$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b1d2dab-4646-33d5-8ef7-17030be83b0d.roa File: 8b1d2dab-4646-33d5-8ef7-17030be83b0d.roa (raw, json) Hash identifier: I2eBmRc7klijduwpopSXQFRdLgRrefmpbrZymFQvXow= Subject key identifier: 09:71:A7:3D:79:6B:F9:4B:55:82:24:7C:9C:7A:5C:C7:04:15:4B:F2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849AFDB7E3DF387BE6CC8A5F280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b1d2dab-4646-33d5-8ef7-17030be83b0d.roa Signing time: Tue 29 Apr 2025 12:42:32 +0000 ROA not before: Tue 29 Apr 2025 12:42:32 +0000 ROA not after: Mon 28 Jul 2025 12:42:32 +0000 asID: 32651 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:db:7e:3d:f3:87:be:6c:c8:a5:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 12:42:32 2025 GMT Not After : Jul 28 12:42:32 2025 GMT Subject: CN=6d787d70-5432-42c8-8707-53163f1a2112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:5e:a9:d3:d7:b3:fa:62:84:d3:cf:71:4a: e9:e4:d8:79:af:37:e0:59:48:3c:51:a4:a4:b8:29: 2c:9c:1f:e4:ef:a9:86:6b:2a:f7:33:fd:6b:cd:a8: c4:10:47:0b:84:dd:1b:f0:7b:ba:47:ff:6e:33:6f: a8:12:8f:d7:47:41:f6:dc:da:eb:ff:cd:9d:5f:21: 35:9b:fb:2a:cb:c0:26:f2:5c:20:4b:fd:9c:62:42: 8d:5f:b3:79:1a:81:41:b7:a5:fe:92:3b:34:0c:27: 85:62:fc:08:7a:dd:63:1c:c2:79:2a:f5:a9:7c:97: bc:02:0b:e8:45:d1:ab:6c:8f:c8:68:ad:b8:29:54: e0:43:45:40:12:38:77:4e:90:12:0c:f0:e4:20:66: 5a:51:05:ef:dd:90:d0:53:96:1b:42:4a:c4:c9:5c: 0f:23:04:85:4b:61:cc:6b:ca:48:d3:e8:70:09:df: cc:89:88:bd:dc:14:96:1a:8e:71:0b:c3:fa:0c:2f: 12:29:61:bc:b3:9c:56:f7:ca:5b:73:1c:a9:23:20: b4:1b:3c:48:38:10:76:46:78:03:ac:b6:72:4a:c8: b2:e0:68:4c:6f:47:c7:00:7c:0d:8e:57:92:60:1b: ee:22:5a:f6:a0:b5:77:e4:45:71:13:c1:e3:fc:91: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:71:A7:3D:79:6B:F9:4B:55:82:24:7C:9C:7A:5C:C7:04:15:4B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b1d2dab-4646-33d5-8ef7-17030be83b0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:56:9f:eb:2f:f5:57:9a:3c:b5:c0:b5:57:8d:95:bb:b3:37: a1:5a:81:fb:67:d2:31:b3:e6:bd:c7:1c:26:10:ed:d9:d1:dd: bd:d3:73:ab:36:a4:58:f9:f4:6e:8b:78:17:2a:33:1c:b7:df: b9:af:5f:9b:34:f4:59:b2:60:e1:ca:8d:96:6f:8d:6d:ca:87: 1a:c8:08:6b:0e:f5:dc:89:62:fe:50:24:16:1b:6c:b9:c2:fe: 52:17:76:12:ca:06:82:80:44:5b:67:5b:6d:10:4b:5d:01:46: 13:b2:32:db:4b:46:6d:97:b3:d7:35:0f:fe:4d:f3:0e:98:79: 3e:e3:68:8b:91:04:90:ef:43:08:29:af:30:8e:6c:3b:ee:e6: b0:1f:66:20:96:38:cb:9f:11:5c:28:23:d5:62:f7:75:bb:7b: 78:85:cd:7c:e7:ce:55:3d:1b:a8:11:34:ca:45:fd:6a:46:86: 9a:a8:da:1b:be:15:39:00:17:c9:c2:a6:96:f4:79:9f:6e:11: 17:9f:7d:ef:38:d2:de:ef:5c:7f:f7:69:ec:2a:e3:c4:b9:10: 1d:13:49:6c:a0:b9:35:18:64:96:a6:35:44:9c:44:81:42:43: 32:3d:f6:5b:c0:bf:6c:0e:aa:2b:4e:1b:62:33:e7:21:1d:3f: bd:3c:a1:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv234984e+bMil8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyOTEyNDIzMloXDTI1MDcyODEyNDIzMlowLzEtMCsGA1UEAxMk NmQ3ODdkNzAtNTQzMi00MmM4LTg3MDctNTMxNjNmMWEyMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokZeqdPXs/pihNPPcUrp5Nh5rzfgWUg8UaSk uCksnB/k76mGayr3M/1rzajEEEcLhN0b8Hu6R/9uM2+oEo/XR0H23Nrr/82dXyE1 m/sqy8Am8lwgS/2cYkKNX7N5GoFBt6X+kjs0DCeFYvwIet1jHMJ5KvWpfJe8Agvo RdGrbI/IaK24KVTgQ0VAEjh3TpASDPDkIGZaUQXv3ZDQU5YbQkrEyVwPIwSFS2HM a8pI0+hwCd/MiYi93BSWGo5xC8P6DC8SKWG8s5xW98pbcxypIyC0GzxIOBB2RngD rLZySsiy4GhMb0fHAHwNjleSYBvuIlr2oLV35EVxE8Hj/JErJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlxpz15a/lLVYIkfJx6XMcEFUvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGIxZDJkYWItNDY0Ni0z M2Q1LThlZjctMTcwMzBiZTgzYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtWn+sv9VeaPLXAtVeNlbuzN6Fagftn0jGz5r3HHCYQ7dnR3b3Tc6s2 pFj59G6LeBcqMxy337mvX5s09FmyYOHKjZZvjW3KhxrICGsO9dyJYv5QJBYbbLnC /lIXdhLKBoKARFtnW20QS10BRhOyMttLRm2Xs9c1D/5N8w6YeT7jaIuRBJDvQwgp rzCObDvu5rAfZiCWOMufEVwoI9Vi93W7e3iFzXznzlU9G6gRNMpF/WpGhpqo2hu+ FTkAF8nCppb0eZ9uEReffe840t7vXH/3aewq48S5EB0TSWyguTUYZJamNUScRIFC QzI99lvAv2wOqitOG2Iz5yEdP708oUQ= -----END CERTIFICATE-----Generated at Sun May 11 06:28:05 2025 by rpki-client