$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/575013de-3020-3cd9-a921-00ad71d5306c.roa File: 575013de-3020-3cd9-a921-00ad71d5306c.roa (raw, json) Hash identifier: eYnuAMbFEuApgLXqJO0XeL08X9WXtHxWytMbeuIgGfU= Subject key identifier: 6A:6A:E1:A7:E4:F3:A2:31:BF:34:5B:0E:FA:C2:5C:BE:1A:8C:93:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7F070D94625702A9AF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/575013de-3020-3cd9-a921-00ad71d5306c.roa Signing time: Tue 29 Apr 2025 12:42:33 +0000 ROA not before: Tue 29 Apr 2025 12:42:33 +0000 ROA not after: Mon 28 Jul 2025 12:42:33 +0000 asID: 396560 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7f:07:0d:94:62:57:02:a9:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:33 2025 GMT Not After : Jul 28 12:42:33 2025 GMT Subject: CN=e2f62868-2d8c-4907-be79-5f5a19c6ecbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:66:d6:76:79:b6:a6:0e:84:74:1a:ec:1a: 2d:d1:1c:99:3b:b3:08:0a:41:5a:89:68:3a:33:bf: 6a:38:dc:16:3f:44:2c:58:39:e3:bd:73:82:4b:8b: 4e:81:00:9f:9c:1e:92:f9:cb:57:e0:0f:c4:3a:ef: 52:a6:09:45:6c:56:45:64:12:67:12:e9:59:8d:b2: 0b:0b:e8:b9:2e:45:27:a7:a1:76:df:b0:a5:05:84: d4:aa:65:8b:76:92:9c:b6:8c:e7:b3:55:74:ad:54: 53:f9:ab:45:0d:13:d5:71:3f:65:3c:6c:2b:fa:93: 45:4d:66:d4:7e:0c:4d:fc:e7:88:44:31:2a:d5:55: 4f:12:42:2d:36:15:75:f2:b0:47:64:72:e7:ac:1d: fc:bd:3b:2e:4b:87:9e:b8:43:29:bd:c2:35:db:b9: 39:22:f9:5d:c3:b4:eb:c4:1e:41:1e:38:0d:a0:a2: 6f:54:c7:93:ef:84:05:28:bc:eb:b8:75:c8:4a:d8: 1c:6c:3f:fa:30:fd:8d:03:4c:55:ed:47:05:6f:d4: 86:71:35:3a:d9:e1:ac:d8:5d:96:8c:58:41:d5:6a: 60:37:1c:99:ba:a6:46:a1:07:6e:69:55:5b:90:13: 2a:93:6c:88:2c:8c:52:56:6a:96:2d:59:23:b5:c0: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6A:E1:A7:E4:F3:A2:31:BF:34:5B:0E:FA:C2:5C:BE:1A:8C:93:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/575013de-3020-3cd9-a921-00ad71d5306c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:34:55:f3:3b:34:da:c0:d2:64:c7:79:d5:a3:a0:c4:a8:a6: 09:18:bc:95:c0:a8:1d:26:5d:32:20:6d:6e:6e:43:b5:07:c5: 81:29:04:36:a2:a2:3d:0a:76:ba:6e:da:f8:ab:51:da:9d:a2: a4:5f:06:5f:13:64:dc:34:ee:82:a7:66:6c:4c:84:86:12:15: bf:86:64:20:4b:90:5f:bf:28:61:69:b8:13:20:cd:3c:f5:2b: eb:39:d4:a7:54:08:a6:c9:92:99:e5:50:69:2e:68:62:59:15: 82:d3:32:ac:c2:d6:e6:6c:a1:df:88:90:ad:3f:a1:d5:0a:1b: c9:32:63:64:1b:37:82:60:01:a4:16:d5:e5:df:3e:63:4c:d3: 3f:43:d0:24:6f:81:3e:90:e4:be:4b:96:97:1a:f3:a9:95:eb: ff:0c:93:c7:1e:9f:18:c4:8e:6e:78:75:27:41:af:a9:81:95: 0d:f9:f0:b8:c5:b8:cf:1f:c3:dd:20:8b:e9:2f:9c:4a:df:d2: b2:18:0a:26:19:50:d9:16:48:16:6a:c2:68:1a:1b:84:75:ec: 3f:ff:0c:42:56:fd:57:7b:90:5c:1e:a1:0a:d5:b2:a8:9e:58: f9:7f:f4:36:29:6c:3c:9f:63:f5:c6:c3:fb:b8:01:a5:eb:42: 68:90:96:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv238HDZRiVwKprwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzM1oXDTI1MDcyODEyNDIzM1owLzEtMCsGA1UEAxMk ZTJmNjI4NjgtMmQ4Yy00OTA3LWJlNzktNWY1YTE5YzZlY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR9m1nZ5tqYOhHQa7Bot0RyZO7MICkFaiWg6 M79qONwWP0QsWDnjvXOCS4tOgQCfnB6S+ctX4A/EOu9SpglFbFZFZBJnEulZjbIL C+i5LkUnp6F237ClBYTUqmWLdpKctozns1V0rVRT+atFDRPVcT9lPGwr+pNFTWbU fgxN/OeIRDEq1VVPEkItNhV18rBHZHLnrB38vTsuS4eeuEMpvcI127k5Ivldw7Tr xB5BHjgNoKJvVMeT74QFKLzruHXIStgcbD/6MP2NA0xV7UcFb9SGcTU62eGs2F2W jFhB1WpgNxyZuqZGoQduaVVbkBMqk2yILIxSVmqWLVkjtcD6AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpq4afk86IxvzRbDvrCXL4ajJORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTc1MDEzZGUtMzAyMC0z Y2Q5LWE5MjEtMDBhZDcxZDUzMDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALY0VfM7NNrA0mTHedWjoMSopgkYvJXAqB0mXTIgbW5uQ7UHxYEpBDai oj0Kdrpu2virUdqdoqRfBl8TZNw07oKnZmxMhIYSFb+GZCBLkF+/KGFpuBMgzTz1 K+s51KdUCKbJkpnlUGkuaGJZFYLTMqzC1uZsod+IkK0/odUKG8kyY2QbN4JgAaQW 1eXfPmNM0z9D0CRvgT6Q5L5Llpca86mV6/8Mk8cenxjEjm54dSdBr6mBlQ358LjF uM8fw90gi+kvnErf0rIYCiYZUNkWSBZqwmgaG4R17D//DEJW/Vd7kFweoQrVsqie WPl/9DYpbDyfY/XGw/u4AaXrQmiQlrE= -----END CERTIFICATE-----Generated at Sun May 11 15:46:22 2025 by rpki-client