$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50dab085-f9d8-32b4-bfc4-269a335c837b.roa File: 50dab085-f9d8-32b4-bfc4-269a335c837b.roa (raw, json) Hash identifier: kaxtwi666MiQd1ikwLzBFLkIM8O4vXEKtg0Ez/7+CAM= Subject key identifier: 76:46:EE:8A:B8:89:6A:7E:C2:F2:9E:4D:13:44:40:9E:F5:B0:7D:71 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7FD0BA750596B361CF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50dab085-f9d8-32b4-bfc4-269a335c837b.roa Signing time: Tue 29 Apr 2025 12:42:33 +0000 ROA not before: Tue 29 Apr 2025 12:42:33 +0000 ROA not after: Mon 28 Jul 2025 12:42:33 +0000 asID: 396613 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7f:d0:ba:75:05:96:b3:61:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:33 2025 GMT Not After : Jul 28 12:42:33 2025 GMT Subject: CN=e85b00c9-9b31-4783-91e1-beab0a60e710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:08:4a:83:fb:29:10:1e:81:bd:e8:74:7a:1c: f1:a1:9e:dc:8e:4b:4c:04:96:07:50:92:48:8d:d7: 60:f3:ba:fd:21:9b:bd:00:d2:cc:36:27:aa:73:2b: d9:fe:dc:44:ac:6a:13:fb:e0:56:8d:c8:52:c1:39: ff:f4:27:c3:a6:b1:c4:2a:b5:a8:df:cc:ca:68:e4: 1b:cf:a7:7d:c7:2a:a6:98:50:e3:1c:2e:d5:e7:b6: e2:e3:bb:f4:09:d6:2c:8b:3e:e8:45:22:79:0c:42: 71:c6:c1:b0:00:d1:93:6f:b6:51:c9:f8:92:e0:d5: 9f:07:bc:a8:c9:c6:12:5f:08:8d:f1:0d:eb:20:a6: b9:4a:3a:e9:be:0b:78:e4:fd:3c:92:ec:8c:4c:d5: bc:f9:2d:52:61:4a:11:30:a9:8f:39:5a:96:39:cf: b9:45:b2:10:f5:49:6a:bb:c1:57:ea:9c:5c:cd:3f: dd:a5:41:d9:28:61:ac:7e:51:bd:ee:58:a6:94:a0: 3b:2a:4c:53:24:37:ee:69:07:0e:95:d5:c7:2c:d1: 95:c4:01:96:09:7c:0d:94:2d:ea:36:a8:e5:79:31: 50:3a:e0:17:c8:de:c3:4b:8d:9e:ba:c7:51:7a:01: c4:1c:83:c2:1b:55:77:30:ac:32:54:e3:24:51:2b: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:46:EE:8A:B8:89:6A:7E:C2:F2:9E:4D:13:44:40:9E:F5:B0:7D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50dab085-f9d8-32b4-bfc4-269a335c837b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b7:9d:51:2d:50:8a:64:43:48:89:bf:65:f1:6c:57:b7:63: 33:54:c8:c1:48:35:88:48:68:2a:15:a8:2c:75:b9:5c:7a:24: 58:9e:82:e4:3b:1b:90:2e:86:2b:a4:d3:58:52:3f:99:fa:63: b4:8c:5f:93:89:44:91:8f:b0:35:82:a2:80:6f:8e:08:1d:07: a8:35:51:09:5c:7b:15:4a:c6:ba:9e:d2:25:59:6d:ab:5f:3a: 8d:0a:75:b4:41:2d:66:0a:81:fd:db:eb:82:4d:51:18:4d:95: 0b:2d:dc:d2:7f:a3:3b:01:d4:ae:c1:19:6d:78:95:31:74:01: c5:ce:72:22:c0:83:e7:a7:a7:a3:ae:c8:51:23:5c:18:9d:fe: 20:56:ca:82:a3:e3:0c:2f:89:e7:bb:e2:d6:31:d2:0d:b6:9e: 47:18:0c:c7:e6:3b:f3:c8:ba:0c:25:53:d4:ce:cb:da:49:da: 0a:b7:00:85:64:1c:4f:e5:a0:84:ea:02:95:9f:58:ec:cb:31: aa:b5:f2:95:6c:2f:3e:49:ad:cd:8b:e7:81:b9:34:7f:2b:75: 1f:4a:97:9e:bf:83:57:7e:de:55:9b:e9:50:46:ff:49:02:b3: 3c:52:d3:2d:de:54:97:0b:b0:29:00:9e:ca:04:36:f4:91:4a: 4b:f1:15:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv23/QunUFlrNhz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzM1oXDTI1MDcyODEyNDIzM1owLzEtMCsGA1UEAxMk ZTg1YjAwYzktOWIzMS00NzgzLTkxZTEtYmVhYjBhNjBlNzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQhKg/spEB6Bveh0ehzxoZ7cjktMBJYHUJJI jddg87r9IZu9ANLMNieqcyvZ/txErGoT++BWjchSwTn/9CfDprHEKrWo38zKaOQb z6d9xyqmmFDjHC7V57bi47v0CdYsiz7oRSJ5DEJxxsGwANGTb7ZRyfiS4NWfB7yo ycYSXwiN8Q3rIKa5Sjrpvgt45P08kuyMTNW8+S1SYUoRMKmPOVqWOc+5RbIQ9Ulq u8FX6pxczT/dpUHZKGGsflG97limlKA7KkxTJDfuaQcOldXHLNGVxAGWCXwNlC3q NqjleTFQOuAXyN7DS42eusdRegHEHIPCG1V3MKwyVOMkUSvuwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZG7oq4iWp+wvKeTRNEQJ71sH1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTBkYWIwODUtZjlkOC0z MmI0LWJmYzQtMjY5YTMzNWM4MzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy3nVEtUIpkQ0iJv2XxbFe3YzNUyMFINYhIaCoVqCx1uVx6JFieguQ7 G5Auhiuk01hSP5n6Y7SMX5OJRJGPsDWCooBvjggdB6g1UQlcexVKxrqe0iVZbatf Oo0KdbRBLWYKgf3b64JNURhNlQst3NJ/ozsB1K7BGW14lTF0AcXOciLAg+enp6Ou yFEjXBid/iBWyoKj4wwviee74tYx0g22nkcYDMfmO/PIugwlU9TOy9pJ2gq3AIVk HE/loITqApWfWOzLMaq18pVsLz5Jrc2L54G5NH8rdR9Kl56/g1d+3lWb6VBG/0kC szxS0y3eVJcLsCkAnsoENvSRSkvxFV0= -----END CERTIFICATE-----Generated at Sun May 11 06:17:32 2025 by rpki-client