$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f232066-4ee2-3c05-8aab-df09724c9da0.roa File: 6f232066-4ee2-3c05-8aab-df09724c9da0.roa (raw, json) Hash identifier: J9KHMaIC8WOwV+7yBFzl0fUQ9DNAr/mOIFjKdpKunQY= Subject key identifier: 79:39:03:AD:07:70:21:3A:46:5E:49:E1:37:F8:6A:09:11:A0:49:43 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7F4569A821A371A0C380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f232066-4ee2-3c05-8aab-df09724c9da0.roa Signing time: Tue 29 Apr 2025 12:42:33 +0000 ROA not before: Tue 29 Apr 2025 12:42:33 +0000 ROA not after: Mon 28 Jul 2025 12:42:33 +0000 asID: 397203 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7f:45:69:a8:21:a3:71:a0:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:33 2025 GMT Not After : Jul 28 12:42:33 2025 GMT Subject: CN=7a193ec2-06e4-4217-82ff-241d2d9fad9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:60:3d:7f:d6:b4:4e:28:ed:c5:5b:31:6c: 2e:d6:ec:5d:2d:78:cd:be:e5:d8:a6:02:f9:62:1a: f3:df:b0:2f:8a:56:b1:ae:8b:33:c1:61:6f:ed:4a: fc:f2:5f:f7:e9:31:b0:b9:3f:ff:23:4c:5a:38:5a: ef:bd:9f:21:c9:da:4c:a3:07:8b:6e:1a:77:30:32: f1:c9:31:32:e2:89:96:46:c3:35:53:87:85:51:13: f0:95:2e:ff:19:0b:4c:a0:ad:60:43:f4:b0:e8:f8: 41:94:c0:ea:48:42:c0:82:25:8d:88:91:16:d8:5c: 69:46:60:e0:a2:00:a7:50:97:c3:b4:e1:bd:ec:9f: d4:36:19:1c:ed:8c:34:9d:c6:d4:f6:8d:1d:d9:f0: 4d:38:d7:25:41:97:cc:af:d5:ab:01:ab:2d:95:3b: a3:f7:fa:57:28:7e:38:6e:ef:09:cd:0b:2e:f4:aa: 9f:46:dc:79:57:05:04:2c:fb:22:c1:b2:51:ef:6e: ee:f8:08:ca:6f:d7:78:45:95:8b:c5:38:eb:67:c1: 3e:19:a4:56:45:31:e4:b3:84:64:08:0a:18:ec:94: be:00:93:3f:de:b5:0b:5c:5b:ae:04:c1:23:80:7a: c3:de:05:1e:f5:7f:db:77:1b:2d:8c:f5:0d:6c:8b: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:39:03:AD:07:70:21:3A:46:5E:49:E1:37:F8:6A:09:11:A0:49:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f232066-4ee2-3c05-8aab-df09724c9da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:7c:da:5e:b2:b5:d6:d5:2c:97:6f:0c:07:c2:67:3f:20:64: e0:4f:5e:a9:11:d9:a3:b3:2c:b2:89:70:5a:d6:43:0b:47:9b: fd:86:10:ae:c9:3c:a2:c9:22:41:40:d1:fb:33:9b:a8:f6:2f: 5d:0f:2f:a7:1a:6b:9c:5a:d4:8c:f4:06:99:8c:71:af:19:b5: 5e:77:ce:36:6b:1a:0e:0f:23:f0:b9:50:52:f8:5b:03:ca:f0: 10:17:4f:64:d9:b0:ad:bd:24:87:1a:da:20:c2:e6:a4:37:c2: d7:22:ff:26:4c:ba:91:46:7f:2a:29:7d:25:98:8b:6d:3f:a4: d5:99:a6:d4:3c:10:60:f1:1b:34:c0:8e:7c:39:ab:38:e2:91: 1e:d6:75:70:ad:3a:57:ec:1e:93:37:cc:ee:e8:ea:2c:5e:83: 25:ae:93:c8:ac:cf:21:86:d6:8e:94:3c:de:d1:f8:d8:8d:06: 02:28:43:6d:cb:99:2a:e8:e7:d2:f6:f5:0a:4a:4c:68:5d:40: f5:af:ee:6f:bc:19:2e:d9:70:00:f9:b7:00:65:bd:5c:93:08: 75:fc:51:9f:7b:3d:ac:45:84:72:f6:7e:0f:f8:70:28:87:e2: 73:96:96:2d:d0:ac:a4:cf:9b:32:5c:e8:22:bd:bd:d5:ca:1a: 0c:45:3e:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv239Faagho3Ggw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzM1oXDTI1MDcyODEyNDIzM1owLzEtMCsGA1UEAxMk N2ExOTNlYzItMDZlNC00MjE3LTgyZmYtMjQxZDJkOWZhZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLxgPX/WtE4o7cVbMWwu1uxdLXjNvuXYpgL5 Yhrz37AvilaxroszwWFv7Ur88l/36TGwuT//I0xaOFrvvZ8hydpMoweLbhp3MDLx yTEy4omWRsM1U4eFURPwlS7/GQtMoK1gQ/Sw6PhBlMDqSELAgiWNiJEW2FxpRmDg ogCnUJfDtOG97J/UNhkc7Yw0ncbU9o0d2fBNONclQZfMr9WrAastlTuj9/pXKH44 bu8JzQsu9KqfRtx5VwUELPsiwbJR727u+AjKb9d4RZWLxTjrZ8E+GaRWRTHks4Rk CAoY7JS+AJM/3rULXFuuBMEjgHrD3gUe9X/bdxstjPUNbIsPRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHk5A60HcCE6Rl5J4Tf4agkRoElDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmYyMzIwNjYtNGVlMi0z YzA1LThhYWItZGYwOTcyNGM5ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL182l6ytdbVLJdvDAfCZz8gZOBPXqkR2aOzLLKJcFrWQwtHm/2GEK7J PKLJIkFA0fszm6j2L10PL6caa5xa1Iz0BpmMca8ZtV53zjZrGg4PI/C5UFL4WwPK 8BAXT2TZsK29JIca2iDC5qQ3wtci/yZMupFGfyopfSWYi20/pNWZptQ8EGDxGzTA jnw5qzjikR7WdXCtOlfsHpM3zO7o6ixegyWuk8iszyGG1o6UPN7R+NiNBgIoQ23L mSro59L29QpKTGhdQPWv7m+8GS7ZcAD5twBlvVyTCHX8UZ97PaxFhHL2fg/4cCiH 4nOWli3QrKTPmzJc6CK9vdXKGgxFPgw= -----END CERTIFICATE-----Generated at Sat May 10 23:12:32 2025 by rpki-client