBnlOjlPETQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0SrMS8GZ3FzurRGfZOcCK2ScjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBlYjI3MzUtYmJiNS0z N2ZjLThmNzMtMTAyMzI5Mjc2OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcrGP6LnxV70IUrAeeBJImk2wK1foAibJZk5kOBQkhOzzw+mbDoUOc9 aL2056EBdjgJcSlTXbQBP+37zzTucKxuUlDFK1ml7qPCYa41UZOcHROyi330p4QE rRPi4xiXsCHdWhEhp/mxJBB7lKDR7V1gyIECKzw1DUICGzcz1i8FHJy7npz79RFF iTaJMnKf1+N2XZ58yJIXFU5GMu7viwvFFrRAaHH93FbCtnNNUtuPIOFoGnYC0Jad 9swVPVBttio24jgZcKXtKhS6Oko9fHo3dDo/XZQ//TVYR1JMTVUwvrMlEBlIKyr9 oIrP1VdGoGO1Vn11GdfHaxscAvOkLDg= -----END CERTIFICATE-----Generated at Sun May 11 18:51:57 2025 by rpki-client